Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/Qj6Cl0opRJAAVlSYylD36ml7DAY.roa
File: Qj6Cl0opRJAAVlSYylD36ml7DAY.roa (raw, json)
Hash identifier: SDH2fyCS8aNmsg1j6extd6fSMJVinIBRf9Mbre/Xa7M=
Subject key identifier: 42:3E:82:97:4A:29:44:90:00:56:54:98:CA:50:F7:EA:69:7B:0C:06
Certificate issuer: /CN=75BD930C745D23E9EA585C04D6B99F95A96322E5
Certificate serial: 09F0
Authority key identifier: 75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/Qj6Cl0opRJAAVlSYylD36ml7DAY.roa
Signing time: Thu 15 Sep 2022 02:49:42 +0000
ROA not before: Thu 15 Sep 2022 02:49:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131143
IP address blocks: 103.126.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75BD930C745D23E9EA585C04D6B99F95A96322E5
Validity
Not Before: Sep 15 02:49:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=423E82974A29449000565498CA50F7EA697B0C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:bc:42:13:ad:7e:d1:83:91:ae:be:1a:04:
e7:53:a8:df:89:cb:0e:28:c3:f1:33:b8:39:4c:f5:
c6:bc:fa:70:27:ab:99:df:70:bd:51:3e:8d:ef:fd:
b6:65:0e:2f:7e:d9:51:ec:91:43:9a:56:3c:a1:df:
59:06:fa:fc:f1:9a:0c:bd:f3:f4:2d:cd:fc:c1:c1:
bf:1a:b9:a8:3b:25:1e:02:18:95:86:e7:2b:71:a5:
e5:6b:80:a5:4e:ca:d9:a2:8a:a9:2d:e2:37:82:39:
39:f3:2f:1f:6f:d7:9d:d4:77:3e:72:31:f9:2e:54:
c6:aa:be:db:4b:f4:1a:52:dc:dd:8a:53:ad:34:6b:
b1:d1:92:5a:35:cf:40:a3:9d:9b:53:26:35:a9:23:
b4:8a:0d:80:0b:c9:4e:ca:1a:ea:61:d7:bc:5d:48:
d6:6f:b3:4e:30:7f:ac:63:d5:69:b8:cd:65:1b:37:
d9:f9:80:b2:30:44:35:6c:3d:87:99:26:0a:9c:8c:
88:98:fb:63:f8:fb:82:f7:f1:ac:2f:f7:cc:b9:2e:
b9:dd:05:d0:1f:ac:e1:5d:01:0a:ae:55:2d:03:84:
8a:4e:a8:f8:60:5b:9e:11:f9:b3:9b:a0:a7:ea:1d:
01:20:15:dd:d0:b2:78:a5:6b:e8:e2:16:ac:47:ac:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:82:97:4A:29:44:90:00:56:54:98:CA:50:F7:EA:69:7B:0C:06
X509v3 Authority Key Identifier:
keyid:75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/Qj6Cl0opRJAAVlSYylD36ml7DAY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.164.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e8:92:ed:5f:9b:1b:70:28:a8:f2:a0:a3:6a:ee:c6:d7:0d:
58:8c:bf:6f:4a:71:36:68:b1:e3:49:90:99:cb:31:f1:9f:bf:
b3:2c:6b:f5:42:a7:b4:bf:ed:34:93:78:cb:a2:d7:ad:e3:86:
61:6b:05:4b:35:c8:fe:61:73:03:c5:81:e6:fd:48:c4:c3:3a:
84:e8:fc:ca:93:ad:b4:e5:80:a0:a3:9c:a0:8e:c0:ba:38:a1:
48:9a:3d:3d:d7:e6:12:92:f4:eb:19:76:e9:8e:a5:9c:18:9a:
77:ad:f1:89:40:f9:42:35:f0:8b:63:03:bc:eb:21:8f:ef:6b:
8e:ae:0f:32:a2:66:e1:77:38:98:ca:10:4c:f8:0b:c1:21:96:
3c:4a:25:ff:66:0c:fe:26:9c:bf:21:42:92:a0:f5:88:72:01:
75:21:f5:14:ff:e7:ce:a2:a4:c7:9c:10:cf:ce:07:38:36:80:
47:02:b3:7d:40:2d:08:8d:62:b4:33:f7:74:52:30:30:2d:9f:
46:fa:17:fb:d0:74:22:af:a3:88:12:af:2d:df:77:b5:07:a5:
f2:cf:2d:29:f2:a6:2b:44:9c:e6:fc:77:9b:39:46:a4:6e:6c:
f0:08:09:21:c3:73:db:a8:55:0f:4f:83:25:cd:20:06:3a:b8:
a4:22:79:d1
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
RDkzMEM3NDVEMjNFOUVBNTg1QzA0RDZCOTlGOTVBOTYzMjJFNTAeFw0yMjA5MTUw
MjQ5NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQyM0U4Mjk3NEEyOTQ0
OTAwMDU2NTQ5OENBNTBGN0VBNjk3QjBDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjz7xCE61+0YORrr4aBOdTqN+Jyw4ow/EzuDlM9ca8+nAnq5nf
cL1RPo3v/bZlDi9+2VHskUOaVjyh31kG+vzxmgy98/QtzfzBwb8auag7JR4CGJWG
5ytxpeVrgKVOytmiiqkt4jeCOTnzLx9v153Udz5yMfkuVMaqvttL9BpS3N2KU600
a7HRklo1z0CjnZtTJjWpI7SKDYALyU7KGuph17xdSNZvs04wf6xj1Wm4zWUbN9n5
gLIwRDVsPYeZJgqcjIiY+2P4+4L38awv98y5LrndBdAfrOFdAQquVS0DhIpOqPhg
W54R+bOboKfqHQEgFd3Qsnila+jiFqxHrN9LAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUQj6Cl0opRJAAVlSYylD36ml7DAYwHwYDVR0jBBgwFoAUdb2TDHRdI+nqWFwE
1rmflaljIuUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU
UlVTVC9kYjJUREhSZEktbnFXRndFMXJtZmxhbGpJdVUuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL2RiMlRESFJkSS1ucVdGd0Uxcm1mbGFsakl1VS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NISU5BVFJVU1QvUWo2Q2wwb3BS
SkFBVmxTWXlsRDM2bWw3REFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmd+pDANBgkqhkiG9w0BAQsFAAOCAQEAOeiS7V+bG3AoqPKgo2ruxtcN
WIy/b0pxNmix40mQmcsx8Z+/syxr9UKntL/tNJN4y6LXreOGYWsFSzXI/mFzA8WB
5v1IxMM6hOj8ypOttOWAoKOcoI7AujihSJo9PdfmEpL06xl26Y6lnBiad63xiUD5
QjXwi2MDvOshj+9rjq4PMqJm4Xc4mMoQTPgLwSGWPEol/2YM/iacvyFCkqD1iHIB
dSH1FP/nzqKkx5wQz84HODaARwKzfUAtCI1itDP3dFIwMC2fRvoX+9B0Iq+jiBKv
Ld93tQel8s8tKfKmK0Sc5vx3mzlGpG5s8AgJIcNz26hVD0+DJc0gBjq4pCJ50Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:16 2025 by rpki-client