Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/AdkL9SilaZPJ-g1xfT4vlm71Uzw.roa
File: AdkL9SilaZPJ-g1xfT4vlm71Uzw.roa (raw, json)
Hash identifier: SLxhCy02z+bHjROZ8LQYlpb3rSZpZYwi2tAuMepGWdU=
Subject key identifier: 01:D9:0B:F5:28:A5:69:93:C9:FA:0D:71:7D:3E:2F:96:6E:F5:53:3C
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0882
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/AdkL9SilaZPJ-g1xfT4vlm71Uzw.roa
Signing time: Sun 07 Feb 2021 12:58:00 +0000
ROA not before: Sun 07 Feb 2021 12:58:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 48024
IP address blocks: 103.122.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Feb 7 12:58:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=01D90BF528A56993C9FA0D717D3E2F966EF5533C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:b7:5c:4e:72:03:9f:5f:f4:a9:43:e8:63:
30:2e:b0:af:7b:38:08:66:78:06:be:9d:4f:43:96:
2b:6b:30:a8:cb:8d:8b:fd:77:c3:af:7f:41:ed:b5:
98:4d:4b:7b:1e:6b:98:f5:f3:47:65:41:13:ab:8d:
8a:a0:62:89:2b:69:d8:a0:18:10:83:21:de:0d:d8:
a5:3a:db:8f:98:9d:41:f9:4f:5b:aa:db:db:5c:7b:
4a:7b:a3:84:13:8f:82:07:db:a0:d1:2b:b7:b0:de:
76:2b:29:a6:6b:e9:60:30:b0:d7:a4:b2:e1:b7:57:
05:d2:ef:da:54:f6:83:55:e4:54:31:e7:0d:d5:75:
6d:b5:af:b4:95:fa:1d:31:85:55:26:0d:83:5b:0d:
da:d4:1f:c6:c1:46:b0:17:3e:27:a9:26:5c:c8:14:
e3:86:dc:44:34:18:e4:6f:2a:f8:c5:80:b0:b8:70:
c6:4f:af:b6:fa:79:98:d3:bb:5b:20:cc:40:e7:1c:
36:ec:9c:c5:09:a0:1b:f2:cb:0f:6b:8e:96:8d:db:
c3:4b:35:10:7d:3c:e3:bd:d7:2a:da:78:2e:b7:7e:
ec:38:d0:77:0c:88:9f:c5:40:56:a6:6b:67:79:5d:
f6:81:e6:1b:c7:7f:b3:f4:71:75:09:89:28:87:45:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:0B:F5:28:A5:69:93:C9:FA:0D:71:7D:3E:2F:96:6E:F5:53:3C
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/AdkL9SilaZPJ-g1xfT4vlm71Uzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.20.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:e6:2a:42:37:4f:05:c9:3b:5a:1d:8c:dd:53:d7:cc:0e:a5:
cc:ed:a6:fe:65:9d:72:94:b4:ac:ae:92:ad:5f:cb:1f:18:e7:
be:35:00:94:65:1a:90:d9:0d:1c:35:84:ed:71:56:c6:83:35:
40:76:b6:42:c9:04:5a:f9:2b:7e:da:df:b7:82:22:cb:1a:41:
6a:16:20:e2:46:6a:e3:10:1f:9f:23:08:b7:90:db:1b:e2:7f:
f6:ff:a2:e9:7a:8c:0b:2b:8c:f9:4a:06:dc:d1:d9:93:55:4d:
16:15:66:01:1d:d4:4a:bb:45:f7:9b:c3:97:1e:f1:cb:96:f1:
19:c3:da:6a:de:9b:a1:3a:b9:11:e5:b2:bf:93:a9:93:e1:6d:
c2:fd:65:92:6a:05:50:57:d0:27:de:8e:30:1a:48:05:ad:87:
3e:72:44:03:59:c1:03:db:86:84:42:16:ee:dc:39:cd:44:ea:
10:5a:0c:6f:ac:ab:17:6b:91:38:40:1b:e4:bb:e6:d2:82:9d:
a1:c2:bf:26:57:fb:29:9c:26:76:ac:f7:1e:11:b4:2c:c7:c5:
8a:a3:e8:7b:61:82:54:f0:0b:00:ad:b2:11:56:f1:85:2a:92:
6b:7b:94:b8:51:e8:7b:bf:c0:c3:da:64:14:5b:e7:5b:db:94:
29:92:29:e4
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz
RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yMTAyMDcx
MjU4MDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAxRDkwQkY1MjhBNTY5
OTNDOUZBMEQ3MTdEM0UyRjk2NkVGNTUzM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLB7dcTnIDn1/0qUPoYzAusK97OAhmeAa+nU9DlitrMKjLjYv9
d8Ovf0HttZhNS3sea5j180dlQROrjYqgYokradigGBCDId4N2KU624+YnUH5T1uq
29tce0p7o4QTj4IH26DRK7ew3nYrKaZr6WAwsNeksuG3VwXS79pU9oNV5FQx5w3V
dW21r7SV+h0xhVUmDYNbDdrUH8bBRrAXPiepJlzIFOOG3EQ0GORvKvjFgLC4cMZP
r7b6eZjTu1sgzEDnHDbsnMUJoBvyyw9rjpaN28NLNRB9POO91yraeC63fuw40HcM
iJ/FQFama2d5XfaB5hvHf7P0cXUJiSiHRYKhAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUAdkL9SilaZPJ+g1xfT4vlm71UzwwHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt
+2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB
SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvQWRrTDlTaWxh
WlBKLWcxeGZUNHZsbTcxVXp3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmd6FDANBgkqhkiG9w0BAQsFAAOCAQEAw+YqQjdPBck7Wh2M3VPXzA6l
zO2m/mWdcpS0rK6SrV/LHxjnvjUAlGUakNkNHDWE7XFWxoM1QHa2QskEWvkrftrf
t4IiyxpBahYg4kZq4xAfnyMIt5DbG+J/9v+i6XqMCyuM+UoG3NHZk1VNFhVmAR3U
SrtF95vDlx7xy5bxGcPaat6boTq5EeWyv5Opk+Ftwv1lkmoFUFfQJ96OMBpIBa2H
PnJEA1nBA9uGhEIW7tw5zUTqEFoMb6yrF2uROEAb5Lvm0oKdocK/Jlf7KZwmdqz3
HhG0LMfFiqPoe2GCVPALAK2yEVbxhSqSa3uUuFHoe7/Aw9pkFFvnW9uUKZIp5A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:20 2025 by rpki-client