Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LQCIwT-WNjwxA_zfL_Zwra4YBX0.roa
File: LQCIwT-WNjwxA_zfL_Zwra4YBX0.roa (raw, json)
Hash identifier: 4Y8Izr9Vrfokuu/QNVCHfAdJ/UVFMrh1ZRBxnaY0hfg=
Subject key identifier: 2D:00:88:C1:3F:96:36:3C:31:03:FC:DF:2F:F6:70:AD:AE:18:05:7D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LQCIwT-WNjwxA_zfL_Zwra4YBX0.roa
Signing time: Thu 15 Sep 2022 02:48:39 +0000
ROA not before: Thu 15 Sep 2022 02:48:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 54994
IP address blocks: 61.221.181.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2D0088C13F96363C3103FCDF2FF670ADAE18057D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:e5:d8:d7:a9:3b:10:d0:bc:fa:07:7d:f5:
58:75:b3:bf:6a:7d:ee:c5:6d:c0:b9:3a:83:7e:08:
83:fe:5a:de:85:bc:45:80:57:df:3c:0b:a9:ba:84:
77:5c:ca:e3:21:18:53:2d:92:10:f8:02:03:5d:cb:
92:92:7a:0c:8c:0e:07:22:b0:5c:69:89:bf:33:2d:
f0:7b:c1:09:da:ff:31:1a:27:d2:09:1b:0f:95:0d:
54:1f:2b:79:dd:2e:40:5e:33:14:30:7f:c5:fd:7d:
b1:98:9f:42:b4:74:11:92:e2:a4:96:5e:9a:82:2d:
a3:8a:21:12:7a:7a:b4:fe:a7:7e:ac:06:69:e9:8b:
50:83:b3:a1:d4:43:f4:68:3f:88:36:88:90:ff:b8:
0c:d9:a4:ac:8e:e2:c3:13:fa:dc:e2:b4:21:9a:23:
9c:19:a5:96:61:c3:50:21:a2:07:24:a4:0b:11:4d:
59:90:4c:2c:8b:fc:83:4d:1e:22:76:06:e2:a9:60:
68:99:f1:c9:e2:61:1e:59:d4:53:a6:c8:7c:aa:15:
29:d0:52:a9:d4:e8:6c:2c:ca:48:21:94:40:7d:3e:
83:10:0f:de:63:18:38:98:9d:07:1f:ff:da:2d:78:
e4:52:f2:bb:86:55:30:b9:cc:19:8c:41:af:46:aa:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:88:C1:3F:96:36:3C:31:03:FC:DF:2F:F6:70:AD:AE:18:05:7D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LQCIwT-WNjwxA_zfL_Zwra4YBX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.221.181.0/26
Signature Algorithm: sha256WithRSAEncryption
1b:16:eb:f0:05:73:dc:5a:9a:c2:41:6e:2e:34:6b:87:e1:06:
58:fb:a2:c1:d0:19:a4:67:e0:07:e7:85:c2:0a:3b:6e:37:46:
76:2f:38:5d:37:00:46:b1:be:93:aa:21:40:57:04:dc:93:9f:
a7:5c:e8:a0:4e:6f:01:3e:e8:90:ca:3c:db:25:a4:8a:18:a6:
22:50:77:47:2f:5a:22:64:07:20:e3:a3:05:5d:8b:46:85:37:
25:d7:d7:39:5c:59:77:03:78:f6:b0:28:be:95:8a:61:ae:9d:
52:a8:56:28:d0:f0:94:37:69:e2:ee:fd:00:dc:80:da:83:75:
ef:fb:aa:76:0e:8f:9c:4a:87:3a:cf:96:65:cd:74:d8:49:50:
67:36:b8:a6:76:14:88:2d:4b:34:e3:41:f9:87:7d:94:c5:c2:
40:c2:c8:02:4f:59:c0:b4:a3:6b:3c:18:59:f2:f5:45:86:4c:
97:69:e6:b6:45:8b:83:b6:63:d4:3e:fb:45:c2:79:64:c0:89:
0e:3f:4f:65:62:43:c0:e9:92:40:90:d1:f1:eb:73:19:e5:f4:
a8:35:d0:16:e0:22:29:c7:44:47:91:c1:e9:1e:f5:a7:6e:6e:
4b:c2:a0:71:2d:2a:fb:ac:d3:7f:32:78:d1:f7:89:0c:b1:5b:
1e:38:b8:47
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJEMDA4OEMxM0Y5NjM2
M0MzMTAzRkNERjJGRjY3MEFEQUUxODA1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBieXY16k7ENC8+gd99Vh1s79qfe7FbcC5OoN+CIP+Wt6FvEWA
V988C6m6hHdcyuMhGFMtkhD4AgNdy5KSegyMDgcisFxpib8zLfB7wQna/zEaJ9IJ
Gw+VDVQfK3ndLkBeMxQwf8X9fbGYn0K0dBGS4qSWXpqCLaOKIRJ6erT+p36sBmnp
i1CDs6HUQ/RoP4g2iJD/uAzZpKyO4sMT+tzitCGaI5wZpZZhw1AhogckpAsRTVmQ
TCyL/INNHiJ2BuKpYGiZ8cniYR5Z1FOmyHyqFSnQUqnU6GwsykghlEB9PoMQD95j
GDiYnQcf/9oteORS8ruGVTC5zBmMQa9GqvbtAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQULQCIwT+WNjwxA/zfL/Zwra4YBX0wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MUUNJd1QtV05qd3hBX3pmTF9a
d3JhNFlCWDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21
ADANBgkqhkiG9w0BAQsFAAOCAQEAGxbr8AVz3FqawkFuLjRrh+EGWPuiwdAZpGfg
B+eFwgo7bjdGdi84XTcARrG+k6ohQFcE3JOfp1zooE5vAT7okMo82yWkihimIlB3
Ry9aImQHIOOjBV2LRoU3JdfXOVxZdwN49rAovpWKYa6dUqhWKNDwlDdp4u79ANyA
2oN17/uqdg6PnEqHOs+WZc102ElQZza4pnYUiC1LNONB+Yd9lMXCQMLIAk9ZwLSj
azwYWfL1RYZMl2nmtkWLg7Zj1D77RcJ5ZMCJDj9PZWJDwOmSQJDR8etzGeX0qDXQ
FuAiKcdER5HB6R71p25uS8KgcS0q+6zTfzJ40feJDLFbHji4Rw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:18 2025 by rpki-client