Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JFRlswlf8bwIzfMCUFGCus_eodM.roa
File: JFRlswlf8bwIzfMCUFGCus_eodM.roa (raw, json)
Hash identifier: MPHm6lARfyKv3HJyL2zNl/iE9UlV/xOqrUzmQ/2clwQ=
Subject key identifier: 24:54:65:B3:09:5F:F1:BC:08:CD:F3:02:50:51:82:BA:CF:DE:A1:D3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F3F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JFRlswlf8bwIzfMCUFGCus_eodM.roa
Signing time: Fri 01 Sep 2023 08:56:48 +0000
ROA not before: Fri 01 Sep 2023 08:56:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 122.118.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3903 (0xf3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=245465B3095FF1BC08CDF302505182BACFDEA1D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:ec:d3:1e:c3:21:d3:33:a1:64:e6:54:6d:
f7:01:45:ae:27:96:dd:26:2a:20:14:57:3b:10:70:
74:f2:7d:0d:d6:2a:df:7e:2f:0a:bd:d4:ae:44:d2:
2e:fb:d0:ae:c1:49:7d:2c:ed:eb:90:c7:e0:81:a8:
58:b6:ba:8b:ba:03:7e:43:9a:0a:45:c0:00:ae:b4:
39:06:b6:4a:85:27:47:d8:02:86:f3:d7:e9:c2:df:
fb:84:44:d7:82:22:1e:8f:e0:e0:37:48:06:ac:14:
40:09:54:a9:50:d3:b1:ab:be:28:6e:f2:e5:b2:fe:
ef:11:17:08:89:d2:1d:40:2b:35:10:29:c8:89:3b:
97:53:a6:1e:98:15:b0:f5:10:b4:d2:41:3f:6e:85:
73:61:52:9d:59:20:54:37:a6:37:6a:c1:88:86:85:
01:96:95:c8:3e:5f:85:af:57:03:fb:e1:24:2f:4e:
1d:4e:a1:1b:ff:8c:89:6b:92:4b:c4:57:20:80:c2:
cd:05:47:ab:b6:7c:42:20:61:3e:8e:38:7a:e6:2f:
e0:9a:e8:ed:9e:71:49:68:78:7b:9e:ae:e0:bd:fa:
a1:36:70:12:39:f0:19:2d:92:0f:6b:b0:90:bb:da:
01:f7:f8:91:46:55:d7:66:49:cb:8e:b2:6e:11:c8:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:65:B3:09:5F:F1:BC:08:CD:F3:02:50:51:82:BA:CF:DE:A1:D3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JFRlswlf8bwIzfMCUFGCus_eodM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:19:24:56:77:0d:a7:be:b4:2a:aa:4d:c9:3d:96:d9:ca:e0:
44:07:70:2d:7a:f4:79:de:1d:a1:7b:2e:bf:49:70:b9:64:93:
0c:e1:58:d9:d0:5d:b5:1b:6d:7d:0d:5d:94:f9:b5:18:cb:7e:
7a:cf:04:5b:d7:80:73:e7:f4:39:be:cb:68:f4:21:a2:d9:31:
61:b6:01:64:55:db:26:87:7c:11:8a:e7:a8:7f:65:e6:26:13:
33:af:fb:07:57:70:7e:18:97:e1:a3:2a:3a:c7:7a:67:e5:bf:
13:89:3f:1b:16:a3:4c:29:b7:6e:b2:0c:fd:2f:c7:9e:f5:10:
0c:65:1f:7c:be:b2:d1:48:9f:65:5b:3d:67:f7:86:ec:31:38:
10:c6:ce:90:d5:4e:13:ea:74:7c:f7:15:c3:1f:49:9c:3a:5c:
4c:96:f8:f2:8e:82:8a:ed:c2:6e:a2:ac:c5:dd:0d:b4:6d:8e:
98:42:54:97:26:88:8f:1e:cc:a4:05:ea:6b:53:4d:05:81:cf:
16:15:08:c0:a3:bf:31:f2:1f:c9:9d:19:ed:b3:21:58:12:fd:
d9:1e:08:61:e0:dd:f4:92:c9:c6:2d:bf:a8:f6:f9:3c:66:6b:
c3:1a:0b:43:3d:9e:97:fc:54:67:d6:78:a6:e5:c3:6d:b3:46:
f4:29:fb:c2
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI0NTQ2NUIzMDk1RkYx
QkMwOENERjMwMjUwNTE4MkJBQ0ZERUExRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSnuzTHsMh0zOhZOZUbfcBRa4nlt0mKiAUVzsQcHTyfQ3WKt9+
Lwq91K5E0i770K7BSX0s7euQx+CBqFi2uou6A35DmgpFwACutDkGtkqFJ0fYAobz
1+nC3/uERNeCIh6P4OA3SAasFEAJVKlQ07Grvihu8uWy/u8RFwiJ0h1AKzUQKciJ
O5dTph6YFbD1ELTSQT9uhXNhUp1ZIFQ3pjdqwYiGhQGWlcg+X4WvVwP74SQvTh1O
oRv/jIlrkkvEVyCAws0FR6u2fEIgYT6OOHrmL+Ca6O2ecUloeHueruC9+qE2cBI5
8Bktkg9rsJC72gH3+JFGVddmScuOsm4RyO+RAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUJFRlswlf8bwIzfMCUFGCus/eodMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KRlJsc3dsZjhid0l6Zk1DVUZH
Q3VzX2VvZE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAenYw
DQYJKoZIhvcNAQELBQADggEBAGgZJFZ3Dae+tCqqTck9ltnK4EQHcC169HneHaF7
Lr9JcLlkkwzhWNnQXbUbbX0NXZT5tRjLfnrPBFvXgHPn9Dm+y2j0IaLZMWG2AWRV
2yaHfBGK56h/ZeYmEzOv+wdXcH4Yl+GjKjrHemflvxOJPxsWo0wpt26yDP0vx571
EAxlH3y+stFIn2VbPWf3huwxOBDGzpDVThPqdHz3FcMfSZw6XEyW+PKOgortwm6i
rMXdDbRtjphCVJcmiI8ezKQF6mtTTQWBzxYVCMCjvzHyH8mdGe2zIVgS/dkeCGHg
3fSSycYtv6j2+Txma8MaC0M9npf8VGfWeKblw22zRvQp+8I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:42 2025 by rpki-client