Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/meH5ABO-AepEb2lojZmpuxgLlDo.roa
File: meH5ABO-AepEb2lojZmpuxgLlDo.roa (raw, json)
Hash identifier: waM3KGbobd4tcK1hwNmZyI+GTBEDjKOqEFuTMM72Nno=
Subject key identifier: 99:E1:F9:00:13:BE:01:EA:44:6F:69:68:8D:99:A9:BB:18:0B:94:3A
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CDF
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/meH5ABO-AepEb2lojZmpuxgLlDo.roa
Signing time: Fri 01 Sep 2023 09:39:52 +0000
ROA not before: Fri 01 Sep 2023 09:39:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 103.20.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=99E1F90013BE01EA446F69688D99A9BB180B943A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:e1:cb:3e:d0:57:af:0f:e3:bd:60:1c:fa:
e1:30:db:8f:e7:29:7a:40:19:a1:14:bf:b1:6b:5d:
ef:e9:fb:48:6d:92:21:49:9f:c4:c6:1a:9b:70:e3:
21:fe:db:25:8f:75:fe:b1:64:0c:f0:b2:1e:9c:c4:
d1:0a:40:69:a5:31:11:3f:e8:8c:05:12:53:25:ba:
85:86:7b:b1:8a:e8:c6:3b:db:48:a0:3c:78:a5:3b:
54:62:15:f3:de:6f:b9:e0:e5:0b:cb:af:74:d2:21:
f8:8d:f3:fd:8a:d2:33:72:90:4f:ac:f4:e3:83:32:
ef:a5:e4:18:87:6a:b3:9f:5c:73:71:55:06:d9:30:
29:ff:e3:53:85:0b:1e:76:8b:c7:fe:c8:9f:29:80:
78:b4:32:43:8d:2c:53:5c:bb:1d:44:75:36:9e:58:
91:73:c4:9b:16:27:1b:21:a8:5d:8d:31:39:ce:16:
32:97:f6:50:ea:39:8d:f0:ab:d2:52:ba:62:01:a5:
8c:32:b6:7e:4b:d8:58:35:63:14:cd:1a:ff:93:e8:
12:0a:fe:ad:41:b2:be:17:fe:f0:d5:94:4c:19:16:
38:2f:e4:26:a3:a6:f0:36:8d:0e:79:9c:32:4a:b6:
38:84:19:68:85:d6:af:c4:ea:3f:3a:5a:6f:90:db:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E1:F9:00:13:BE:01:EA:44:6F:69:68:8D:99:A9:BB:18:0B:94:3A
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/meH5ABO-AepEb2lojZmpuxgLlDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.40.0/22
Signature Algorithm: sha256WithRSAEncryption
32:34:e4:7b:18:2e:42:02:89:29:d8:15:eb:bd:b3:54:1f:17:
9f:d6:97:a2:e4:58:00:0c:4f:bc:19:76:d6:ca:bb:2b:6a:0f:
f2:9c:51:42:f8:d0:7a:84:57:c8:42:97:c8:40:5c:da:47:5c:
a4:ee:ee:63:b2:a7:87:61:d8:0d:58:51:b5:5a:75:a9:34:4e:
6c:cd:b1:86:ac:be:34:7d:6d:b6:d5:5d:39:f6:78:71:84:97:
03:3d:82:cf:99:9f:18:91:1d:90:d2:b3:55:dd:90:b1:40:44:
03:e7:eb:8b:cb:fa:d4:56:e2:c9:9c:85:02:a0:c8:89:5e:83:
5a:53:cc:88:08:97:a5:e0:b5:f5:70:df:e8:be:ea:47:4c:c0:
b4:3c:81:94:c6:e1:f6:71:f5:ba:d1:e6:eb:c1:07:69:c8:f7:
d3:ed:14:70:be:8f:ad:f0:86:ca:3a:62:d4:c7:35:9e:43:13:
a0:62:d9:3c:63:5e:47:d6:ac:b0:e6:5a:76:b7:ed:4a:b4:ea:
4b:dc:b7:9c:d0:0c:ad:13:26:47:90:ca:c9:9f:db:66:ee:53:
30:5e:f0:bf:10:7d:20:65:36:6f:8d:47:0c:81:13:8d:10:34:
17:42:f1:39:1a:c5:21:a0:ad:39:de:cb:d8:b6:fb:4c:10:5f:
84:ef:88:92
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE
RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw
OTM5NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk5RTFGOTAwMTNCRTAx
RUE0NDZGNjk2ODhEOTlBOUJCMTgwQjk0M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoAOHLPtBXrw/jvWAc+uEw24/nKXpAGaEUv7FrXe/p+0htkiFJ
n8TGGptw4yH+2yWPdf6xZAzwsh6cxNEKQGmlMRE/6IwFElMluoWGe7GK6MY720ig
PHilO1RiFfPeb7ng5QvLr3TSIfiN8/2K0jNykE+s9OODMu+l5BiHarOfXHNxVQbZ
MCn/41OFCx52i8f+yJ8pgHi0MkONLFNcux1EdTaeWJFzxJsWJxshqF2NMTnOFjKX
9lDqOY3wq9JSumIBpYwytn5L2Fg1YxTNGv+T6BIK/q1Bsr4X/vDVlEwZFjgv5Caj
pvA2jQ55nDJKtjiEGWiF1q/E6j86Wm+Q27HfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUmeH5ABO+AepEb2lojZmpuxgLlDowHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80
sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O
TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vbWVINUFCTy1BZXBFYjJsb2pabXB1
eGdMbERvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcUKDAN
BgkqhkiG9w0BAQsFAAOCAQEAMjTkexguQgKJKdgV672zVB8Xn9aXouRYAAxPvBl2
1sq7K2oP8pxRQvjQeoRXyEKXyEBc2kdcpO7uY7Knh2HYDVhRtVp1qTRObM2xhqy+
NH1tttVdOfZ4cYSXAz2Cz5mfGJEdkNKzVd2QsUBEA+fri8v61FbiyZyFAqDIiV6D
WlPMiAiXpeC19XDf6L7qR0zAtDyBlMbh9nH1utHm68EHacj30+0UcL6PrfCGyjpi
1Mc1nkMToGLZPGNeR9assOZadrftSrTqS9y3nNAMrRMmR5DKyZ/bZu5TMF7wvxB9
IGU2b41HDIETjRA0F0LxORrFIaCtOd7L2Lb7TBBfhO+Ikg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:09:50 2025 by rpki-client