Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa
File: OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa (raw, json)
Hash identifier: Y5O/kRkyDkNoZVGa2YFBu59ETabQeCL6RNbw1+kLBbg=
Subject key identifier: 39:29:E2:13:76:98:E6:82:A3:A9:02:49:D0:8B:33:D6:95:DE:BB:2D
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0578
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa
Signing time: Fri 01 Sep 2023 08:59:51 +0000
ROA not before: Fri 01 Sep 2023 08:59:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17418
IP address blocks: 103.153.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 1 08:59:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3929E2137698E682A3A90249D08B33D695DEBB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:cf:04:f9:1d:88:26:c7:9a:1e:8d:1a:ee:
2c:08:70:04:d9:74:b7:9f:d0:8b:51:d5:cb:96:c6:
0f:a6:9e:88:40:57:56:a8:8b:0a:c5:a0:bf:7a:9b:
bd:32:ba:3c:3d:cb:aa:18:97:d6:7c:9b:db:14:d4:
42:6f:4e:4f:08:ab:01:bd:97:67:39:59:8f:40:30:
80:e8:08:27:f5:c6:ff:4b:c0:5c:c7:3c:3d:89:f5:
46:e0:a0:71:02:24:0a:92:75:97:ec:7e:48:28:80:
47:57:69:53:b9:a4:7e:11:4d:53:eb:df:38:08:cb:
be:e3:fc:5a:27:f8:51:eb:40:35:a3:fa:6b:81:da:
98:83:9c:30:eb:3f:8e:86:74:5a:a0:d5:06:c5:34:
29:44:bd:0c:0e:97:27:88:2c:18:60:df:49:09:64:
b8:7a:65:e4:a6:28:92:0a:16:03:7f:9a:7a:84:3c:
a6:80:35:de:23:4d:30:af:9e:7b:cf:75:c9:f0:4a:
36:c5:08:6c:9e:8d:4e:1a:fd:26:dc:9e:7e:eb:95:
e0:71:8c:56:17:5f:6e:fd:b5:53:2f:79:ab:3c:16:
8d:fa:32:2f:75:6d:73:a6:5f:8f:bf:d3:3d:bd:b3:
e4:ed:79:37:18:eb:b9:44:bf:f6:10:a8:b1:62:f2:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:E2:13:76:98:E6:82:A3:A9:02:49:D0:8B:33:D6:95:DE:BB:2D
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:1e:f6:68:86:32:c5:65:66:2b:b8:2b:47:9a:33:fc:01:57:
91:c9:f6:e4:77:c4:f6:15:43:ec:05:ed:8b:ea:20:b2:9e:95:
90:bf:ce:24:dc:71:58:e3:05:19:07:c4:ac:96:d7:74:aa:ae:
41:44:59:f3:ee:55:c9:ad:7a:55:97:75:f8:11:7f:69:5d:1b:
a2:69:ac:f3:86:89:ce:34:a9:df:c2:f6:93:94:49:98:ba:37:
db:00:a2:59:74:40:93:64:04:e3:be:31:a3:87:14:28:9e:11:
a0:2f:6c:58:08:48:de:24:03:c7:5b:83:1f:71:47:8d:04:89:
ca:61:c2:79:06:68:d9:bb:37:15:43:ec:a2:8d:ec:d8:53:34:
72:16:9f:29:a8:e9:16:80:e7:d2:2c:c2:26:3f:40:14:49:b2:
6d:be:f7:16:de:6a:30:6c:1a:1f:08:63:c9:12:33:f4:5b:2e:
25:15:93:18:80:86:26:f0:ea:e8:94:b8:4f:38:14:21:ff:39:
30:fd:c8:d5:70:fa:e8:07:46:87:2a:12:12:7e:00:be:ca:ca:
0e:79:4c:77:aa:81:5c:47:52:2e:fd:b8:1d:51:f4:b5:11:53:
aa:ae:6e:e9:6e:99:4c:3b:91:ae:7b:6a:86:19:a9:be:0e:8a:
1d:4e:41:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3
REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw
ODU5NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5MjlFMjEzNzY5OEU2
ODJBM0E5MDI0OUQwOEIzM0Q2OTVERUJCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTyM8E+R2IJseaHo0a7iwIcATZdLef0ItR1cuWxg+mnohAV1ao
iwrFoL96m70yujw9y6oYl9Z8m9sU1EJvTk8IqwG9l2c5WY9AMIDoCCf1xv9LwFzH
PD2J9UbgoHECJAqSdZfsfkgogEdXaVO5pH4RTVPr3zgIy77j/Fon+FHrQDWj+muB
2piDnDDrP46GdFqg1QbFNClEvQwOlyeILBhg30kJZLh6ZeSmKJIKFgN/mnqEPKaA
Nd4jTTCvnnvPdcnwSjbFCGyejU4a/Sbcnn7rleBxjFYXX279tVMveas8Fo36Mi91
bXOmX4+/0z29s+TteTcY67lEv/YQqLFi8g8DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOSniE3aY5oKjqQJJ0Isz1pXeuy0wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB
T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB
L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL09TbmlFM2FZNW9LanFRSkow
SXN6MXBYZXV5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn
mbAwDQYJKoZIhvcNAQELBQADggEBAEwe9miGMsVlZiu4K0eaM/wBV5HJ9uR3xPYV
Q+wF7YvqILKelZC/ziTccVjjBRkHxKyW13SqrkFEWfPuVcmtelWXdfgRf2ldG6Jp
rPOGic40qd/C9pOUSZi6N9sAoll0QJNkBOO+MaOHFCieEaAvbFgISN4kA8dbgx9x
R40EicphwnkGaNm7NxVD7KKN7NhTNHIWnymo6RaA59IswiY/QBRJsm2+9xbeajBs
Gh8IY8kSM/RbLiUVkxiAhibw6uiUuE84FCH/OTD9yNVw+ugHRocqEhJ+AL7Kyg55
THeqgVxHUi79uB1R9LURU6qubulumUw7ka57aoYZqb4Oih1OQTo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:05 2025 by rpki-client