Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/7DL1ucoTmw3sOrvpfvs0XWoLt-g.roa
File: 7DL1ucoTmw3sOrvpfvs0XWoLt-g.roa (raw, json)
Hash identifier: qVdtTK3nwAqeo6t0Mm1W6/h2tdteejsyGGPlZXl3OzQ=
Subject key identifier: EC:32:F5:B9:CA:13:9B:0D:EC:3A:BB:E9:7E:FB:34:5D:6A:0B:B7:E8
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0932
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/7DL1ucoTmw3sOrvpfvs0XWoLt-g.roa
Signing time: Wed 29 Sep 2021 02:53:01 +0000
ROA not before: Wed 29 Sep 2021 02:53:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17710
IP address blocks: 150.107.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 29 02:53:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EC32F5B9CA139B0DEC3ABBE97EFB345D6A0BB7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:30:df:ec:c4:f2:0e:0d:46:2b:1d:1c:df:
b2:cb:03:4d:f0:58:86:8b:96:51:78:19:c8:e7:06:
27:f4:af:05:b3:ca:06:33:8b:6f:9b:f8:69:9a:4d:
a0:28:c5:09:c2:95:01:c2:17:d2:69:cd:2f:c1:32:
3e:61:b0:56:84:95:e6:53:3c:e2:7c:10:ea:67:d8:
93:b8:c9:48:83:af:48:fc:0e:64:28:18:3a:b1:32:
9a:67:da:a8:0a:06:61:f1:97:55:d9:a6:1d:6a:07:
16:d4:45:8e:98:8c:33:c7:0b:64:24:1f:d3:b0:7c:
19:27:42:cb:96:64:ab:31:24:e8:25:10:93:13:7d:
ff:af:74:12:79:cf:f5:ff:2f:a5:1a:db:25:35:85:
6a:4f:7a:47:93:c5:2a:7e:71:92:a0:07:01:1e:4e:
a7:bf:77:32:54:4e:18:d7:cf:12:2d:7c:0e:ec:19:
db:2b:98:8c:2e:84:00:03:05:6a:65:9b:f0:0d:81:
74:97:5d:70:90:ec:b7:9e:cf:7c:13:08:ca:82:4f:
5e:61:5c:3a:6d:55:0c:19:ab:07:be:4b:b6:ef:b7:
a7:ee:7d:c9:99:c4:37:53:1e:c8:4c:d3:fa:33:2a:
65:54:99:da:4b:db:85:cb:f5:77:f3:79:fa:59:2c:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:F5:B9:CA:13:9B:0D:EC:3A:BB:E9:7E:FB:34:5D:6A:0B:B7:E8
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/7DL1ucoTmw3sOrvpfvs0XWoLt-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.64.0/22
Signature Algorithm: sha256WithRSAEncryption
21:bc:d3:3b:be:58:30:4e:04:8c:e9:81:22:9e:25:22:55:73:
3d:45:40:ee:71:9d:a3:21:3c:29:c8:87:2b:f5:d5:b4:5c:08:
9e:38:11:32:e2:88:66:a7:10:0e:4a:5f:c4:b2:42:e0:f9:3e:
a7:e9:22:d6:bd:46:7c:b3:73:43:16:36:32:a1:6b:77:ea:08:
16:98:5a:1e:dc:34:71:40:50:f9:f8:a8:aa:b8:c2:98:45:29:
b2:ed:19:51:7f:26:d1:3c:ee:3e:02:53:f2:81:93:23:65:da:
a9:65:ca:d5:61:31:02:39:66:16:7c:37:1c:29:c2:d3:62:04:
eb:ce:08:e7:83:e9:40:42:2c:cf:bd:04:9e:86:43:69:be:72:
b7:1e:69:a7:e6:ad:46:75:f5:03:81:1f:e9:e4:6b:4b:26:30:
43:3c:b0:4d:93:e3:7b:c7:ae:b1:ae:2c:cb:f9:aa:16:88:67:
6d:50:42:ce:73:78:b2:ee:47:6c:d4:ef:a7:e8:c6:31:1e:17:
6b:50:15:5f:94:d1:9f:a3:e7:94:49:71:19:38:1e:4e:b5:7d:
93:e9:72:91:8b:da:25:49:17:eb:74:10:da:00:ae:bc:79:22:
9c:a8:d9:eb:b3:ec:e3:93:a1:3b:dc:93:ce:48:2e:9d:c5:be:
5b:c9:9a:95
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3
OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yMTA5Mjkw
MjUzMDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVDMzJGNUI5Q0ExMzlC
MERFQzNBQkJFOTdFRkIzNDVENkEwQkI3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2hzDf7MTyDg1GKx0c37LLA03wWIaLllF4GcjnBif0rwWzygYz
i2+b+GmaTaAoxQnClQHCF9JpzS/BMj5hsFaEleZTPOJ8EOpn2JO4yUiDr0j8DmQo
GDqxMppn2qgKBmHxl1XZph1qBxbURY6YjDPHC2QkH9OwfBknQsuWZKsxJOglEJMT
ff+vdBJ5z/X/L6Ua2yU1hWpPekeTxSp+cZKgBwEeTqe/dzJUThjXzxItfA7sGdsr
mIwuhAADBWplm/ANgXSXXXCQ7Leez3wTCMqCT15hXDptVQwZqwe+S7bvt6fufcmZ
xDdTHshM0/ozKmVUmdpL24XL9XfzefpZLHuZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7DL1ucoTmw3sOrvpfvs0XWoLt+gwHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U
IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU
L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVULzdETDF1Y29UbXczc09ydnBm
dnMwWFdvTHQtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKW
a0AwDQYJKoZIhvcNAQELBQADggEBACG80zu+WDBOBIzpgSKeJSJVcz1FQO5xnaMh
PCnIhyv11bRcCJ44ETLiiGanEA5KX8SyQuD5PqfpIta9Rnyzc0MWNjKha3fqCBaY
Wh7cNHFAUPn4qKq4wphFKbLtGVF/JtE87j4CU/KBkyNl2qllytVhMQI5ZhZ8Nxwp
wtNiBOvOCOeD6UBCLM+9BJ6GQ2m+crceaafmrUZ19QOBH+nka0smMEM8sE2T43vH
rrGuLMv5qhaIZ21QQs5zeLLuR2zU76foxjEeF2tQFV+U0Z+j55RJcRk4Hk61fZPp
cpGL2iVJF+t0ENoArrx5Ipyo2euz7OOToTvck85ILp3FvlvJmpU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:49 2025 by rpki-client