Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/jsHMvVlQC0fjsnSGHk4v8bwr_10.roa
File: jsHMvVlQC0fjsnSGHk4v8bwr_10.roa (raw, json)
Hash identifier: A7M9l1aBwDkNEGzC6uPcTzzo4nkOmm2Iun3d8A7NE2Y=
Subject key identifier: 8E:C1:CC:BD:59:50:0B:47:E3:B2:74:86:1E:4E:2F:F1:BC:2B:FF:5D
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A92
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/jsHMvVlQC0fjsnSGHk4v8bwr_10.roa
Signing time: Tue 20 Sep 2022 05:56:30 +0000
ROA not before: Tue 20 Sep 2022 05:56:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 111.235.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 20 05:56:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8EC1CCBD59500B47E3B274861E4E2FF1BC2BFF5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:dc:74:57:17:4c:a0:79:c7:02:21:4d:9c:
5f:a3:6e:df:7e:74:33:26:5d:3d:e9:e5:2f:f3:2b:
c3:e2:ea:bd:12:d0:2c:10:d9:74:08:ee:28:a0:71:
df:0f:6a:9f:41:8e:2f:6a:0d:b0:6f:aa:50:5e:0b:
5a:1e:5b:96:5c:c5:82:29:bb:ab:66:0e:43:0a:f0:
76:c1:24:16:b0:e8:f9:4a:7e:50:3c:57:01:14:da:
84:e7:c3:6a:df:43:51:32:b2:fb:bc:f7:9e:a9:b6:
04:f9:55:d2:27:1e:64:6e:79:5f:e3:9b:1b:ea:74:
6b:5f:69:2c:dc:3f:25:c0:5f:3c:1f:14:e9:c4:6c:
d1:93:9b:d4:ca:3b:6a:f5:1f:3a:5a:5b:8a:8d:f5:
ab:34:5e:2e:08:62:5c:49:54:15:4c:a1:45:88:15:
ba:53:ee:2a:1e:db:58:2c:c6:20:9b:92:ab:c7:78:
91:37:60:20:56:be:87:63:ca:51:89:81:4f:1e:82:
c7:fd:34:1c:11:38:ec:7c:33:5f:76:40:de:3d:92:
7d:a9:92:95:af:05:25:6c:6e:04:e5:87:d5:5a:1b:
d3:09:fa:8e:59:39:31:e3:85:d7:38:49:b9:ec:2c:
5d:6d:f1:fd:f4:e3:dd:3d:4c:06:6e:a5:e1:df:14:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C1:CC:BD:59:50:0B:47:E3:B2:74:86:1E:4E:2F:F1:BC:2B:FF:5D
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/jsHMvVlQC0fjsnSGHk4v8bwr_10.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.235.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:79:a3:f1:c0:0a:4d:29:de:5f:b6:b0:40:a5:d1:35:9c:19:
25:b7:17:b2:4a:1c:fa:30:ee:79:40:7c:e2:9b:7c:68:f0:99:
36:cc:61:7d:11:d3:ce:d2:aa:09:45:f0:2c:52:88:c6:d9:be:
d4:06:45:24:a9:db:77:ee:a3:3f:26:ec:36:cc:32:e5:53:c3:
d2:1a:f1:8c:c2:d6:d5:f6:26:12:dc:c0:b2:8c:9e:35:7f:f3:
e4:ca:fb:80:47:53:12:d2:c3:a0:d0:90:6e:a9:93:d9:2b:08:
e3:30:e5:87:ed:87:bc:e0:11:0b:d7:b2:6a:5d:fe:7d:d4:c8:
b2:2a:15:2c:f4:0b:18:51:ac:6f:69:9e:aa:6d:fd:2c:53:fa:
41:c7:dc:42:b3:c4:c3:8b:b7:5b:df:b5:6a:a9:9e:09:7f:76:
5a:f6:60:4d:49:08:19:2d:8e:30:84:13:99:df:25:ae:f6:09:
69:fa:de:c7:10:ea:b1:d0:ce:7d:2b:5e:c0:b7:e4:9a:56:02:
c5:63:3a:1c:0e:fe:eb:1d:ef:85:e0:7d:fd:e0:31:e8:8c:ae:
cf:2f:29:ed:38:be:b5:ad:cb:a7:c4:c9:6a:e2:1d:ec:f0:62:
b7:10:4e:ee:21:6c:94:b9:df:4c:84:07:30:c5:50:27:92:c2:
68:8a:8c:07
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yMjA5MjAw
NTU2MzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhFQzFDQ0JENTk1MDBC
NDdFM0IyNzQ4NjFFNEUyRkYxQkMyQkZGNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGx9x0VxdMoHnHAiFNnF+jbt9+dDMmXT3p5S/zK8Pi6r0S0CwQ
2XQI7iigcd8Pap9Bji9qDbBvqlBeC1oeW5ZcxYIpu6tmDkMK8HbBJBaw6PlKflA8
VwEU2oTnw2rfQ1Eysvu8956ptgT5VdInHmRueV/jmxvqdGtfaSzcPyXAXzwfFOnE
bNGTm9TKO2r1HzpaW4qN9as0Xi4IYlxJVBVMoUWIFbpT7ioe21gsxiCbkqvHeJE3
YCBWvodjylGJgU8egsf9NBwROOx8M192QN49kn2pkpWvBSVsbgTlh9VaG9MJ+o5Z
OTHjhdc4SbnsLF1t8f304909TAZupeHfFL8ZAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUjsHMvVlQC0fjsnSGHk4v8bwr/10wHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L2pzSE12VmxRQzBm
anNuU0dIazR2OGJ3cl8xMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZv68AwDQYJKoZIhvcNAQELBQADggEBALp5o/HACk0p3l+2sECl0TWcGSW3
F7JKHPow7nlAfOKbfGjwmTbMYX0R087SqglF8CxSiMbZvtQGRSSp23fuoz8m7DbM
MuVTw9Ia8YzC1tX2JhLcwLKMnjV/8+TK+4BHUxLSw6DQkG6pk9krCOMw5Yfth7zg
EQvXsmpd/n3UyLIqFSz0CxhRrG9pnqpt/SxT+kHH3EKzxMOLt1vftWqpngl/dlr2
YE1JCBktjjCEE5nfJa72CWn63scQ6rHQzn0rXsC35JpWAsVjOhwO/usd74Xgff3g
MeiMrs8vKe04vrWty6fEyWriHezwYrcQTu4hbJS530yEBzDFUCeSwmiKjAc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:38 2025 by rpki-client