Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/mkKtvnzjUnWsfVr1OxNfFsdDLPg.roa
File: mkKtvnzjUnWsfVr1OxNfFsdDLPg.roa (raw, json)
Hash identifier: V4EjOakfuw5A+nS6NumNH1ieYU4r92Cd6mjCprYjUXk=
Subject key identifier: 9A:42:AD:BE:7C:E3:52:75:AC:7D:5A:F5:3B:13:5F:16:C7:43:2C:F8
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 10FC
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/mkKtvnzjUnWsfVr1OxNfFsdDLPg.roa
Signing time: Fri 01 Sep 2023 09:01:01 +0000
ROA not before: Fri 01 Sep 2023 09:01:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63199
IP address blocks: 103.124.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Sep 1 09:01:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9A42ADBE7CE35275AC7D5AF53B135F16C7432CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:18:fb:f3:60:cb:34:fb:1a:5b:91:fc:9c:
0e:09:49:38:54:23:4b:1a:aa:15:ad:e7:bb:70:ef:
c4:e4:8e:9b:cc:d2:32:5b:7d:21:1c:83:87:30:af:
2f:a8:80:a3:2f:06:d0:08:48:eb:8c:81:31:e4:02:
72:55:4b:63:16:87:b6:1d:be:e8:4f:e8:a7:8f:b8:
e5:62:ed:b9:60:fb:0e:d6:2a:47:fb:85:2d:d5:2c:
90:75:34:ad:2c:46:81:35:85:9b:9d:37:4b:3d:4f:
22:9d:55:3a:46:8c:f8:37:18:db:89:96:1f:17:48:
af:88:bb:fe:60:e0:c1:32:aa:6b:b5:86:24:95:98:
6d:2c:62:cf:82:2f:8c:8c:b8:1b:2e:8e:27:c9:a9:
d9:a0:a3:9e:43:78:ee:73:3e:25:73:40:62:e5:8b:
33:d8:f4:18:15:90:7e:0f:82:a6:d0:09:8b:fd:57:
b1:d7:7f:de:10:63:05:c5:55:1b:62:d5:a0:cc:a9:
dd:cb:5b:e8:c5:8c:d9:fd:20:8f:d1:cd:71:6b:91:
99:55:20:61:b1:19:a0:79:1e:3f:62:15:ff:e0:91:
d0:69:fd:9e:e4:ca:9a:75:20:3f:63:98:71:28:96:
2e:a1:ee:c4:f0:af:be:2f:03:00:74:a0:18:d8:5b:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:AD:BE:7C:E3:52:75:AC:7D:5A:F5:3B:13:5F:16:C7:43:2C:F8
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/mkKtvnzjUnWsfVr1OxNfFsdDLPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.150.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:24:14:aa:65:68:17:08:96:21:af:ec:bd:a7:6b:0a:e9:be:
d6:1e:82:ad:06:32:76:6c:e6:7e:4d:ce:44:d3:7f:db:73:2b:
6a:a5:70:5e:01:b2:83:a2:00:3e:35:43:3b:eb:01:53:e1:de:
2e:c6:9e:c5:36:f1:e1:d6:0b:d9:e5:6f:09:ae:8f:8e:48:36:
05:e4:d2:97:b6:2c:76:1a:1e:0c:cc:a9:22:af:9b:c7:48:e5:
1f:4e:b4:94:66:ea:6d:b8:fb:c0:e7:47:c4:79:6e:d1:e4:8d:
cb:bf:47:5e:9f:cf:9f:b6:ae:24:a3:6a:ed:1d:57:8c:27:b4:
7a:6c:15:dc:4e:5a:73:71:53:60:49:be:c4:67:90:31:f6:66:
4f:82:8e:88:88:33:9a:e9:43:18:e6:3f:83:70:e3:79:b4:72:
a3:b5:f1:30:65:a4:58:8d:aa:e4:90:3b:2f:03:19:0b:01:a7:
a6:f0:ac:5e:74:56:55:c0:7d:45:90:6a:2f:fd:b9:da:9d:5c:
a6:a0:55:fa:34:b4:59:8f:2c:02:fe:62:a8:e7:3b:0d:b4:84:
18:33:41:6f:55:de:fa:ba:5c:3c:c2:d5:2a:16:ce:c2:80:93:
4b:a4:11:28:af:ca:1f:1e:c8:34:39:54:4f:40:c1:a3:da:20:
d1:22:1c:91
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDM5
QTAyQUUxNTA4NjJEMTVGQjcyN0M1MTFCMTA0RDYzRUZCNDY4NjAeFw0yMzA5MDEw
OTAxMDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlBNDJBREJFN0NFMzUy
NzVBQzdENUFGNTNCMTM1RjE2Qzc0MzJDRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvDhj782DLNPsaW5H8nA4JSThUI0saqhWt57tw78TkjpvM0jJb
fSEcg4cwry+ogKMvBtAISOuMgTHkAnJVS2MWh7YdvuhP6KePuOVi7blg+w7WKkf7
hS3VLJB1NK0sRoE1hZudN0s9TyKdVTpGjPg3GNuJlh8XSK+Iu/5g4MEyqmu1hiSV
mG0sYs+CL4yMuBsujifJqdmgo55DeO5zPiVzQGLlizPY9BgVkH4PgqbQCYv9V7HX
f94QYwXFVRti1aDMqd3LW+jFjNn9II/RzXFrkZlVIGGxGaB5Hj9iFf/gkdBp/Z7k
ypp1ID9jmHEoli6h7sTwr74vAwB0oBjYWxBhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmkKtvnzjUnWsfVr1OxNfFsdDLPgwHwYDVR0jBBgwFoAU05oCrhUIYtFftyfF
EbEE1j77RoYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09N
LzA1b0NyaFVJWXRGZnR5ZkZFYkVFMWo3N1JvWS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvMDVvQ3JoVUlZdEZmdHlmRkViRUUxajc3Um9ZLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09NL21rS3R2bnpqVW5Xc2ZWcjFP
eE5mRnNkRExQZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn
fJYwDQYJKoZIhvcNAQELBQADggEBAK0kFKplaBcIliGv7L2nawrpvtYegq0GMnZs
5n5NzkTTf9tzK2qlcF4BsoOiAD41QzvrAVPh3i7GnsU28eHWC9nlbwmuj45INgXk
0pe2LHYaHgzMqSKvm8dI5R9OtJRm6m24+8DnR8R5btHkjcu/R16fz5+2riSjau0d
V4wntHpsFdxOWnNxU2BJvsRnkDH2Zk+CjoiIM5rpQxjmP4Nw43m0cqO18TBlpFiN
quSQOy8DGQsBp6bwrF50VlXAfUWQai/9udqdXKagVfo0tFmPLAL+YqjnOw20hBgz
QW9V3vq6XDzC1SoWzsKAk0ukESivyh8eyDQ5VE9AwaPaINEiHJE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:45 2025 by rpki-client