Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ips2FsdjCj3EVqqb2x3Q3jyLG44.roa
File: ips2FsdjCj3EVqqb2x3Q3jyLG44.roa (raw, json)
Hash identifier: GvxoT9GdwYQIwfmtwnWYsBhXNcndRr4syg9jjjGoVLc=
Subject key identifier: 8A:9B:36:16:C7:63:0A:3D:C4:56:AA:9B:DB:1D:D0:DE:3C:8B:1B:8E
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0C2D
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ips2FsdjCj3EVqqb2x3Q3jyLG44.roa
Signing time: Fri 01 Sep 2023 08:57:11 +0000
ROA not before: Fri 01 Sep 2023 08:57:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9680
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3117 (0xc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 1 08:57:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8A9B3616C7630A3DC456AA9BDB1DD0DE3C8B1B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:1e:d9:86:5f:27:a1:63:11:35:b9:59:75:
45:70:fe:ab:ab:86:fa:da:f6:51:e6:29:08:79:c1:
45:29:36:dd:9f:a3:9d:fa:db:eb:68:3e:a4:44:19:
fc:70:44:12:60:7a:ac:cd:b0:cd:18:14:2b:bc:29:
2a:9f:fd:c0:d7:83:7a:ed:ea:9a:c4:14:46:32:4c:
6f:42:01:96:8c:02:fe:a6:d7:33:59:54:03:e8:80:
c7:79:89:60:9a:f9:6f:1c:64:f7:2d:08:e5:1f:4b:
17:fa:72:80:26:46:97:fa:dc:4c:d1:be:f3:b7:19:
1c:01:c4:e7:7c:18:5b:63:45:91:71:92:69:11:b9:
18:d3:47:4e:74:3b:6e:79:08:8f:a6:f2:b2:ba:44:
c1:7f:b0:ba:60:3a:3b:81:8c:91:d5:49:3a:5c:94:
27:d5:43:bf:28:93:20:57:5e:b8:83:f3:cf:5f:e8:
e4:1b:45:0d:5f:75:8a:03:57:9d:05:7a:d3:eb:ea:
10:4f:f6:26:3e:26:4a:94:18:49:29:4e:11:1b:53:
a3:c1:66:36:a6:00:db:c2:77:cd:22:ae:94:bb:ac:
ea:9e:fe:99:d2:56:29:58:a4:27:ef:8a:59:a5:08:
e1:8c:5d:1c:a7:44:38:49:22:51:d3:90:3d:4b:06:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:36:16:C7:63:0A:3D:C4:56:AA:9B:DB:1D:D0:DE:3C:8B:1B:8E
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ips2FsdjCj3EVqqb2x3Q3jyLG44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f0:55:0c:ca:f2:db:cc:73:01:11:18:04:13:6d:ec:8e:af:
68:4f:ee:b6:af:40:49:49:c8:3e:8d:bf:9d:9f:28:cc:2b:5f:
1b:6b:a8:2b:b2:97:68:26:a3:62:2b:ce:3e:6c:df:90:18:40:
fe:9f:87:8c:02:a5:9d:99:35:b9:a4:a2:08:66:d1:e4:c7:ae:
0d:a5:37:1f:8c:8a:10:bd:c1:35:fa:37:57:d8:a2:75:62:bb:
3a:48:e4:76:fa:83:08:58:ba:68:7b:ac:ff:5c:0f:94:ed:ea:
16:b0:3f:aa:2b:00:75:c0:f2:1a:c2:ed:55:ac:a0:3f:11:19:
9c:2e:31:39:5b:ea:fe:ff:2d:a1:64:6f:a6:45:86:cb:02:cc:
be:ab:eb:46:38:34:ab:16:12:2a:3a:cc:d0:a0:e0:45:08:1a:
77:81:bb:5b:6b:90:7c:94:30:96:03:dd:82:b1:8a:8e:98:7e:
5d:eb:ae:8f:cc:77:4a:64:22:f8:ac:ee:68:ec:6d:3c:c9:4b:
0f:cb:f6:d0:2e:c3:9c:5d:47:5e:10:e0:84:92:a9:bf:c2:cb:
5e:0f:aa:cb:90:dd:f6:09:34:e4:91:77:c3:f2:1e:af:13:a8:
af:63:4e:fa:ae:53:5f:da:04:24:8f:2e:79:dc:5e:87:b7:bb:
ad:1b:7d:a0
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg3
NkU0QjhERkFBMjI0QzAxOUQyNDY5MzFGQzNDRDdBNEZFRUQyQTAeFw0yMzA5MDEw
ODU3MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhBOUIzNjE2Qzc2MzBB
M0RDNDU2QUE5QkRCMUREMERFM0M4QjFCOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv4h7Zhl8noWMRNblZdUVw/qurhvra9lHmKQh5wUUpNt2fo536
2+toPqREGfxwRBJgeqzNsM0YFCu8KSqf/cDXg3rt6prEFEYyTG9CAZaMAv6m1zNZ
VAPogMd5iWCa+W8cZPctCOUfSxf6coAmRpf63EzRvvO3GRwBxOd8GFtjRZFxkmkR
uRjTR050O255CI+m8rK6RMF/sLpgOjuBjJHVSTpclCfVQ78okyBXXriD889f6OQb
RQ1fdYoDV50FetPr6hBP9iY+JkqUGEkpThEbU6PBZjamANvCd80irpS7rOqe/pnS
VilYpCfvilmlCOGMXRynRDhJIlHTkD1LBucjAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUips2FsdjCj3EVqqb2x3Q3jyLG44wHwYDVR0jBBgwFoAUWHbkuN+qIkwBnSRp
Mfw816T+7SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
V0hia3VOLXFJa3dCblNScE1mdzgxNlQtN1NvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9XSGJrdU4tcUlrd0JuU1JwTWZ3ODE2VC03U28uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9pcHMyRnNkakNqM0VWcXFiMngz
UTNqeUxHNDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF/2
MA0GCSqGSIb3DQEBCwUAA4IBAQCd8FUMyvLbzHMBERgEE23sjq9oT+62r0BJScg+
jb+dnyjMK18ba6grspdoJqNiK84+bN+QGED+n4eMAqWdmTW5pKIIZtHkx64NpTcf
jIoQvcE1+jdX2KJ1Yrs6SOR2+oMIWLpoe6z/XA+U7eoWsD+qKwB1wPIawu1VrKA/
ERmcLjE5W+r+/y2hZG+mRYbLAsy+q+tGODSrFhIqOszQoOBFCBp3gbtba5B8lDCW
A92CsYqOmH5d666PzHdKZCL4rO5o7G08yUsPy/bQLsOcXUdeEOCEkqm/wsteD6rL
kN32CTTkkXfD8h6vE6ivY076rlNf2gQkjy553F6Ht7utG32g
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:30 2025 by rpki-client