Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCT/BDQ689M3f2aNnVZUszfHLAH9YTo.roa
File: BDQ689M3f2aNnVZUszfHLAH9YTo.roa (raw, json)
Hash identifier: TziXwHmQuVsKOeYH5aRI9Q1wDcQBg83r5SflvIn29Po=
Subject key identifier: 04:34:3A:F3:D3:37:7F:66:8D:9D:56:54:B3:37:C7:2C:01:FD:61:3A
Certificate issuer: /CN=9B062D74C7F512F04AE60955C5456FC19755337F
Certificate serial: 0A39
Authority key identifier: 9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/BDQ689M3f2aNnVZUszfHLAH9YTo.roa
Signing time: Thu 15 Sep 2022 02:50:22 +0000
ROA not before: Thu 15 Sep 2022 02:50:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131601
IP address blocks: 103.252.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2617 (0xa39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B062D74C7F512F04AE60955C5456FC19755337F
Validity
Not Before: Sep 15 02:50:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04343AF3D3377F668D9D5654B337C72C01FD613A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:a2:eb:db:b7:e3:8c:c5:b6:28:0e:0c:57:
d6:3e:cb:06:8e:da:ea:42:85:ad:f7:a2:c9:46:a2:
21:86:9e:9a:4d:d8:0d:0e:dd:fd:74:04:d3:96:0f:
55:be:d8:2e:ad:03:0e:af:31:89:f7:f7:a1:f5:25:
60:67:a6:e1:63:cb:66:ae:9b:61:1f:44:d8:b7:cf:
f1:f8:ab:d9:d0:55:8d:89:18:d4:ef:2b:68:1a:b9:
3d:70:80:68:8c:75:47:1f:3d:b4:0e:2d:d3:f5:72:
7d:56:4a:e8:0e:e6:ff:4d:35:31:3b:1c:f7:29:e7:
31:f8:bf:be:c1:c1:34:72:69:40:85:ff:56:5c:9b:
59:2d:20:e0:95:6d:67:49:c5:70:0c:6e:02:ff:d0:
5a:b8:4c:b0:56:8b:bb:89:cb:c8:1f:58:bc:75:72:
08:a4:be:7d:0a:c1:6a:82:ce:d0:ec:59:f6:20:bc:
31:87:01:ab:f4:a5:ee:cd:62:1b:3f:ca:0b:bc:65:
84:9e:42:3c:46:b2:8c:b1:0b:bc:83:4d:b9:4b:7d:
34:7e:d0:c6:ef:9c:8b:58:67:cd:6a:55:63:e0:5f:
f0:04:e2:93:51:2c:97:98:9c:a9:7d:a3:d5:0c:ef:
8e:5d:2c:be:d1:d6:1a:99:ed:41:eb:06:32:78:52:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:3A:F3:D3:37:7F:66:8D:9D:56:54:B3:37:C7:2C:01:FD:61:3A
X509v3 Authority Key Identifier:
keyid:9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/BDQ689M3f2aNnVZUszfHLAH9YTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.196.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c2:6a:c6:6c:a0:da:dc:da:f7:61:de:be:3e:8c:f4:9c:9c:
e8:92:b9:d9:2c:a3:5e:f0:2b:65:77:c6:15:59:39:ec:c2:bf:
c6:c7:0b:ee:78:c6:73:57:01:9e:fa:c5:1b:96:5c:37:03:c9:
86:8e:44:c8:ea:2e:4f:00:94:90:b4:66:78:0d:08:28:75:16:
98:4a:6b:6c:0f:94:42:25:5c:fc:9d:df:a0:d3:ed:e0:1e:0e:
ae:5b:8c:22:15:2a:4e:c1:06:37:d1:49:32:44:3b:20:a3:6c:
e2:3f:a3:90:8c:17:cc:81:fa:75:88:c8:13:a1:8a:4b:39:43:
2d:de:e2:5b:f6:7a:4b:27:70:5e:62:ec:fb:83:c3:74:4f:b7:
1b:d3:e6:ad:48:ce:e3:ca:d2:3b:d6:2b:e8:b7:f4:01:77:ab:
33:8f:fe:d9:c2:13:7c:cd:fa:5e:06:4b:2a:10:55:26:d4:42:
f1:ca:ab:b7:57:d6:3d:38:4d:a3:b6:fd:06:df:4e:ba:f0:80:
6b:eb:1b:31:4c:b2:20:70:fc:1b:1f:d2:76:75:99:4f:0b:cf:
7f:d3:fc:1e:0e:d1:8d:f1:e2:68:cb:ac:2c:6d:38:ef:f3:45:
f2:17:cf:5e:4a:e2:c7:81:6e:ab:13:fa:28:df:f5:68:f1:45:
29:07:61:19
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUIw
NjJENzRDN0Y1MTJGMDRBRTYwOTU1QzU0NTZGQzE5NzU1MzM3RjAeFw0yMjA5MTUw
MjUwMjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA0MzQzQUYzRDMzNzdG
NjY4RDlENTY1NEIzMzdDNzJDMDFGRDYxM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDBqLr27fjjMW2KA4MV9Y+ywaO2upCha33oslGoiGGnppN2A0O
3f10BNOWD1W+2C6tAw6vMYn396H1JWBnpuFjy2aum2EfRNi3z/H4q9nQVY2JGNTv
K2gauT1wgGiMdUcfPbQOLdP1cn1WSugO5v9NNTE7HPcp5zH4v77BwTRyaUCF/1Zc
m1ktIOCVbWdJxXAMbgL/0Fq4TLBWi7uJy8gfWLx1cgikvn0KwWqCztDsWfYgvDGH
Aav0pe7NYhs/ygu8ZYSeQjxGsoyxC7yDTblLfTR+0MbvnItYZ81qVWPgX/AE4pNR
LJeYnKl9o9UM745dLL7R1hqZ7UHrBjJ4UoIlAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUBDQ689M3f2aNnVZUszfHLAH9YTowHwYDVR0jBBgwFoAUmwYtdMf1EvBK5glV
xUVvwZdVM38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL213
WXRkTWYxRXZCSzVnbFZ4VVZ2d1pkVk0zOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
bXdZdGRNZjFFdkJLNWdsVnhVVnZ3WmRWTTM4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL0JEUTY4OU0zZjJhTm5WWlVzemZITEFI
OVlUby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn/MQwDQYJ
KoZIhvcNAQELBQADggEBABTCasZsoNrc2vdh3r4+jPScnOiSudkso17wK2V3xhVZ
OezCv8bHC+54xnNXAZ76xRuWXDcDyYaORMjqLk8AlJC0ZngNCCh1FphKa2wPlEIl
XPyd36DT7eAeDq5bjCIVKk7BBjfRSTJEOyCjbOI/o5CMF8yB+nWIyBOhiks5Qy3e
4lv2eksncF5i7PuDw3RPtxvT5q1IzuPK0jvWK+i39AF3qzOP/tnCE3zN+l4GSyoQ
VSbUQvHKq7dX1j04TaO2/QbfTrrwgGvrGzFMsiBw/Bsf0nZ1mU8Lz3/T/B4O0Y3x
4mjLrCxtOO/zRfIXz15K4seBbqsT+ijf9WjxRSkHYRk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:31 2025 by rpki-client