Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/07JGm1ZWBSGqV1hfol4QMBwJszs.roa
File: 07JGm1ZWBSGqV1hfol4QMBwJszs.roa (raw, json)
Hash identifier: 0A+Z+1Tmj2mSkt8I6enHSSSWzHj6W9xDS01GrYcfqB4=
Subject key identifier: D3:B2:46:9B:56:56:05:21:AA:57:58:5F:A2:5E:10:30:1C:09:B3:3B
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 02B9
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/07JGm1ZWBSGqV1hfol4QMBwJszs.roa
Signing time: Thu 07 Jan 2021 03:37:23 +0000
ROA not before: Thu 07 Jan 2021 03:37:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9678
IP address blocks: 103.98.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Jan 7 03:37:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D3B2469B56560521AA57585FA25E10301C09B33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:8f:30:a1:77:2b:2f:59:3a:6b:69:76:f6:
a9:5c:3d:a9:9c:19:53:cf:a9:fc:cc:83:5d:d7:15:
43:88:fe:6d:9e:93:9c:75:0e:bf:6e:29:a0:67:c1:
dd:7b:4b:74:a0:8b:e0:71:3d:ea:61:e3:2f:05:56:
86:8f:ee:08:d2:a4:82:99:59:77:bd:0f:61:49:c9:
c1:c7:05:ec:3c:4c:57:55:ba:ec:f2:de:f5:8c:b5:
3c:45:a5:55:ef:b0:aa:bf:6f:9e:8b:76:e6:4a:27:
89:28:15:88:9c:21:a9:eb:a5:97:03:d4:a1:d5:f1:
dc:42:05:61:a5:a8:5d:e4:bf:ef:92:a7:e1:02:a2:
09:91:b3:d7:fc:d8:a0:65:fd:91:5b:18:a1:ac:8b:
33:59:c4:20:5f:cd:a7:62:ad:f5:46:65:81:8d:9c:
3d:a5:09:71:16:d8:46:62:df:60:70:d6:3f:50:35:
1b:f6:85:c1:2f:4a:dc:39:37:f2:08:3c:23:20:ef:
ef:5b:28:56:e1:52:12:6c:95:7d:09:13:60:b5:e2:
fa:cd:b2:4c:a9:38:57:19:b6:87:39:9b:a4:dd:b9:
98:d3:56:1f:dd:b3:51:88:07:f0:b9:62:47:65:ca:
8a:a6:8e:f5:db:e4:7c:d1:05:59:50:c4:9b:9a:39:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:46:9B:56:56:05:21:AA:57:58:5F:A2:5E:10:30:1C:09:B3:3B
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/07JGm1ZWBSGqV1hfol4QMBwJszs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:8c:49:ba:a6:b1:7a:4e:9f:29:d2:33:91:83:c3:2d:3b:c9:
f1:27:36:7e:c7:50:9c:1c:14:22:b7:9e:ed:10:6f:2d:5e:91:
c8:29:3c:de:ed:5f:d9:0f:2a:26:3a:b7:7d:05:1c:7f:38:1f:
03:d4:4a:cc:f0:b9:8f:02:6e:d8:15:e7:3e:26:aa:02:6c:b9:
c4:36:f6:94:dc:0d:6b:55:ff:36:bc:ef:4a:cd:4b:74:33:78:
ab:88:3e:0d:02:38:ab:fd:5d:7f:ac:b0:f8:1c:b5:35:d2:6e:
93:41:73:9b:ca:7b:ff:f6:94:3f:c1:7e:a5:96:e4:b9:7c:a8:
1b:54:af:41:66:a2:cc:9a:75:49:1b:00:15:81:aa:d7:8a:9b:
a1:ce:fb:22:02:af:a3:48:89:7f:a1:a5:58:62:7b:d0:19:70:
7f:a4:30:5c:10:8b:04:8c:3e:43:fa:6e:80:02:a3:ad:47:24:
e9:96:2e:fc:11:82:cf:d5:c1:7f:96:dd:a9:6a:cd:19:b1:85:
6f:94:04:63:fb:c8:9f:c2:b9:98:65:c5:5d:5b:9f:ff:4f:4d:
57:0b:d8:1b:78:c5:51:17:79:9f:ce:f8:79:ea:72:2a:32:3f:
39:ed:9a:4c:23:c9:c4:5a:d4:9b:8f:b7:7e:c6:e3:81:26:c4:
d8:1c:15:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICArkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF
RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yMTAxMDcw
MzM3MjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQzQjI0NjlCNTY1NjA1
MjFBQTU3NTg1RkEyNUUxMDMwMUMwOUIzM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLg48woXcrL1k6a2l29qlcPamcGVPPqfzMg13XFUOI/m2ek5x1
Dr9uKaBnwd17S3Sgi+BxPeph4y8FVoaP7gjSpIKZWXe9D2FJycHHBew8TFdVuuzy
3vWMtTxFpVXvsKq/b56LduZKJ4koFYicIanrpZcD1KHV8dxCBWGlqF3kv++Sp+EC
ogmRs9f82KBl/ZFbGKGsizNZxCBfzadirfVGZYGNnD2lCXEW2EZi32Bw1j9QNRv2
hcEvStw5N/IIPCMg7+9bKFbhUhJslX0JE2C14vrNskypOFcZtoc5m6TduZjTVh/d
s1GIB/C5YkdlyoqmjvXb5HzRBVlQxJuaObiZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU07JGm1ZWBSGqV1hfol4QMBwJszswHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh
VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO
L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzA3SkdtMVpXQlNHcVYxaGZv
bDRRTUJ3SnN6cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
YkswDQYJKoZIhvcNAQELBQADggEBANmMSbqmsXpOnynSM5GDwy07yfEnNn7HUJwc
FCK3nu0Qby1ekcgpPN7tX9kPKiY6t30FHH84HwPUSszwuY8CbtgV5z4mqgJsucQ2
9pTcDWtV/za870rNS3QzeKuIPg0COKv9XX+ssPgctTXSbpNBc5vKe//2lD/BfqWW
5Ll8qBtUr0FmosyadUkbABWBqteKm6HO+yICr6NIiX+hpVhie9AZcH+kMFwQiwSM
PkP6boACo61HJOmWLvwRgs/VwX+W3alqzRmxhW+UBGP7yJ/CuZhlxV1bn/9PTVcL
2Bt4xVEXeZ/O+HnqcioyPzntmkwjycRa1JuPt37G44EmxNgcFRw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:07 2023 by rpki-client on console-fra.rpki-client.org