Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/N1h7BdJp0OuCvx2x0tck6etOKWc.roa
File: N1h7BdJp0OuCvx2x0tck6etOKWc.roa (raw, json)
Hash identifier: X9JKA/VEgTjEEn52PUBwChPI0tUH56HFqMor9YiVT5U=
Subject key identifier: 37:58:7B:05:D2:69:D0:EB:82:BF:1D:B1:D2:D7:24:E9:EB:4E:29:67
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D80
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N1h7BdJp0OuCvx2x0tck6etOKWc.roa
Signing time: Mon 15 Jan 2024 21:28:59 +0000
ROA not before: Mon 15 Jan 2024 21:28:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3456 (0xd80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:28:59 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=37587B05D269D0EB82BF1DB1D2D724E9EB4E2967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:a4:fb:af:62:8b:d7:82:e6:fc:06:19:a7:
11:3d:9d:77:b8:46:48:26:ba:a4:33:6a:c6:7d:9a:
51:2b:70:82:55:66:80:13:db:fc:92:cf:3d:50:ca:
ed:1c:7b:10:0c:18:39:a6:f5:29:df:da:fc:06:44:
f8:52:39:49:b3:02:fe:c3:55:0a:bf:e0:73:e6:c5:
cc:5c:63:14:97:ad:c2:76:e5:35:b5:63:e2:ad:9f:
1f:05:8d:76:06:a3:00:47:56:42:d5:2d:1d:c6:3c:
db:4b:56:e1:7e:20:0f:6c:6b:58:ee:95:10:3b:71:
a7:a0:5d:19:81:cd:d4:35:7f:0f:b5:8b:78:e6:23:
5e:47:fe:ff:a3:37:e6:7a:19:01:49:ea:ab:55:ad:
86:5d:b8:3e:21:23:df:66:49:45:d9:06:cd:e4:71:
a6:eb:44:da:27:87:a9:3f:23:f2:b3:0d:e9:a8:29:
4b:80:fb:2f:e3:8c:b1:ca:d0:76:3e:42:29:ac:37:
0f:24:b5:24:cd:21:6b:7a:a5:f7:2d:45:cc:59:3b:
2f:9c:83:fa:01:3d:3b:36:9a:23:e4:82:81:7e:9a:
34:60:3c:eb:99:6d:42:19:aa:c5:a2:d4:0d:a3:b3:
e8:c1:57:86:08:6c:f4:74:54:89:36:bb:98:ac:e4:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:7B:05:D2:69:D0:EB:82:BF:1D:B1:D2:D7:24:E9:EB:4E:29:67
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N1h7BdJp0OuCvx2x0tck6etOKWc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a2:99:05:29:9b:05:ae:3c:c4:43:92:74:33:2a:00:1a:bc:
87:b2:84:35:c1:ba:e6:68:fd:5b:ce:a5:da:81:df:8d:ed:54:
0b:59:96:11:26:e6:26:21:9b:6f:82:a4:f2:6a:6c:a1:0c:06:
54:7b:3a:01:03:d7:eb:d3:e6:c4:af:d4:c9:ef:52:56:fd:13:
3f:98:b5:f5:b9:b4:54:b1:76:01:69:26:29:a7:86:3a:94:02:
1d:46:00:eb:36:d8:40:09:aa:3d:97:a0:46:cb:f6:2b:ee:c5:
3d:b4:b8:2e:84:60:78:aa:2f:9a:fc:1e:28:01:d4:2d:e9:64:
9d:ec:da:60:03:fb:26:0a:b4:52:85:5f:e3:89:28:f2:43:73:
4a:f0:e3:ed:7b:9e:f3:83:1b:7d:35:ff:2c:90:27:70:65:65:
10:32:c8:8f:9f:5d:2d:9f:ec:d4:53:25:54:6e:85:b0:31:2f:
31:e9:e3:e0:11:9c:ea:47:07:69:10:58:0c:37:7e:07:b9:d6:
d0:1f:bf:e5:97:de:e5:a6:3f:80:fb:50:80:e9:5f:bc:fc:93:
9b:e2:25:e3:04:03:f3:18:11:e7:e6:3d:71:91:f3:fd:67:13:
b7:4d:7b:be:b5:53:02:86:0b:e3:1d:70:67:1a:72:f3:1e:22:
2c:62:ae:57
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI4NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3NTg3QjA1RDI2OUQw
RUI4MkJGMURCMUQyRDcyNEU5RUI0RTI5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjxaT7r2KL14Lm/AYZpxE9nXe4RkgmuqQzasZ9mlErcIJVZoAT
2/ySzz1Qyu0cexAMGDmm9Snf2vwGRPhSOUmzAv7DVQq/4HPmxcxcYxSXrcJ25TW1
Y+Ktnx8FjXYGowBHVkLVLR3GPNtLVuF+IA9sa1julRA7caegXRmBzdQ1fw+1i3jm
I15H/v+jN+Z6GQFJ6qtVrYZduD4hI99mSUXZBs3kcabrRNonh6k/I/KzDemoKUuA
+y/jjLHK0HY+QimsNw8ktSTNIWt6pfctRcxZOy+cg/oBPTs2miPkgoF+mjRgPOuZ
bUIZqsWi1A2js+jBV4YIbPR0VIk2u5is5LQ3AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUN1h7BdJp0OuCvx2x0tck6etOKWcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL04xaDdCZEpwME91Q3Z4MngwdGNrNmV0
T0tXYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP/0wDQYJ
KoZIhvcNAQELBQADggEBABiimQUpmwWuPMRDknQzKgAavIeyhDXBuuZo/VvOpdqB
343tVAtZlhEm5iYhm2+CpPJqbKEMBlR7OgED1+vT5sSv1MnvUlb9Ez+YtfW5tFSx
dgFpJimnhjqUAh1GAOs22EAJqj2XoEbL9ivuxT20uC6EYHiqL5r8HigB1C3pZJ3s
2mAD+yYKtFKFX+OJKPJDc0rw4+17nvODG301/yyQJ3BlZRAyyI+fXS2f7NRTJVRu
hbAxLzHp4+ARnOpHB2kQWAw3fge51tAfv+WX3uWmP4D7UIDpX7z8k5viJeMEA/MY
EefmPXGR8/1nE7dNe761UwKGC+MdcGcacvMeIixirlc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:34 2025 by rpki-client