Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/J-9JFpEWc3d9QMglKEYmnWcyY1o.roa
File: J-9JFpEWc3d9QMglKEYmnWcyY1o.roa (raw, json)
Hash identifier: e6qC7z4USxNR1JtiGBsvQ3tX0GK/XKoiZvzf0cXqr/g=
Subject key identifier: 27:EF:49:16:91:16:73:77:7D:40:C8:25:28:46:26:9D:67:32:63:5A
Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Certificate serial: 0A21
Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/J-9JFpEWc3d9QMglKEYmnWcyY1o.roa
Signing time: Thu 15 Sep 2022 02:37:33 +0000
ROA not before: Thu 15 Sep 2022 02:37:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 103.197.174.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Validity
Not Before: Sep 15 02:37:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=27EF4916911673777D40C8252846269D6732635A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:82:49:25:55:63:cc:a3:a2:fb:e8:c1:c2:
f5:32:0c:f7:36:5c:6c:b1:7f:59:fd:5b:2f:b3:ba:
87:ce:39:1e:e3:f7:e5:98:8d:3d:d1:02:24:2a:b2:
e1:e6:05:73:3c:b5:18:e8:7d:a3:df:59:ff:ec:30:
a1:ed:45:f3:1c:01:6a:f6:cd:3e:05:83:13:88:2f:
c6:46:16:c9:13:76:8e:39:ec:bd:3c:96:60:c7:f7:
d9:53:85:59:45:c0:4a:71:85:5b:fe:21:45:ab:d7:
0b:ad:cc:d6:54:38:74:65:c7:ef:d6:e7:f6:3d:27:
ea:ec:f0:81:3b:5b:4c:2f:69:fc:15:e4:1a:c5:79:
92:3d:e1:dc:63:5d:e0:61:e2:4b:2e:c2:e4:d9:31:
be:36:66:d0:b6:1c:6d:da:32:9c:61:a7:83:04:0b:
71:42:3a:11:ec:e1:18:41:4a:e0:e3:28:3c:be:ad:
e6:55:6f:20:eb:b3:ef:ab:08:11:8e:1e:8e:2d:90:
d4:8c:3a:78:d1:29:e8:62:c8:c0:62:3f:6a:e1:be:
e2:33:c9:97:33:0a:83:aa:55:47:75:69:27:3e:71:
c6:87:72:e1:cf:2e:bf:f9:0b:33:43:41:14:f4:7d:
3a:39:ab:9e:87:dc:02:ee:28:4f:26:c0:05:13:91:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EF:49:16:91:16:73:77:7D:40:C8:25:28:46:26:9D:67:32:63:5A
X509v3 Authority Key Identifier:
keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/J-9JFpEWc3d9QMglKEYmnWcyY1o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:ba:2f:94:52:d6:5b:e1:b1:7b:bf:4d:20:64:0e:d5:19:ed:
6f:58:bf:af:63:95:94:6e:02:03:a7:13:b0:34:d2:ea:54:00:
70:43:56:16:b7:16:76:6d:1a:04:1c:49:92:ec:21:36:c4:5e:
41:9d:78:df:cd:80:6a:e5:7c:fe:6b:de:fa:0d:d7:0e:6a:30:
3b:d2:5b:80:6b:1f:f9:72:01:fc:5f:45:9f:97:39:7e:89:18:
3a:e6:34:c2:7d:53:7f:78:1c:25:56:ca:9e:e5:9c:2f:a7:92:
19:87:fa:62:80:bd:26:66:ff:10:10:08:78:46:17:bd:03:7b:
d6:c9:aa:af:2e:3c:6f:33:4d:b6:39:cc:cc:b0:66:b7:26:3a:
7a:e8:cc:c7:e3:dc:16:4c:88:54:54:7b:e1:28:d1:7c:47:d2:
80:5e:f0:c4:85:74:5d:b4:21:bf:23:28:e9:1a:b1:96:13:94:
81:46:5b:93:7f:af:5d:6b:ec:9c:ed:00:93:65:79:c6:23:e8:
25:96:a5:97:0c:71:0f:b8:2b:5e:6b:ee:03:36:9a:2e:ee:c3:
27:fd:36:27:05:13:04:ac:f9:ce:5a:8c:29:21:ab:c0:9a:52:
00:dd:94:93:de:c5:ab:d3:b9:13:9d:09:f1:fa:9d:db:6b:bb:
57:0b:7f:47
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0
QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yMjA5MTUw
MjM3MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI3RUY0OTE2OTExNjcz
Nzc3RDQwQzgyNTI4NDYyNjlENjczMjYzNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQJ4JJJVVjzKOi++jBwvUyDPc2XGyxf1n9Wy+zuofOOR7j9+WY
jT3RAiQqsuHmBXM8tRjofaPfWf/sMKHtRfMcAWr2zT4FgxOIL8ZGFskTdo457L08
lmDH99lThVlFwEpxhVv+IUWr1wutzNZUOHRlx+/W5/Y9J+rs8IE7W0wvafwV5BrF
eZI94dxjXeBh4ksuwuTZMb42ZtC2HG3aMpxhp4MEC3FCOhHs4RhBSuDjKDy+reZV
byDrs++rCBGOHo4tkNSMOnjRKehiyMBiP2rhvuIzyZczCoOqVUd1aSc+ccaHcuHP
Lr/5CzNDQRT0fTo5q56H3ALuKE8mwAUTkadzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUJ+9JFpEWc3d9QMglKEYmnWcyY1owHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs
hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB
WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvSi05SkZwRVdjM2Q5UU1n
bEtFWW1uV2N5WTFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWfFrjANBgkqhkiG9w0BAQsFAAOCAQEAOrovlFLWW+Gxe79NIGQO1Rntb1i/r2OV
lG4CA6cTsDTS6lQAcENWFrcWdm0aBBxJkuwhNsReQZ14382AauV8/mve+g3XDmow
O9JbgGsf+XIB/F9Fn5c5fokYOuY0wn1Tf3gcJVbKnuWcL6eSGYf6YoC9Jmb/EBAI
eEYXvQN71smqry48bzNNtjnMzLBmtyY6eujMx+PcFkyIVFR74SjRfEfSgF7wxIV0
XbQhvyMo6RqxlhOUgUZbk3+vXWvsnO0Ak2V5xiPoJZallwxxD7grXmvuAzaaLu7D
J/02JwUTBKz5zlqMKSGrwJpSAN2Uk97Fq9O5E50J8fqd22u7Vwt/Rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org