Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/58PJ0cQ-CY20A0MX-lR8IkkW2F8.roa
File: 58PJ0cQ-CY20A0MX-lR8IkkW2F8.roa (raw, json)
Hash identifier: sJgo/r0ESTeWecZRJo6ImUo8YpTjxQGLZ8cmv+s9uas=
Subject key identifier: E7:C3:C9:D1:C4:3E:09:8D:B4:03:43:17:FA:54:7C:22:49:16:D8:5F
Certificate issuer: /CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
Certificate serial: 0609
Authority key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/58PJ0cQ-CY20A0MX-lR8IkkW2F8.roa
Signing time: Wed 09 Dec 2020 05:06:13 +0000
ROA not before: Wed 09 Dec 2020 05:06:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.126.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
Validity
Not Before: Dec 9 05:06:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E7C3C9D1C43E098DB4034317FA547C224916D85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:de:05:84:0f:91:6f:06:e2:c2:83:cf:cc:
d6:25:1c:b1:ec:c6:8b:b6:00:95:67:eb:97:4f:61:
4e:76:32:d1:4d:da:88:6d:9b:8d:4d:67:62:20:f9:
37:2c:41:05:92:36:51:27:48:79:4f:b9:18:49:8f:
ad:7a:b9:11:bd:c9:e2:4c:4d:67:39:4c:d7:bf:9c:
77:fb:6e:9e:5a:9d:b3:59:ea:b8:d9:ac:80:a6:ea:
70:0a:39:f8:c8:03:98:bb:cb:d2:e0:01:61:45:31:
35:1c:ca:44:cf:75:f2:4f:f8:1c:df:26:66:71:c7:
da:21:df:56:9a:84:13:cb:44:4f:45:82:81:9f:61:
09:da:ac:1c:68:f3:4d:fc:fd:d7:29:69:da:ff:c6:
14:a2:0d:62:34:ad:07:a1:e2:cc:1c:4f:34:59:f3:
e4:5e:31:91:4c:65:51:0d:d0:86:b4:97:09:50:07:
c7:d4:ea:50:7d:19:8d:af:41:75:af:8e:ef:e4:38:
9f:f5:e5:7c:73:5a:d7:da:b8:9e:e8:5c:eb:9b:8a:
b0:b0:dc:62:fe:2c:de:0b:54:83:41:f9:86:eb:f0:
2a:b6:f3:3c:0a:0c:6e:74:cf:83:c1:1b:8c:09:90:
e6:9d:37:b1:a9:8d:0b:6b:ea:74:7b:33:45:59:b4:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:C9:D1:C4:3E:09:8D:B4:03:43:17:FA:54:7C:22:49:16:D8:5F
X509v3 Authority Key Identifier:
keyid:0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/58PJ0cQ-CY20A0MX-lR8IkkW2F8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.88.0/22
Signature Algorithm: sha256WithRSAEncryption
83:96:65:73:ed:5d:34:af:ac:c5:94:bd:3f:ab:1c:a5:9b:ec:
6c:03:5f:52:8c:71:cb:34:c3:09:9f:11:80:85:48:8a:d2:24:
a7:3e:71:db:c2:68:85:5e:66:5e:98:fa:b5:8a:4e:56:49:fe:
c3:a4:5d:d4:4b:d8:6b:2b:1c:1a:5e:67:f0:7e:64:a2:c3:35:
b3:0c:6a:43:c6:72:dd:ff:95:cf:17:23:b1:c8:29:c2:1f:b7:
52:17:d4:3c:ee:bb:b6:bf:b2:95:bf:1f:04:86:35:71:12:b9:
f0:7e:47:98:13:8b:6f:d4:24:00:ce:14:7b:cf:36:c4:c5:09:
ae:6a:29:71:1f:14:48:97:b5:a7:4f:e5:51:62:d1:30:8d:63:
d5:33:d3:6e:81:91:9b:ce:3c:bb:9d:ec:60:a4:14:2f:2d:d2:
77:f1:d0:22:d2:11:7c:29:16:e6:57:51:29:6b:1c:f9:13:e9:
80:da:79:04:67:38:49:6c:71:f1:fc:9f:5c:21:18:a9:21:fe:
14:ea:bc:d7:72:f4:6a:4a:3b:c1:e5:21:2c:a5:c9:ff:6b:94:
61:74:cd:6c:b9:01:bf:95:91:c2:72:08:b7:75:2e:70:23:29:
fc:d4:1b:87:33:53:39:d2:d6:d0:bd:32:2f:41:fd:f7:a5:60:
59:82:84:d2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEJE
QTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMxRDAeFw0yMDEyMDkw
NTA2MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU3QzNDOUQxQzQzRTA5
OERCNDAzNDMxN0ZBNTQ3QzIyNDkxNkQ4NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQfN4FhA+RbwbiwoPPzNYlHLHsxou2AJVn65dPYU52MtFN2oht
m41NZ2Ig+TcsQQWSNlEnSHlPuRhJj616uRG9yeJMTWc5TNe/nHf7bp5anbNZ6rjZ
rICm6nAKOfjIA5i7y9LgAWFFMTUcykTPdfJP+BzfJmZxx9oh31aahBPLRE9FgoGf
YQnarBxo8038/dcpadr/xhSiDWI0rQeh4swcTzRZ8+ReMZFMZVEN0Ia0lwlQB8fU
6lB9GY2vQXWvju/kOJ/15XxzWtfauJ7oXOubirCw3GL+LN4LVINB+Ybr8Cq28zwK
DG50z4PBG4wJkOadN7GpjQtr6nR7M0VZtBrPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU58PJ0cQ+CY20A0MX+lR8IkkW2F8wHwYDVR0jBBgwFoAUC9olxjD4/0bjB7GU
zSqtHm0GMx0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdG
VS9DOW9seGpENF8wYmpCN0dVelNxdEhtMEdNeDAuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NIQU5HRlUvNThQSjBjUS1DWTIwQTBN
WC1sUjhJa2tXMkY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Amd+WDANBgkqhkiG9w0BAQsFAAOCAQEAg5Zlc+1dNK+sxZS9P6scpZvsbANfUoxx
yzTDCZ8RgIVIitIkpz5x28JohV5mXpj6tYpOVkn+w6Rd1EvYayscGl5n8H5kosM1
swxqQ8Zy3f+Vzxcjscgpwh+3UhfUPO67tr+ylb8fBIY1cRK58H5HmBOLb9QkAM4U
e882xMUJrmopcR8USJe1p0/lUWLRMI1j1TPTboGRm848u53sYKQULy3Sd/HQItIR
fCkW5ldRKWsc+RPpgNp5BGc4SWxx8fyfXCEYqSH+FOq813L0ako7weUhLKXJ/2uU
YXTNbLkBv5WRwnIIt3UucCMp/NQbhzNTOdLW0L0yL0H996VgWYKE0g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:35 2025 by rpki-client