Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wZkOqWqcNIwgr9TiGOZR5MKd6W4.roa
File: wZkOqWqcNIwgr9TiGOZR5MKd6W4.roa (raw, json)
Hash identifier: tDZyVQfGfgRfLSzq0fiJBnmdA6HHPJQT0Uxkz4XzVy8=
Subject key identifier: C1:99:0E:A9:6A:9C:34:8C:20:AF:D4:E2:18:E6:51:E4:C2:9D:E9:6E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wZkOqWqcNIwgr9TiGOZR5MKd6W4.roa
Signing time: Thu 15 Sep 2022 02:48:13 +0000
ROA not before: Thu 15 Sep 2022 02:48:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17714
IP address blocks: 203.160.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C1990EA96A9C348C20AFD4E218E651E4C29DE96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:ef:65:f2:66:50:cc:b0:4a:8a:83:0b:99:
07:56:a0:6a:1a:e0:fd:ca:1e:b8:c9:dc:88:87:ed:
c5:d7:4f:f0:2d:b6:bb:fb:22:5a:b0:d3:c6:12:97:
01:e8:6a:d8:42:5a:3a:f8:39:c5:ee:a7:f8:70:5f:
b9:e8:bd:bb:b0:1c:15:ba:b9:b0:b5:fb:71:05:9b:
4c:1b:a4:1a:2c:3a:aa:dd:5d:a7:d4:8f:04:b3:2c:
f2:cd:94:d4:2b:a0:70:a9:cc:7d:35:2f:8c:3c:93:
65:5d:c4:a3:08:84:75:a1:8e:84:e6:ad:3e:c8:09:
78:8b:3f:8c:f8:8a:d1:29:64:d2:2e:da:5f:c1:03:
2c:eb:f0:bc:17:27:7f:bb:2f:e0:1c:d0:41:ed:25:
09:be:f6:b9:89:f8:76:67:14:e0:3b:7c:e7:f2:c7:
f5:54:b9:d7:94:e3:d4:b8:a3:50:2a:04:56:55:75:
fa:92:b5:b8:7e:5a:71:a0:c2:82:ff:74:f2:6d:4c:
c9:75:0a:f1:3a:43:7b:1c:4c:a8:f2:ff:dc:66:13:
e8:1c:65:22:86:13:8e:c9:80:98:f5:87:b4:96:8b:
a4:ee:d8:f4:86:09:d3:d0:9c:7c:d0:35:37:82:8b:
a3:21:82:21:1a:37:b9:6e:05:d2:37:e0:96:a1:c3:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:0E:A9:6A:9C:34:8C:20:AF:D4:E2:18:E6:51:E4:C2:9D:E9:6E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wZkOqWqcNIwgr9TiGOZR5MKd6W4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.237.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5d:ac:97:cc:99:35:a0:1a:4e:25:30:1b:7d:3a:5d:fd:27:
5c:47:3c:cc:50:9c:b5:62:f2:85:a2:ee:eb:3b:9f:c0:ca:a4:
41:fc:96:81:19:86:be:c2:d2:31:33:ac:98:52:d4:3d:bc:68:
b5:61:cf:b0:fa:a4:40:87:a2:76:da:fc:96:9e:aa:a7:36:52:
1f:02:e2:0c:41:ae:f7:75:0d:71:27:db:75:3b:f0:cc:08:e5:
49:c8:cc:02:ae:d3:77:6c:82:58:ac:4e:27:ea:e5:29:7f:17:
3d:2e:86:61:d9:35:45:44:ef:9c:c8:66:5e:cd:06:b4:ed:30:
2a:1b:09:d1:60:cd:30:36:7e:95:b3:03:e0:b4:28:8c:59:d3:
44:c6:95:3c:0a:9d:0c:77:cb:18:af:1a:a9:30:77:36:3a:e2:
a0:cf:0e:b7:f9:a0:88:eb:3f:70:fb:9b:fe:de:3b:8d:77:93:
1e:80:41:e8:03:95:ce:0d:6d:8a:e4:f2:5b:0f:01:1b:ea:08:
cd:0b:f2:a0:2e:f9:45:84:fb:e2:71:fb:53:ca:36:b8:68:a7:
9e:54:53:fa:ff:5c:3b:38:d1:55:c7:6d:73:bf:18:37:04:ea:
62:32:a4:c9:7d:e4:35:0f:fb:2d:90:29:2d:20:87:6c:37:4d:
73:92:ba:e7
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMxOTkwRUE5NkE5QzM0
OEMyMEFGRDRFMjE4RTY1MUU0QzI5REU5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6F+9l8mZQzLBKioMLmQdWoGoa4P3KHrjJ3IiH7cXXT/Attrv7
Ilqw08YSlwHoathCWjr4OcXup/hwX7novbuwHBW6ubC1+3EFm0wbpBosOqrdXafU
jwSzLPLNlNQroHCpzH01L4w8k2VdxKMIhHWhjoTmrT7ICXiLP4z4itEpZNIu2l/B
Ayzr8LwXJ3+7L+Ac0EHtJQm+9rmJ+HZnFOA7fOfyx/VUudeU49S4o1AqBFZVdfqS
tbh+WnGgwoL/dPJtTMl1CvE6Q3scTKjy/9xmE+gcZSKGE47JgJj1h7SWi6Tu2PSG
CdPQnHzQNTeCi6MhgiEaN7luBdI34Jahw+IxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUwZkOqWqcNIwgr9TiGOZR5MKd6W4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93WmtPcVdxY05Jd2dyOVRpR09a
UjVNS2Q2VzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy6Dt
MA0GCSqGSIb3DQEBCwUAA4IBAQCCXayXzJk1oBpOJTAbfTpd/SdcRzzMUJy1YvKF
ou7rO5/AyqRB/JaBGYa+wtIxM6yYUtQ9vGi1Yc+w+qRAh6J22vyWnqqnNlIfAuIM
Qa73dQ1xJ9t1O/DMCOVJyMwCrtN3bIJYrE4n6uUpfxc9LoZh2TVFRO+cyGZezQa0
7TAqGwnRYM0wNn6VswPgtCiMWdNExpU8Cp0Md8sYrxqpMHc2OuKgzw63+aCI6z9w
+5v+3juNd5MegEHoA5XODW2K5PJbDwEb6gjNC/KgLvlFhPvicftTyja4aKeeVFP6
/1w7ONFVx21zvxg3BOpiMqTJfeQ1D/stkCktIIdsN01zkrrn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org