Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/4RkdxhiDhXU_PFQQ8xCbWSQYMoE.roa
File: 4RkdxhiDhXU_PFQQ8xCbWSQYMoE.roa (raw, json)
Hash identifier: oBZCabZkUjpuDYcA/72ztHFKKQoSCJvq+pzn8MeO2Mk=
Subject key identifier: E1:19:1D:C6:18:83:85:75:3F:3C:54:10:F3:10:9B:59:24:18:32:81
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 037A
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/4RkdxhiDhXU_PFQQ8xCbWSQYMoE.roa
Signing time: Wed 29 Sep 2021 02:53:58 +0000
ROA not before: Wed 29 Sep 2021 02:53:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 134823
IP address blocks: 2406:48c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 29 02:53:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E1191DC6188385753F3C5410F3109B5924183281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:eb:b1:95:70:50:2b:37:db:3b:77:4f:69:
c1:dd:59:ba:5b:8b:bf:df:55:02:1f:52:42:af:68:
f9:5f:ed:f1:62:ec:99:12:75:cb:5c:90:05:f4:71:
67:48:de:71:a3:e0:f3:0d:e3:4b:a4:e4:32:54:1e:
4c:0d:c8:d9:fb:45:02:90:2a:02:2c:dd:47:4d:15:
0c:74:b3:6e:3a:a4:ed:ca:86:d3:a0:d3:eb:03:5a:
e2:8c:f6:37:68:62:16:38:9a:01:34:20:59:7e:54:
ba:94:e9:87:7d:37:f5:c0:16:55:2f:a2:da:57:79:
15:7e:40:c3:84:bd:36:9a:07:cc:bd:4b:51:60:14:
ae:36:c3:3c:14:b6:9b:04:92:58:a9:1d:4d:00:a2:
b0:78:bc:8a:9f:e6:b6:33:57:96:c3:3b:12:42:9d:
f8:80:00:ce:73:37:ce:29:27:e8:1f:e0:3c:b6:33:
f1:d3:a8:fe:78:72:cb:44:74:3d:90:50:74:e3:90:
a5:2a:a9:d1:a4:ae:bb:53:a0:da:61:38:13:eb:17:
72:cc:5d:08:a3:ed:6a:e2:03:41:60:6f:00:ea:c2:
6c:5e:70:9d:24:07:6e:a1:52:ff:98:70:9b:ec:80:
eb:99:5b:90:81:3a:9b:2c:35:0d:d6:92:7f:44:6d:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:1D:C6:18:83:85:75:3F:3C:54:10:F3:10:9B:59:24:18:32:81
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/4RkdxhiDhXU_PFQQ8xCbWSQYMoE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
02:04:af:1f:e9:d8:d0:3b:58:78:c7:de:fc:20:d0:21:d5:bc:
51:20:81:f2:8d:b5:a9:71:cd:9d:33:08:af:4a:7b:f8:e3:40:
83:f8:fe:61:7d:3d:66:d5:70:fd:b7:0f:c0:f7:2b:f1:49:5c:
08:be:69:bb:ba:f8:b7:7b:a5:30:b8:b9:6f:3b:7d:36:21:43:
55:c4:20:aa:5f:4e:89:62:8b:20:14:5f:20:f9:9d:34:d7:6c:
31:93:c8:1e:39:be:31:a0:07:6a:15:3e:c1:17:99:26:41:f3:
6e:2d:a7:e0:56:79:e4:29:98:f8:06:2e:84:f0:dc:01:18:09:
2b:43:e2:35:e4:16:56:46:7a:51:18:cf:04:93:1a:bc:ee:2a:
cc:e4:75:6b:77:61:1c:c8:98:cf:0f:ae:7b:a8:70:a9:e2:a2:
e8:86:21:99:a5:4b:69:1b:cf:ca:d8:99:8a:36:1e:96:ec:bf:
53:4f:96:6d:c5:6a:a6:c6:41:21:13:3c:bb:11:12:1c:a6:06:
dd:1e:47:e9:a2:c0:cf:fc:1e:a0:f2:e4:ef:15:5b:ec:26:2c:
f6:e1:b5:e8:55:f9:e7:28:f4:f0:b1:fc:70:7f:1d:e1:17:96:
54:a3:92:a1:48:cb:c4:35:71:51:3c:98:d4:38:c5:d2:6c:60:
13:75:c4:ed
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICA3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3
REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMTA5Mjkw
MjUzNThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEUxMTkxREM2MTg4Mzg1
NzUzRjNDNTQxMEYzMTA5QjU5MjQxODMyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwFOuxlXBQKzfbO3dPacHdWbpbi7/fVQIfUkKvaPlf7fFi7JkS
dctckAX0cWdI3nGj4PMN40uk5DJUHkwNyNn7RQKQKgIs3UdNFQx0s246pO3KhtOg
0+sDWuKM9jdoYhY4mgE0IFl+VLqU6Yd9N/XAFlUvotpXeRV+QMOEvTaaB8y9S1Fg
FK42wzwUtpsEklipHU0AorB4vIqf5rYzV5bDOxJCnfiAAM5zN84pJ+gf4Dy2M/HT
qP54cstEdD2QUHTjkKUqqdGkrrtToNphOBPrF3LMXQij7WriA0FgbwDqwmxecJ0k
B26hUv+YcJvsgOuZW5CBOpssNQ3Wkn9EbdjdAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU4RkdxhiDhXU/PFQQ8xCbWSQYMoEwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB
T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB
L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzRSa2R4aGlEaFhVX1BGUVE4
eENiV1NRWU1vRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk
BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQACBK8f6djQO1h4x978INAh1bxRIIHyjbWp
cc2dMwivSnv440CD+P5hfT1m1XD9tw/A9yvxSVwIvmm7uvi3e6UwuLlvO302IUNV
xCCqX06JYosgFF8g+Z0012wxk8geOb4xoAdqFT7BF5kmQfNuLafgVnnkKZj4Bi6E
8NwBGAkrQ+I15BZWRnpRGM8Ekxq87irM5HVrd2EcyJjPD657qHCp4qLohiGZpUtp
G8/K2JmKNh6W7L9TT5ZtxWqmxkEhEzy7ERIcpgbdHkfposDP/B6g8uTvFVvsJiz2
4bXoVfnnKPTwsfxwfx3hF5ZUo5KhSMvENXFRPJjUOMXSbGATdcTt
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:19 2025 by rpki-client