Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/8dkQ1yDirLRy3a93MBCbRMsMCe4.roa
File: 8dkQ1yDirLRy3a93MBCbRMsMCe4.roa (raw, json)
Hash identifier: xj838q5CZy2pmNBXr7E4sij02CZG6Dm99i/NB/E+mRA=
Subject key identifier: F1:D9:10:D7:20:E2:AC:B4:72:DD:AF:77:30:10:9B:44:CB:0C:09:EE
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0970
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/8dkQ1yDirLRy3a93MBCbRMsMCe4.roa
Signing time: Wed 29 Sep 2021 02:38:18 +0000
ROA not before: Wed 29 Sep 2021 02:38:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131590
IP address blocks: 103.227.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416 (0x970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Sep 29 02:38:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F1D910D720E2ACB472DDAF7730109B44CB0C09EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:14:f7:9c:28:64:f4:2a:ba:81:fa:66:14:
e2:74:ff:fe:43:7e:be:b9:7a:ba:3b:ea:a7:32:d9:
59:bd:ff:32:45:2b:e9:fd:28:d9:24:78:1b:24:dc:
f7:24:55:91:a8:66:e2:62:61:4d:14:31:8c:01:53:
26:0f:43:4e:18:77:6f:8b:0b:4b:64:bf:d2:4b:c6:
78:f6:ad:f8:86:9b:64:f0:0b:e7:de:11:d8:05:33:
a2:4d:c2:2b:50:7f:44:ae:b7:c6:20:8f:10:6d:80:
9b:53:64:64:79:e4:0e:17:90:cc:eb:bb:69:ac:a2:
c0:0d:a9:79:77:cb:25:02:f5:e4:c2:69:8b:4f:03:
f7:12:a6:27:db:d6:42:ea:e9:7e:9a:c6:ff:2c:bd:
72:9b:92:98:e1:90:51:85:b9:e6:9a:39:20:79:45:
02:35:96:b8:9b:47:16:58:12:47:d4:e3:66:db:c3:
e9:eb:7b:5e:6a:d7:ab:5e:ed:f3:30:15:fa:49:7e:
c7:9c:c8:b8:a5:da:07:00:21:b9:7a:00:f3:c1:b9:
da:a4:c3:13:28:5b:84:a6:c4:74:03:b1:40:67:44:
9c:61:2f:ab:99:da:bf:a7:f8:1e:51:73:b0:2a:7c:
ec:c5:fe:66:9c:74:0b:f5:cd:8b:2d:00:a0:36:25:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:10:D7:20:E2:AC:B4:72:DD:AF:77:30:10:9B:44:CB:0C:09:EE
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/8dkQ1yDirLRy3a93MBCbRMsMCe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.224.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:54:45:86:40:1b:09:82:3e:73:7c:40:5e:5a:8e:2e:65:a1:
d2:7a:26:51:4a:c3:b2:cb:6e:a0:f2:2f:b4:60:56:a6:3a:38:
74:1c:ce:99:12:a7:43:bc:76:c1:0d:2b:c0:ed:00:e2:a6:eb:
ed:bf:9f:42:44:1c:ee:58:0d:82:1a:bc:11:1d:52:69:66:44:
50:8d:80:76:1e:d4:13:92:ab:26:5d:7b:73:ff:ce:86:f2:90:
50:40:2c:6b:b2:8a:62:4f:c1:38:6f:81:06:2a:86:ac:df:9e:
41:31:cd:78:70:14:59:71:64:14:99:ea:95:d4:4d:46:ce:4e:
4c:e8:e9:85:93:20:92:53:4a:a2:fc:ea:2c:cd:79:53:1b:25:
97:2d:bf:ea:74:3b:7a:db:23:4d:0b:57:f9:46:6f:0a:ea:10:
c3:ca:4b:c1:3c:e4:65:ed:13:49:a4:14:a8:74:cd:38:d2:50:
89:c6:80:29:fa:4e:a4:7a:d8:fc:bf:cf:3e:35:dd:05:5b:f3:
dd:2d:13:f9:1f:12:58:cb:81:ff:1a:20:62:f2:71:8a:30:40:
9f:b5:e6:fc:b1:77:95:cb:aa:b6:18:f5:10:45:50:38:bf:6c:
ce:05:78:9f:78:ca:36:fa:63:d9:ea:f5:c5:16:0b:05:ed:0f:
7c:1e:fc:21
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4
MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yMTA5Mjkw
MjM4MThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYxRDkxMEQ3MjBFMkFD
QjQ3MkREQUY3NzMwMTA5QjQ0Q0IwQzA5RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZcRT3nChk9Cq6gfpmFOJ0//5Dfr65ero76qcy2Vm9/zJFK+n9
KNkkeBsk3PckVZGoZuJiYU0UMYwBUyYPQ04Yd2+LC0tkv9JLxnj2rfiGm2TwC+fe
EdgFM6JNwitQf0Sut8YgjxBtgJtTZGR55A4XkMzru2msosANqXl3yyUC9eTCaYtP
A/cSpifb1kLq6X6axv8svXKbkpjhkFGFueaaOSB5RQI1lribRxZYEkfU42bbw+nr
e15q16te7fMwFfpJfsecyLil2gcAIbl6APPBudqkwxMoW4SmxHQDsUBnRJxhL6uZ
2r+n+B5Rc7AqfOzF/macdAv1zYstAKA2JQGJAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU8dkQ1yDirLRy3a93MBCbRMsMCe4wHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0
NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0
S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVENCLzhka1ExeURpckxSeTNhOTNNQkNiUk1z
TUNlNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn4+AwDQYJ
KoZIhvcNAQELBQADggEBAOJURYZAGwmCPnN8QF5aji5lodJ6JlFKw7LLbqDyL7Rg
VqY6OHQczpkSp0O8dsENK8DtAOKm6+2/n0JEHO5YDYIavBEdUmlmRFCNgHYe1BOS
qyZde3P/zobykFBALGuyimJPwThvgQYqhqzfnkExzXhwFFlxZBSZ6pXUTUbOTkzo
6YWTIJJTSqL86izNeVMbJZctv+p0O3rbI00LV/lGbwrqEMPKS8E85GXtE0mkFKh0
zTjSUInGgCn6TqR62Py/zz413QVb890tE/kfEljLgf8aIGLycYowQJ+15vyxd5XL
qrYY9RBFUDi/bM4FeJ94yjb6Y9nq9cUWCwXtD3we/CE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:32 2025 by rpki-client