Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/GNh18Q8n2g-t2FE_hD9KAxTFeyU.roa
File: GNh18Q8n2g-t2FE_hD9KAxTFeyU.roa (raw, json)
Hash identifier: seDorc33TN+OtWBihvU/hd7uQ3OHX53rseYS4rAxB88=
Subject key identifier: 18:D8:75:F1:0F:27:DA:0F:AD:D8:51:3F:84:3F:4A:03:14:C5:7B:25
Certificate issuer: /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial: 66
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/GNh18Q8n2g-t2FE_hD9KAxTFeyU.roa
Signing time: Wed 09 Nov 2022 19:19:32 +0000
ROA not before: Wed 09 Nov 2022 19:19:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18041
IP address blocks: 103.160.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Validity
Not Before: Nov 9 19:19:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=18D875F10F27DA0FADD8513F843F4A0314C57B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:af:79:df:42:5d:e2:40:9b:03:8f:2e:78:
88:12:79:1d:a5:8f:ca:3d:7c:0a:4d:e0:03:25:79:
62:e7:65:cf:5b:a0:ff:02:c2:ce:ad:ad:80:d3:e1:
56:16:57:5f:b4:dd:19:14:f5:ba:81:d0:e6:eb:8b:
b4:aa:0f:21:1c:1c:d5:4f:fa:25:98:a8:ac:8f:09:
53:fc:20:db:7c:61:a1:61:6d:84:2c:b4:c5:09:95:
c4:bd:ff:97:67:1a:08:5c:d4:69:f5:34:b3:32:27:
c4:69:07:36:3c:b0:9c:29:5f:31:5f:41:e5:08:3c:
36:e2:8e:a3:25:69:f5:b6:8e:86:90:68:51:15:c0:
00:1d:43:b2:00:d1:fc:32:bb:d2:32:e1:33:7e:e2:
59:94:2f:9b:3b:5c:96:1f:94:ae:8b:3f:ae:ff:3e:
a6:07:c5:db:0a:7f:8f:fd:c3:70:08:0e:7f:0f:c6:
b6:1f:b6:a0:32:a5:05:44:15:1f:f2:2b:de:b0:25:
90:5f:d7:61:5b:00:fa:68:20:b1:f5:76:27:91:2c:
c6:df:21:cf:80:8b:ab:47:35:ae:74:85:1f:a1:0f:
88:83:12:f8:a0:7c:8f:9d:2a:ce:ad:b6:19:e4:8d:
40:11:a5:2b:de:62:cb:8c:85:60:4c:f9:af:ef:36:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:75:F1:0F:27:DA:0F:AD:D8:51:3F:84:3F:4A:03:14:C5:7B:25
X509v3 Authority Key Identifier:
keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/GNh18Q8n2g-t2FE_hD9KAxTFeyU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.180.0/23
Signature Algorithm: sha256WithRSAEncryption
86:ae:56:9c:41:61:ec:5a:c0:a0:9f:fe:80:c0:84:fe:fb:e0:
0c:43:11:04:a7:d4:5d:a5:7d:6e:7b:f8:0c:90:d0:4e:da:ef:
c6:2c:8c:75:42:96:43:47:1d:31:ca:95:18:21:09:aa:bb:88:
e7:ea:91:bf:24:68:bd:ee:16:37:f3:74:03:d5:c2:9d:bf:ea:
86:45:c6:f5:f7:73:d8:7a:49:6d:87:d8:89:74:48:a7:88:db:
ea:96:52:89:8f:77:dd:56:80:fc:e4:a2:a4:0f:21:20:06:24:
6c:23:1a:e6:cf:16:95:5d:52:92:07:af:ff:2e:68:79:2a:39:
f9:fd:33:79:19:30:bc:67:9f:71:e2:9a:ea:0b:dd:ab:2e:9a:
db:28:c8:fd:97:ea:ad:29:5c:99:54:83:fa:f9:3e:80:5b:85:
d4:da:c0:e0:22:03:6f:41:cb:0b:1d:75:c1:e1:5c:fe:44:56:
f8:80:24:54:b4:62:0f:49:d0:da:ca:44:7a:25:68:3b:e5:6c:
c4:0c:62:2c:d9:31:ff:84:da:4d:0f:cb:e6:80:ea:b4:9d:5b:
38:b8:1a:e5:aa:4b:bc:f8:2b:25:11:a3:5e:07:04:19:b0:d1:
43:cd:67:56:09:2c:82:58:30:8f:7c:bf:35:1c:60:10:2d:bf:
8f:85:3a:4d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkY0
NDFCNTdDODZCRDlEMTkzNDUxQTAwNUQyNkNFMUEzQzZERUU3MB4XDTIyMTEwOTE5
MTkzMloXDTIzMDkwNjAzMDAzNVowMzExMC8GA1UEAxMoMThEODc1RjEwRjI3REEw
RkFERDg1MTNGODQzRjRBMDMxNEM1N0IyNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALZCr3nfQl3iQJsDjy54iBJ5HaWPyj18Ck3gAyV5Yudlz1ug/wLC
zq2tgNPhVhZXX7TdGRT1uoHQ5uuLtKoPIRwc1U/6JZiorI8JU/wg23xhoWFthCy0
xQmVxL3/l2caCFzUafU0szInxGkHNjywnClfMV9B5Qg8NuKOoyVp9baOhpBoURXA
AB1DsgDR/DK70jLhM37iWZQvmztclh+Uros/rv8+pgfF2wp/j/3DcAgOfw/Gth+2
oDKlBUQVH/Ir3rAlkF/XYVsA+mggsfV2J5Esxt8hz4CLq0c1rnSFH6EPiIMS+KB8
j50qzq22GeSNQBGlK95iy4yFYEz5r+82HycCAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBQY2HXxDyfaD63YUT+EP0oDFMV7JTAfBgNVHSMEGDAWgBQ79EG1fIa9nRk0UaAF
0mzho8be5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GA1UdHwRXMFUwU6BR
oE+GTXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FUkFZSU5G
Ty9PX1JCdFh5R3ZaMFpORkdnQmRKczRhUEczdWMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL09fUkJ0WHlHdlowWk5GR2dCZEpzNGFQRzN1Yy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGeBggrBgEFBQcBCwSBkTCBjjBZBggrBgEFBQcwC4ZNcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VSQVlJTkZPL0dOaDE4UThuMmctdDJG
RV9oRDlLQXhURmV5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25p
Yy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnoLQwDQYJKoZIhvcNAQELBQADggEBAIauVpxBYexawKCf/oDAhP774AxDEQSn
1F2lfW57+AyQ0E7a78YsjHVClkNHHTHKlRghCaq7iOfqkb8kaL3uFjfzdAPVwp2/
6oZFxvX3c9h6SW2H2Il0SKeI2+qWUomPd91WgPzkoqQPISAGJGwjGubPFpVdUpIH
r/8uaHkqOfn9M3kZMLxnn3HimuoL3asumtsoyP2X6q0pXJlUg/r5PoBbhdTawOAi
A29BywsddcHhXP5EVviAJFS0Yg9J0NrKRHolaDvlbMQMYizZMf+E2k0Py+aA6rSd
Wzi4GuWqS7z4KyURo14HBBmw0UPNZ1YJLIJYMI98vzUcYBAtv4+FOk0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org