Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3tOKlBr3IC_TuxJes_6OBwbNBaU.roa
File: 3tOKlBr3IC_TuxJes_6OBwbNBaU.roa (raw, json)
Hash identifier: W3YQfKCYo1sQ82JNFw2gXpPi94/KyudUpbuUAa7XVUs=
Subject key identifier: DE:D3:8A:94:1A:F7:20:2F:D3:BB:12:5E:B3:FE:8E:07:06:CD:05:A5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F4C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3tOKlBr3IC_TuxJes_6OBwbNBaU.roa
Signing time: Fri 01 Sep 2023 08:56:53 +0000
ROA not before: Fri 01 Sep 2023 08:56:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 59.120.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3916 (0xf4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DED38A941AF7202FD3BB125EB3FE8E0706CD05A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:02:4f:9a:d8:0d:26:ab:20:63:c0:fa:6e:
31:41:ed:e8:6c:97:93:83:89:f1:24:26:c0:b3:c6:
44:da:b4:d6:42:32:72:e2:64:7e:db:f5:25:52:d4:
84:1e:ce:1d:1d:32:01:5e:0f:8f:68:fa:7d:5b:32:
e6:6d:5b:07:5e:56:50:d8:01:ec:4b:f0:ec:8c:a7:
cc:72:54:89:3c:fa:1e:ed:94:4b:31:ab:65:3e:4b:
7f:1b:0d:e4:39:83:66:19:dd:ca:0c:6a:a0:9a:d8:
d4:2d:d5:ea:35:44:f8:3e:3e:de:97:2d:79:d3:79:
3b:f2:ff:c8:6b:8c:24:95:cd:22:50:0f:58:b4:f8:
df:38:b5:af:72:14:3c:48:4d:56:cb:27:c4:e6:bc:
eb:e5:8f:b1:68:42:68:51:01:c9:c3:1c:61:53:34:
ef:cd:ed:11:d6:48:c7:ed:cd:69:bd:c4:17:39:7d:
cd:14:76:42:6e:c7:ef:f4:18:9f:94:f9:41:76:75:
5a:a1:a9:14:2c:c9:2a:72:10:37:6d:9c:a6:48:6b:
d2:d1:f8:c4:9a:e3:8f:96:54:4d:6a:38:d3:b6:2d:
6c:56:59:88:e8:b2:15:a0:54:90:d9:c4:01:e1:4c:
71:49:78:fb:8d:d1:ef:36:89:c3:82:b5:f6:7e:31:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:8A:94:1A:F7:20:2F:D3:BB:12:5E:B3:FE:8E:07:06:CD:05:A5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3tOKlBr3IC_TuxJes_6OBwbNBaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.120.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a2:c9:ea:d1:3a:bb:c7:02:c4:ad:a1:e1:38:0f:6f:53:45:2b:
44:ad:67:4f:b0:17:c9:00:4a:a3:37:42:85:83:3f:62:2a:65:
2e:ca:5b:a2:2f:d7:75:d8:8b:76:22:26:c2:a5:39:37:54:3b:
e1:fa:7c:1c:3e:99:93:6c:06:a4:d8:b9:62:0f:98:29:c0:ff:
36:8a:9e:c3:35:4c:65:68:32:28:92:87:e3:75:4f:fd:45:c8:
80:41:74:6f:d1:32:e3:48:20:4b:c9:49:e7:89:3d:d5:d1:46:
d4:ad:1d:68:9d:bc:39:8c:d6:4e:f3:d7:70:b2:c7:89:2e:f7:
11:34:7a:3c:46:b7:30:60:1d:f1:b8:f3:3b:bb:ab:f9:4a:df:
98:1c:38:4b:d9:14:41:70:e7:f7:f2:c7:fd:15:ed:17:3b:3a:
28:da:e5:6e:26:5e:83:94:36:11:db:c6:8b:bb:53:ed:3f:2f:
f9:45:ee:e9:51:ff:76:f3:5c:50:c3:22:54:83:8d:6c:9a:c0:
61:56:c4:eb:35:0f:1a:e2:a2:7d:1c:69:4c:57:72:f2:2a:28:
55:96:d6:c2:97:12:3b:06:87:2e:be:3a:07:b8:ae:50:09:68:
5d:8f:61:45:55:6b:90:c2:43:66:21:11:9d:72:99:96:ea:e1:
2d:aa:b2:59
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFRDM4QTk0MUFGNzIw
MkZEM0JCMTI1RUIzRkU4RTA3MDZDRDA1QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzuAJPmtgNJqsgY8D6bjFB7ehsl5ODifEkJsCzxkTatNZCMnLi
ZH7b9SVS1IQezh0dMgFeD49o+n1bMuZtWwdeVlDYAexL8OyMp8xyVIk8+h7tlEsx
q2U+S38bDeQ5g2YZ3coMaqCa2NQt1eo1RPg+Pt6XLXnTeTvy/8hrjCSVzSJQD1i0
+N84ta9yFDxITVbLJ8TmvOvlj7FoQmhRAcnDHGFTNO/N7RHWSMftzWm9xBc5fc0U
dkJux+/0GJ+U+UF2dVqhqRQsySpyEDdtnKZIa9LR+MSa44+WVE1qONO2LWxWWYjo
shWgVJDZxAHhTHFJePuN0e82icOCtfZ+MYdZAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU3tOKlBr3IC/TuxJes/6OBwbNBaUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zdE9LbEJyM0lDX1R1eEplc182
T0J3Yk5CYVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCO3gw
DQYJKoZIhvcNAQELBQADggEBAKLJ6tE6u8cCxK2h4TgPb1NFK0StZ0+wF8kASqM3
QoWDP2IqZS7KW6Iv13XYi3YiJsKlOTdUO+H6fBw+mZNsBqTYuWIPmCnA/zaKnsM1
TGVoMiiSh+N1T/1FyIBBdG/RMuNIIEvJSeeJPdXRRtStHWidvDmM1k7z13Cyx4ku
9xE0ejxGtzBgHfG48zu7q/lK35gcOEvZFEFw5/fyx/0V7Rc7Oija5W4mXoOUNhHb
xou7U+0/L/lF7ulR/3bzXFDDIlSDjWyawGFWxOs1Dxrion0caUxXcvIqKFWW1sKX
EjsGhy6+Oge4rlAJaF2PYUVVa5DCQ2YhEZ1ymZbq4S2qslk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:27 2025 by rpki-client