Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/HZq2eZjUCxSHW2ZorMopm3-DNVg.roa
File: HZq2eZjUCxSHW2ZorMopm3-DNVg.roa (raw, json)
Hash identifier: KoMow0F18dPE/RMZwX4qs/Z4+VOIsn70/X74p8eBTxY=
Subject key identifier: 1D:9A:B6:79:98:D4:0B:14:87:5B:66:68:AC:CA:29:9B:7F:83:35:58
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0B2E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/HZq2eZjUCxSHW2ZorMopm3-DNVg.roa
Signing time: Sun 07 Feb 2021 12:58:44 +0000
ROA not before: Sun 07 Feb 2021 12:58:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 221.120.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 7 12:58:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1D9AB67998D40B14875B6668ACCA299B7F833558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:0f:b2:90:c8:5a:e9:86:6e:1d:1a:cf:23:
86:dd:5a:f0:1b:3a:b2:c7:4a:ce:29:80:ad:fd:c3:
2e:32:e0:f8:88:ed:11:59:d8:81:57:50:a3:38:74:
ca:66:5e:71:8f:bb:39:21:fd:8e:a4:b7:97:86:ec:
f7:c0:01:b6:1e:ec:70:57:27:92:77:f9:55:c4:21:
61:f9:b8:86:65:96:7c:3a:b3:93:fb:e7:80:30:9a:
89:14:22:b2:bc:48:bc:ea:ce:b0:57:e1:31:ca:2c:
27:f2:39:37:96:19:f3:50:3e:b2:37:31:10:2b:b3:
fe:b1:00:9f:33:5a:f6:36:15:8b:64:f2:92:2e:d7:
fb:a1:79:94:2f:3c:e9:8f:ee:65:f1:c0:13:39:ab:
19:c9:84:72:47:03:a5:77:25:d5:05:91:0f:39:4f:
ec:84:65:ca:2b:b3:9e:2c:31:b9:a8:c8:33:fb:6c:
1b:5d:63:b2:af:6a:ac:f9:20:b7:4b:e9:19:70:ce:
cf:8d:c7:3f:7a:31:d1:02:16:72:d6:07:48:99:01:
e3:7c:9d:26:02:1f:b5:6c:e0:11:30:0e:38:35:50:
65:12:37:16:80:d9:fa:d8:23:82:a5:62:87:ac:bc:
f4:6f:84:6b:d9:ad:c5:93:e9:3b:0c:bb:b0:fa:70:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:B6:79:98:D4:0B:14:87:5B:66:68:AC:CA:29:9B:7F:83:35:58
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/HZq2eZjUCxSHW2ZorMopm3-DNVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f4:f8:83:f0:44:8e:a3:b0:b7:09:cc:d0:40:2d:f6:81:d0:
10:e3:21:bc:a9:11:a5:fd:2f:4a:d9:db:15:0d:dc:9a:a2:b4:
42:d0:d2:1d:3c:35:82:33:f6:3e:9e:85:c2:99:56:ce:6e:f3:
c7:83:2c:0b:53:e7:a0:11:1b:3a:e0:a3:5b:10:73:59:92:7a:
5d:35:30:e8:2a:71:c1:36:11:a0:86:67:1d:29:20:fc:88:e5:
c7:b2:b2:43:48:61:77:ca:84:dd:26:44:06:83:0a:c2:79:9c:
c2:cd:7a:7f:79:74:05:b9:8c:cd:eb:4e:3b:f4:52:f4:96:c1:
12:f1:f0:20:89:03:8b:ee:28:d4:29:ff:b7:db:b6:c7:e3:fc:
b1:70:fc:20:9c:07:10:67:cc:8e:71:57:f1:a5:e0:91:b7:0d:
9a:00:69:a2:e8:74:2b:f9:cd:0c:ca:af:87:7d:cb:ac:99:80:
d8:b6:87:74:86:54:f6:53:c0:b5:5c:a4:2f:d9:72:30:db:eb:
ad:30:fa:e4:43:07:ab:b4:1a:27:51:06:ea:2e:8f:6b:d7:09:
75:99:ef:5d:f2:51:52:4e:46:84:0d:53:4a:14:e1:5f:50:e3:
2a:cd:8e:0b:2d:c8:eb:db:98:22:c0:cf:2f:6f:8c:ed:ce:78:
5f:32:3b:5f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MjU4NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFEOUFCNjc5OThENDBC
MTQ4NzVCNjY2OEFDQ0EyOTlCN0Y4MzM1NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCohQ+ykMha6YZuHRrPI4bdWvAbOrLHSs4pgK39wy4y4PiI7RFZ
2IFXUKM4dMpmXnGPuzkh/Y6kt5eG7PfAAbYe7HBXJ5J3+VXEIWH5uIZllnw6s5P7
54AwmokUIrK8SLzqzrBX4THKLCfyOTeWGfNQPrI3MRArs/6xAJ8zWvY2FYtk8pIu
1/uheZQvPOmP7mXxwBM5qxnJhHJHA6V3JdUFkQ85T+yEZcors54sMbmoyDP7bBtd
Y7Kvaqz5ILdL6Rlwzs+Nxz96MdECFnLWB0iZAeN8nSYCH7Vs4BEwDjg1UGUSNxaA
2frYI4KlYoesvPRvhGvZrcWT6TsMu7D6cGfHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUHZq2eZjUCxSHW2ZorMopm3+DNVgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9IWnEyZVpqVUN4U0hXMlpvck1v
cG0zLUROVmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3XgV
MA0GCSqGSIb3DQEBCwUAA4IBAQAt9PiD8ESOo7C3CczQQC32gdAQ4yG8qRGl/S9K
2dsVDdyaorRC0NIdPDWCM/Y+noXCmVbObvPHgywLU+egERs64KNbEHNZknpdNTDo
KnHBNhGghmcdKSD8iOXHsrJDSGF3yoTdJkQGgwrCeZzCzXp/eXQFuYzN60479FL0
lsES8fAgiQOL7ijUKf+327bH4/yxcPwgnAcQZ8yOcVfxpeCRtw2aAGmi6HQr+c0M
yq+HfcusmYDYtod0hlT2U8C1XKQv2XIw2+utMPrkQwertBonUQbqLo9r1wl1me9d
8lFSTkaEDVNKFOFfUOMqzY4LLcjr25giwM8vb4ztznhfMjtf
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:01 2025 by rpki-client