Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7hylsn5QgfgsogU14QoXIfrN6jM.roa
File: 7hylsn5QgfgsogU14QoXIfrN6jM.roa (raw, json)
Hash identifier: dnPSwKDqs6pY4e8ENLfuAecmQZLb8ZpHA/EchF5uXPc=
Subject key identifier: EE:1C:A5:B2:7E:50:81:F8:2C:A2:05:35:E1:0A:17:21:FA:CD:EA:33
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 08E6
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7hylsn5QgfgsogU14QoXIfrN6jM.roa
Signing time: Sun 07 Feb 2021 05:55:38 +0000
ROA not before: Sun 07 Feb 2021 05:55:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 27.240.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 7 05:55:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE1CA5B27E5081F82CA20535E10A1721FACDEA33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:68:d5:9f:e8:5f:ed:f8:f7:f7:77:0e:66:
b5:6b:bd:fb:7c:27:26:7c:f8:16:c8:3b:42:7b:51:
80:61:b0:80:92:48:25:bf:64:f7:5d:13:88:fb:4b:
fa:1e:71:d2:40:52:e9:0a:7b:48:c2:49:f6:d5:70:
58:6e:d4:df:08:2a:a7:d9:d8:21:6d:d6:01:4a:1d:
cd:91:45:7f:d1:d6:41:4e:8e:bf:2c:97:d0:d6:56:
cc:5b:9c:f9:37:2f:79:08:15:4f:f7:d7:df:78:68:
21:a9:fd:07:9f:a8:a7:0f:7b:63:7e:8a:d3:5e:28:
0b:0f:b1:f6:14:2b:5b:ff:1c:cf:95:9e:5a:1e:09:
e7:e9:a3:b8:c4:c1:4a:f2:7c:94:28:77:36:d7:20:
90:5e:40:92:cc:42:30:e7:c5:84:6c:67:ad:4e:1c:
9e:70:d6:cf:e9:2b:d2:8a:a2:67:56:61:cc:6b:62:
12:82:d9:5e:dc:18:f9:66:a9:1e:ea:e5:d3:90:d7:
3e:97:3d:37:45:16:41:61:b5:80:01:5e:f6:13:74:
34:07:e6:4a:5e:67:8a:bd:13:5e:a2:ae:a4:c0:86:
ae:9b:4e:e4:8c:73:de:7e:2b:74:de:d0:62:be:b3:
20:e3:d6:9d:1a:a9:58:84:11:81:17:1c:8d:9d:8b:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:A5:B2:7E:50:81:F8:2C:A2:05:35:E1:0A:17:21:FA:CD:EA:33
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7hylsn5QgfgsogU14QoXIfrN6jM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.240.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c9:39:ad:b2:1b:2d:50:a0:a7:c2:c7:0c:3e:38:23:78:08:68:
ed:60:97:94:bf:95:14:8f:42:41:56:3c:91:10:da:c9:6c:a2:
b3:92:75:7f:b0:18:8a:1e:5a:0a:ff:71:f1:e8:ef:2f:bf:36:
71:99:78:4f:59:46:12:04:7c:d5:b6:00:51:11:6d:dc:bb:3e:
e7:55:66:55:3e:62:1d:dc:d1:ed:32:f6:47:ce:a8:b6:45:26:
db:d0:9b:a5:d6:37:0a:8c:1d:63:03:49:14:f7:16:a5:d0:75:
7a:ce:e9:79:42:8c:10:34:c4:54:83:48:45:c9:13:33:1c:f4:
ce:89:8e:54:3d:f2:09:19:62:3b:b4:f3:4b:be:04:13:23:ec:
90:16:8c:dc:a3:0a:ff:19:6a:fe:83:e9:44:a6:97:ef:a5:d7:
09:20:27:e4:a0:63:2b:ea:84:4a:a4:ca:53:55:3e:b4:19:89:
1f:7a:4d:18:cf:ff:35:93:33:41:5c:26:f8:e7:b0:11:e1:a7:
b4:44:c7:72:9c:83:5a:c0:06:72:db:fb:3c:e6:13:a0:3b:80:
9c:57:a9:f1:a5:03:41:84:f2:09:b8:8d:5c:7c:61:69:cf:0c:
68:c8:a7:dc:bd:91:64:e1:f1:cf:1d:9d:7c:c1:48:01:76:bb:
c2:e4:8a:61
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yMTAyMDcw
NTU1MzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVFMUNBNUIyN0U1MDgx
RjgyQ0EyMDUzNUUxMEExNzIxRkFDREVBMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXTGjVn+hf7fj393cOZrVrvft8JyZ8+BbIO0J7UYBhsICSSCW/
ZPddE4j7S/oecdJAUukKe0jCSfbVcFhu1N8IKqfZ2CFt1gFKHc2RRX/R1kFOjr8s
l9DWVsxbnPk3L3kIFU/31994aCGp/QefqKcPe2N+itNeKAsPsfYUK1v/HM+Vnloe
Cefpo7jEwUryfJQodzbXIJBeQJLMQjDnxYRsZ61OHJ5w1s/pK9KKomdWYcxrYhKC
2V7cGPlmqR7q5dOQ1z6XPTdFFkFhtYABXvYTdDQH5kpeZ4q9E16irqTAhq6bTuSM
c95+K3Te0GK+syDj1p0aqViEEYEXHI2dixw5AgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQU7hylsn5QgfgsogU14QoXIfrN6jMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzdoeWxzbjVRZ2Znc29nVTE0UW9YSWZy
TjZqTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwMb8DANBgkq
hkiG9w0BAQsFAAOCAQEAyTmtshstUKCnwscMPjgjeAho7WCXlL+VFI9CQVY8kRDa
yWyis5J1f7AYih5aCv9x8ejvL782cZl4T1lGEgR81bYAURFt3Ls+51VmVT5iHdzR
7TL2R86otkUm29CbpdY3CowdYwNJFPcWpdB1es7peUKMEDTEVINIRckTMxz0zomO
VD3yCRliO7TzS74EEyPskBaM3KMK/xlq/oPpRKaX76XXCSAn5KBjK+qESqTKU1U+
tBmJH3pNGM//NZMzQVwm+OewEeGntETHcpyDWsAGctv7POYToDuAnFep8aUDQYTy
CbiNXHxhac8MaMin3L2RZOHxzx2dfMFIAXa7wuSKYQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:06:34 2025 by rpki-client