Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/Eu2gfD_rXZgW7DD3_dDBdv7Zjrw.roa
File: Eu2gfD_rXZgW7DD3_dDBdv7Zjrw.roa (raw, json)
Hash identifier: CA7d9KKnoZG1Y4b22FXmTlvWle2WLk6ZF/d9W3MioSs=
Subject key identifier: 12:ED:A0:7C:3F:EB:5D:98:16:EC:30:F7:FD:D0:C1:76:FE:D9:8E:BC
Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Certificate serial: 0BCD
Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/Eu2gfD_rXZgW7DD3_dDBdv7Zjrw.roa
Signing time: Wed 29 Sep 2021 02:37:07 +0000
ROA not before: Wed 29 Sep 2021 02:37:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 134823
IP address blocks: 103.136.210.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Validity
Not Before: Sep 29 02:37:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=12EDA07C3FEB5D9816EC30F7FDD0C176FED98EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:02:a5:dd:85:6b:58:63:c2:f5:3d:92:c5:
6e:e7:44:9b:e8:e7:f8:fe:85:10:62:fd:bb:22:3c:
82:ce:df:88:d5:08:4b:37:af:f2:21:97:c4:28:a7:
29:dd:45:82:e3:90:93:56:71:b9:4d:d5:bd:01:26:
7e:de:94:43:c8:06:ad:d1:e5:ab:94:84:e9:a0:c6:
dc:d8:f5:bb:60:b1:09:9e:d0:1d:7b:87:d4:35:97:
67:ca:b5:94:59:cc:60:71:43:44:1b:d0:8a:9a:7d:
82:6d:60:d8:da:93:50:64:a4:3a:4f:c4:8c:0f:98:
4d:8c:db:ff:7a:ed:98:fe:34:e8:6a:64:08:20:2f:
4f:f2:f8:d4:20:e0:03:ca:37:a7:0a:92:93:6a:93:
c8:e0:f3:39:e0:b6:39:8a:60:41:4b:2e:63:d9:bf:
73:9a:99:52:1a:08:5d:7c:7b:cc:bc:b0:a8:9f:f5:
b7:62:94:f3:ba:6f:2a:d0:eb:1c:85:89:84:60:a2:
22:23:4d:3d:49:01:64:33:e1:db:4d:c7:b3:b4:0d:
c5:ac:42:9a:d8:89:ed:09:f5:1f:8e:22:85:67:55:
cb:a5:90:1d:76:ef:3f:89:e3:75:ac:77:62:15:0b:
7b:f1:9b:5a:10:1b:ea:c3:35:ec:57:41:af:32:1e:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:A0:7C:3F:EB:5D:98:16:EC:30:F7:FD:D0:C1:76:FE:D9:8E:BC
X509v3 Authority Key Identifier:
keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/Eu2gfD_rXZgW7DD3_dDBdv7Zjrw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
48:77:85:7c:21:fb:c8:4b:77:ff:2d:4f:a1:9e:d2:58:57:6d:
c2:03:72:88:60:6c:ae:70:7f:6f:0d:b3:bb:88:9b:8e:d3:59:
2a:08:16:42:e6:ef:69:fc:c7:f8:26:61:f7:a2:ec:b0:65:7a:
29:cf:a8:45:ca:fc:2e:43:bd:a9:70:e3:34:0f:23:9b:75:cb:
7b:a6:a4:08:be:53:24:83:0a:7a:14:99:a4:34:b4:79:db:e5:
dc:4c:b2:98:0b:90:42:98:6b:ec:fb:c0:07:7b:17:dc:4c:6f:
2e:3c:08:0a:38:ff:bb:d1:47:28:f1:70:e5:e3:2e:2a:86:db:
f1:17:36:b8:8c:b6:78:08:ec:05:87:dc:93:18:07:ca:b5:f9:
9c:af:ec:ce:1d:24:8c:7e:d4:61:4d:c0:de:12:fa:1d:a6:1f:
90:d1:12:c2:47:38:51:22:c5:5c:d9:f4:fc:65:97:f3:1a:3d:
8a:71:28:70:43:02:7f:03:21:d0:9e:91:ce:5f:4e:ff:7c:d4:
4a:61:4d:5f:75:2b:cc:a1:a7:88:e1:5f:ae:a2:a7:27:bb:37:
b2:03:23:ba:9a:a4:d7:8e:ff:e7:cd:08:2b:22:32:8f:55:9e:
bb:f4:b4:23:d1:51:c8:fc:ea:77:3f:0f:17:3a:67:68:32:0e:
74:03:1c:66
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICC80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjcx
MDlBRTI1MEVGMkVDQUY3OUJGNDg5MEYwRDZDQkU1RTJEN0NDNjAeFw0yMTA5Mjkw
MjM3MDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEyRURBMDdDM0ZFQjVE
OTgxNkVDMzBGN0ZERDBDMTc2RkVEOThFQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpfgKl3YVrWGPC9T2SxW7nRJvo5/j+hRBi/bsiPILO34jVCEs3
r/Ihl8QopyndRYLjkJNWcblN1b0BJn7elEPIBq3R5auUhOmgxtzY9btgsQme0B17
h9Q1l2fKtZRZzGBxQ0Qb0IqafYJtYNjak1BkpDpPxIwPmE2M2/967Zj+NOhqZAgg
L0/y+NQg4APKN6cKkpNqk8jg8zngtjmKYEFLLmPZv3OamVIaCF18e8y8sKif9bdi
lPO6byrQ6xyFiYRgoiIjTT1JAWQz4dtNx7O0DcWsQprYie0J9R+OIoVnVculkB12
7z+J43Wsd2IVC3vxm1oQG+rDNexXQa8yHrEVAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUEu2gfD/rXZgW7DD3/dDBdv7ZjrwwHwYDVR0jBBgwFoAUJxCa4lDvLsr3m/SJ
Dw1svl4tfMYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1VBTkdT
SElIL0p4Q2E0bER2THNyM21fU0pEdzFzdmw0dGZNWS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvSnhDYTRsRHZMc3IzbV9TSkR3MXN2bDR0Zk1ZLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1VBTkdTSElIL0V1MmdmRF9yWFpn
VzdERDNfZERCZHY3Wmpydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFniNIwDQYJKoZIhvcNAQELBQADggEBAEh3hXwh+8hLd/8tT6Ge0lhXbcID
cohgbK5wf28Ns7uIm47TWSoIFkLm72n8x/gmYfei7LBleinPqEXK/C5Dvalw4zQP
I5t1y3umpAi+UySDCnoUmaQ0tHnb5dxMspgLkEKYa+z7wAd7F9xMby48CAo4/7vR
RyjxcOXjLiqG2/EXNriMtngI7AWH3JMYB8q1+Zyv7M4dJIx+1GFNwN4S+h2mH5DR
EsJHOFEixVzZ9Pxll/MaPYpxKHBDAn8DIdCekc5fTv981EphTV91K8yhp4jhX66i
pye7N7IDI7qapNeO/+fNCCsiMo9Vnrv0tCPRUcj86nc/Dxc6Z2gyDnQDHGY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:16 2025 by rpki-client