Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/hB2OCOtWT5zOFriIrJ1MJQNY4gw.roa
File: hB2OCOtWT5zOFriIrJ1MJQNY4gw.roa (raw, json)
Hash identifier: OvFBp+iSlMUzvQ0VBTQLF2Qvy2rdyJqKMxyxu3FcChM=
Subject key identifier: 84:1D:8E:08:EB:56:4F:9C:CE:16:B8:88:AC:9D:4C:25:03:58:E2:0C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D3D
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hB2OCOtWT5zOFriIrJ1MJQNY4gw.roa
Signing time: Wed 26 Apr 2023 10:31:42 +0000
ROA not before: Wed 26 Apr 2023 10:31:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.222.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3389 (0xd3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:42 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=841D8E08EB564F9CCE16B888AC9D4C250358E20C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:8d:d6:4a:cc:25:ab:ec:2c:50:49:c1:d5:
40:fa:b3:97:b6:90:59:47:30:2c:2a:8f:80:bc:35:
b8:d2:f0:c4:80:a3:e5:1d:e9:1c:60:1c:84:ba:5d:
d7:5b:78:61:0f:dc:c1:41:19:da:33:aa:31:51:d7:
48:c3:6a:b9:ff:e4:fc:b9:8b:9a:e3:68:13:7b:5c:
51:a3:fa:80:a0:70:6e:ac:f7:2c:7a:92:85:27:e0:
e9:57:e0:24:d8:55:df:e7:62:3e:67:0b:4f:98:49:
e9:00:00:b3:cf:cc:85:7b:3f:f4:f4:e6:d5:ba:c2:
71:91:b0:3a:45:4f:48:4b:84:29:66:c2:66:c3:dd:
ec:65:12:f2:8e:0d:7c:7b:45:b9:22:e1:8d:25:31:
76:1f:18:16:4a:66:37:b3:71:48:87:25:35:1e:20:
15:e0:11:41:e5:33:5a:88:75:d1:a1:56:0d:94:67:
57:54:88:4a:37:dc:22:e4:28:ca:23:0b:36:07:a7:
a7:da:e3:e1:34:0b:58:e4:9d:01:e2:b4:5c:7a:ce:
cf:2b:49:a2:af:8f:5b:87:50:95:c9:c2:33:74:13:
dd:91:ce:79:51:15:56:74:3f:e3:f1:77:e5:0d:5e:
77:f1:f1:2f:00:41:63:ac:0c:04:d9:e0:f1:de:4b:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:8E:08:EB:56:4F:9C:CE:16:B8:88:AC:9D:4C:25:03:58:E2:0C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hB2OCOtWT5zOFriIrJ1MJQNY4gw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:56:1a:94:0a:2e:e7:de:53:14:ff:ae:d8:f2:4b:6a:4e:09:
03:1a:7d:ea:05:4c:6b:6c:bf:00:df:ce:8b:43:fb:e1:e6:6b:
c7:1e:47:1d:11:3d:2b:79:a2:67:d3:7d:91:9f:8b:b9:a8:3d:
38:d5:45:3d:b7:af:05:6c:00:73:c4:e9:b3:85:46:37:45:a8:
50:95:a3:84:69:af:0d:63:ec:1d:6a:44:ae:3a:02:40:0b:2e:
bd:a5:1f:18:3d:60:e8:89:35:d7:84:6b:25:aa:37:fb:25:c1:
06:37:9d:3c:c5:b5:f6:9b:bc:04:fa:96:46:18:35:f3:bb:58:
a0:7a:9e:2a:d1:37:0e:5c:27:4a:f2:12:4a:60:34:7c:01:17:
cf:f8:0d:4f:f2:e2:c8:2d:c0:2b:59:01:47:0b:d9:cb:2d:69:
47:3d:99:51:db:06:23:a4:75:2b:c4:f9:9e:d6:96:e4:37:b0:
d4:70:aa:e3:8d:1e:91:e4:c2:b7:a3:b8:02:2d:c5:31:4a:4c:
72:98:ed:fd:c4:c1:ec:95:fc:07:a7:0e:ae:71:9b:5d:31:78:
54:d5:eb:2f:2f:a4:ec:29:5e:6d:68:4d:1f:1d:64:6d:80:c5:
36:fe:d3:dd:c9:1b:46:0d:c4:25:71:24:15:25:bf:b5:a6:4d:
e3:e3:bd:3d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA0MjYx
MDMxNDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg0MUQ4RTA4RUI1NjRG
OUNDRTE2Qjg4OEFDOUQ0QzI1MDM1OEUyMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnS43WSswlq+wsUEnB1UD6s5e2kFlHMCwqj4C8NbjS8MSAo+Ud
6RxgHIS6XddbeGEP3MFBGdozqjFR10jDarn/5Py5i5rjaBN7XFGj+oCgcG6s9yx6
koUn4OlX4CTYVd/nYj5nC0+YSekAALPPzIV7P/T05tW6wnGRsDpFT0hLhClmwmbD
3exlEvKODXx7Rbki4Y0lMXYfGBZKZjezcUiHJTUeIBXgEUHlM1qIddGhVg2UZ1dU
iEo33CLkKMojCzYHp6fa4+E0C1jknQHitFx6zs8rSaKvj1uHUJXJwjN0E92RznlR
FVZ0P+Pxd+UNXnfx8S8AQWOsDATZ4PHeS1kRAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUhB2OCOtWT5zOFriIrJ1MJQNY4gwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvaEIyT0NPdFdUNXpPRnJpSXJKMU1K
UU5ZNGd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveADAN
BgkqhkiG9w0BAQsFAAOCAQEAP1YalAou595TFP+u2PJLak4JAxp96gVMa2y/AN/O
i0P74eZrxx5HHRE9K3miZ9N9kZ+Luag9ONVFPbevBWwAc8Tps4VGN0WoUJWjhGmv
DWPsHWpErjoCQAsuvaUfGD1g6Ik114RrJao3+yXBBjedPMW19pu8BPqWRhg187tY
oHqeKtE3DlwnSvISSmA0fAEXz/gNT/LiyC3AK1kBRwvZyy1pRz2ZUdsGI6R1K8T5
ntaW5Dew1HCq440ekeTCt6O4Ai3FMUpMcpjt/cTB7JX8B6cOrnGbXTF4VNXrLy+k
7ClebWhNHx1kbYDFNv7T3ckbRg3EJXEkFSW/taZN4+O9PQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:49 2025 by rpki-client