Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/PwJNFGyBFUVEtVc8eAfwteBtg_4.roa
File: PwJNFGyBFUVEtVc8eAfwteBtg_4.roa (raw, json)
Hash identifier: G0fhiLagZgxHInr8riEHLOeytzswvgltRNwxLTEABFo=
Subject key identifier: 3F:02:4D:14:6C:81:15:45:44:B5:57:3C:78:07:F0:B5:E0:6D:83:FE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PwJNFGyBFUVEtVc8eAfwteBtg_4.roa
Signing time: Thu 15 Sep 2022 02:48:14 +0000
ROA not before: Thu 15 Sep 2022 02:48:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 20940
IP address blocks: 203.66.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3F024D146C81154544B5573C7807F0B5E06D83FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:82:bc:c7:a2:70:c1:85:97:fb:08:ad:1d:
f9:1f:d0:b7:a3:10:98:61:5a:be:19:c1:8c:e8:dc:
f3:e2:6d:94:b6:b2:a2:0f:41:81:2d:cf:6c:1a:de:
78:c8:e5:41:5d:52:b2:86:3e:d9:79:fa:64:6f:05:
fa:d0:76:3c:6e:de:91:f8:50:02:46:43:9c:9d:de:
f0:30:8b:65:c4:a1:20:7e:a3:76:9d:59:45:4e:ce:
ae:7f:4f:d3:5d:93:1f:08:17:90:6e:5a:13:0e:0a:
cb:3f:2e:27:c4:b2:6c:fa:40:ed:02:c2:70:35:e6:
7a:28:4f:19:eb:24:e7:92:63:44:ff:8e:51:93:06:
d6:44:74:bc:57:f8:50:52:c0:c3:94:70:90:50:64:
d7:0c:11:2d:88:ab:61:0d:d2:5c:fa:55:73:ac:08:
76:65:d5:26:70:11:73:82:95:8a:6c:2c:2d:62:a4:
cb:1a:e6:67:5e:00:a7:91:ef:08:44:15:6d:d7:ef:
e3:2c:59:99:d4:1b:de:8c:f3:a2:0b:f4:af:bb:7b:
35:1b:4d:88:7b:fe:5e:36:88:d4:37:70:b0:5f:e4:
4f:d0:12:18:d9:ec:f1:89:95:bf:0b:5f:53:d8:6a:
e8:5c:8d:ce:2c:48:35:1a:67:73:f0:08:8b:db:bf:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:4D:14:6C:81:15:45:44:B5:57:3C:78:07:F0:B5:E0:6D:83:FE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/PwJNFGyBFUVEtVc8eAfwteBtg_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:10:a7:92:48:9a:3d:71:39:72:ff:1f:1c:c1:b3:0d:c0:45:
c7:9c:c1:a0:10:e3:b2:82:25:00:bf:72:06:b4:ee:47:c2:2f:
f5:60:ba:64:65:11:79:34:d1:e1:5d:f9:48:ca:73:33:61:d5:
9e:ae:49:02:c4:db:57:78:33:df:f2:76:07:5a:a7:9d:78:b5:
8e:25:1b:b5:91:12:a9:f2:cc:09:19:9d:e8:b0:fc:40:82:ec:
db:9c:a2:b2:c4:ec:95:7a:17:0a:3b:3a:91:f6:b2:7d:8b:fb:
4e:82:55:c4:e3:b7:a4:95:c8:41:6e:4f:16:f0:d0:ab:2c:50:
89:8d:0c:82:8c:f1:45:54:46:cd:db:53:71:c7:d1:46:cf:60:
d4:fe:a9:83:8f:ed:06:8b:40:08:a0:46:e9:05:1a:15:e6:64:
8f:46:1a:f5:db:a2:cc:a4:e4:4b:28:5d:1b:a7:b7:b9:fe:a6:
e6:1e:80:3e:e0:35:8b:4c:fa:3c:c2:1b:20:5a:8f:60:21:62:
ad:ba:3e:ff:cc:0b:72:09:cc:0e:32:f5:00:41:de:8b:4d:57:
98:cb:9c:4c:29:8d:ac:a2:58:2e:26:bc:03:0c:1c:62:06:de:
1d:9c:88:a8:76:62:a8:d6:d9:37:bb:1e:79:28:90:d8:a4:77:
5d:64:bb:28
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNGMDI0RDE0NkM4MTE1
NDU0NEI1NTczQzc4MDdGMEI1RTA2RDgzRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxnIK8x6JwwYWX+witHfkf0LejEJhhWr4ZwYzo3PPibZS2sqIP
QYEtz2wa3njI5UFdUrKGPtl5+mRvBfrQdjxu3pH4UAJGQ5yd3vAwi2XEoSB+o3ad
WUVOzq5/T9Ndkx8IF5BuWhMOCss/LifEsmz6QO0CwnA15nooTxnrJOeSY0T/jlGT
BtZEdLxX+FBSwMOUcJBQZNcMES2Iq2EN0lz6VXOsCHZl1SZwEXOClYpsLC1ipMsa
5mdeAKeR7whEFW3X7+MsWZnUG96M86IL9K+7ezUbTYh7/l42iNQ3cLBf5E/QEhjZ
7PGJlb8LX1PYauhcjc4sSDUaZ3PwCIvbv9JlAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUPwJNFGyBFUVEtVc8eAfwteBtg/4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Qd0pORkd5QkZVVkV0VmM4ZUFm
d3RlQnRnXzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Li
MA0GCSqGSIb3DQEBCwUAA4IBAQBfEKeSSJo9cTly/x8cwbMNwEXHnMGgEOOygiUA
v3IGtO5Hwi/1YLpkZRF5NNHhXflIynMzYdWerkkCxNtXeDPf8nYHWqedeLWOJRu1
kRKp8swJGZ3osPxAguzbnKKyxOyVehcKOzqR9rJ9i/tOglXE47eklchBbk8W8NCr
LFCJjQyCjPFFVEbN21Nxx9FGz2DU/qmDj+0Gi0AIoEbpBRoV5mSPRhr126LMpORL
KF0bp7e5/qbmHoA+4DWLTPo8whsgWo9gIWKtuj7/zAtyCcwOMvUAQd6LTVeYy5xM
KY2solguJrwDDBxiBt4dnIiodmKo1tk3ux55KJDYpHddZLso
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org