Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa
File: 9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa (raw, json)
Hash identifier: m76nZIgp7hfA6sPAafhctr17ODpXqqQDhmbEuSPVy8c=
Subject key identifier: F4:36:C9:67:56:63:DB:10:BD:BA:5F:32:0A:4A:4B:B6:8E:6C:E0:5D
Certificate issuer: /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial: 08
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa
Signing time: Tue 06 Dec 2022 11:13:09 +0000
ROA not before: Tue 06 Dec 2022 11:13:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38136
IP address blocks: 103.36.24.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Validity
Not Before: Dec 6 11:13:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F436C9675663DB10BDBA5F320A4A4BB68E6CE05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:cb:97:c5:58:1d:b2:89:66:f8:d9:ec:04:
b5:f9:60:24:3a:ce:a1:74:4e:6b:2f:6d:fe:24:7a:
c9:e4:68:f3:bd:84:a2:f1:7a:ec:f6:97:ca:70:a0:
32:e5:3e:a5:57:9c:a5:ee:ec:ce:75:2d:71:b1:c7:
58:f0:b5:5a:df:70:ca:60:c9:aa:b4:b5:00:3b:3b:
e6:df:ed:92:8f:35:1d:81:3c:a3:74:32:ea:fa:66:
3c:6d:4a:a3:cc:09:7b:85:83:37:a8:14:26:c1:99:
d1:f3:34:09:17:ce:b0:5a:7e:a4:29:cd:45:27:04:
19:2a:30:34:d5:51:0c:c8:fe:72:50:05:7d:d5:74:
9e:0f:f3:ca:54:d4:ed:1a:ad:1d:41:b3:70:a0:db:
be:3b:3a:7c:b3:81:92:d0:f1:a9:7e:6f:c5:a0:72:
0a:ce:62:23:69:37:4a:c1:a3:3d:be:db:46:80:e2:
28:5b:78:26:53:66:a6:16:0e:12:39:08:b2:9e:62:
b4:7e:0c:ed:82:4b:ee:1a:ee:40:cf:c2:7a:08:71:
29:5a:71:8c:19:79:e0:23:dc:ae:33:f0:8e:05:52:
fb:ad:bf:87:0d:a9:e5:f8:d9:a4:c3:ac:a3:88:8c:
71:c5:f9:fa:bf:03:41:6e:d0:30:69:72:e8:b1:07:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:36:C9:67:56:63:DB:10:BD:BA:5F:32:0A:4A:4B:B6:8E:6C:E0:5D
X509v3 Authority Key Identifier:
keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.24.0/23
Signature Algorithm: sha256WithRSAEncryption
95:d1:5f:4a:00:b6:94:46:b7:de:01:df:c7:70:44:f2:c2:fe:
47:c7:71:52:0a:ae:53:ee:91:2f:5a:9c:aa:fa:53:52:1e:8c:
ba:d0:bb:0d:48:f1:1f:e5:3b:e1:b3:35:98:7f:bc:38:e2:0e:
76:35:f2:ab:dd:58:66:32:25:6e:5b:20:e0:2c:59:62:56:fb:
b3:53:cd:b7:84:70:55:e7:a2:5b:b8:cb:58:e8:0a:6d:30:44:
0a:b3:46:45:7c:9e:35:84:d2:5c:94:1b:aa:59:25:36:33:92:
fb:df:52:ee:4a:58:d2:9a:d2:4f:f9:a3:43:3b:c8:73:01:21:
a0:74:60:4d:71:a8:dd:03:c6:5a:54:4e:7a:54:ee:c1:39:4c:
13:a7:31:c4:26:7c:d3:fa:8d:5a:a5:ae:b3:97:6a:72:b4:8a:
40:83:07:69:72:12:b9:54:d9:85:5a:42:a7:c9:04:1f:79:34:
cd:dc:59:41:81:0d:b6:85:9e:b8:d2:e5:fe:b7:72:f2:18:f2:
d2:76:24:1a:92:c7:62:76:a5:f1:64:fd:aa:cc:14:88:cf:6a:
f2:16:6c:20:c8:2f:e9:dd:f6:dd:4e:8b:69:13:24:90:89:89:
3f:3d:c2:74:d7:a2:bd:03:94:31:cc:09:de:cc:74:63:75:96:
99:28:85:4e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNzM2
Q0ZGMTk0ODc0MDYxNEQwMzIxRTYzQjg0MDNFQjlBQjk3NDhEMB4XDTIyMTIwNjEx
MTMwOVoXDTIzMDkwNjAzMDAzNVowMzExMC8GA1UEAxMoRjQzNkM5Njc1NjYzREIx
MEJEQkE1RjMyMEE0QTRCQjY4RTZDRTA1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMi0y5fFWB2yiWb42ewEtflgJDrOoXROay9t/iR6yeRo872EovF6
7PaXynCgMuU+pVecpe7sznUtcbHHWPC1Wt9wymDJqrS1ADs75t/tko81HYE8o3Qy
6vpmPG1Ko8wJe4WDN6gUJsGZ0fM0CRfOsFp+pCnNRScEGSowNNVRDMj+clAFfdV0
ng/zylTU7RqtHUGzcKDbvjs6fLOBktDxqX5vxaByCs5iI2k3SsGjPb7bRoDiKFt4
JlNmphYOEjkIsp5itH4M7YJL7hruQM/CeghxKVpxjBl54CPcrjPwjgVS+62/hw2p
5fjZpMOso4iMccX5+r8DQW7QMGly6LEHvo8CAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBT0NslnVmPbEL26XzIKSku2jmzgXTAfBgNVHSMEGDAWgBSnNs/xlIdAYU0DIeY7
hAPrmrl0jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS
oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DT0NIRU5U
RUsvcHpiUDhaU0hRR0ZOQXlIbU80UUQ2NXE1ZEkwLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9wemJQOFpTSFFHRk5BeUhtTzRRRDY1cTVkSTAuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DT0NIRU5URUsvOURiSloxWmoyeEM5
dWw4eUNrcEx0bzVzNEYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3
bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWckGDANBgkqhkiG9w0BAQsFAAOCAQEAldFfSgC2lEa33gHfx3BE8sL+R8dx
UgquU+6RL1qcqvpTUh6MutC7DUjxH+U74bM1mH+8OOIOdjXyq91YZjIlblsg4CxZ
Ylb7s1PNt4RwVeeiW7jLWOgKbTBECrNGRXyeNYTSXJQbqlklNjOS+99S7kpY0prS
T/mjQzvIcwEhoHRgTXGo3QPGWlROelTuwTlME6cxxCZ80/qNWqWus5dqcrSKQIMH
aXISuVTZhVpCp8kEH3k0zdxZQYENtoWeuNLl/rdy8hjy0nYkGpLHYnal8WT9qswU
iM9q8hZsIMgv6d323U6LaRMkkImJPz3CdNeivQOUMcwJ3sx0Y3WWmSiFTg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:55 2025 by rpki-client