Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TISNET/j3-fC-3mdl04VX6YSZzTrW6InHc.roa
File: j3-fC-3mdl04VX6YSZzTrW6InHc.roa (raw, json)
Hash identifier: UqeFrAb0LD8YhQZYWb+AnxxZTphCLm+nq0VFYA34ceE=
Subject key identifier: 8F:7F:9F:0B:ED:E6:76:5D:38:55:7E:98:49:9C:D3:AD:6E:88:9C:77
Certificate issuer: /CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Certificate serial: 1D
Authority key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/j3-fC-3mdl04VX6YSZzTrW6InHc.roa
Signing time: Fri 01 Sep 2023 10:01:24 +0000
ROA not before: Fri 01 Sep 2023 10:01:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7535
IP address blocks: 139.223.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Validity
Not Before: Sep 1 10:01:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8F7F9F0BEDE6765D38557E98499CD3AD6E889C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:7e:a9:fa:c1:25:4b:2f:d6:62:bc:eb:2b:
9c:ad:bc:06:32:a3:d1:c9:de:9c:61:68:4c:b7:fa:
76:d6:f5:85:ff:ea:04:a6:d0:9c:e6:9e:96:df:07:
77:b0:2e:3a:b5:1c:e4:1e:f8:3f:f1:48:1d:34:1b:
f6:1a:84:2a:38:6d:07:8d:23:04:a7:ef:2d:18:cb:
ed:a9:4d:96:3f:f2:84:7b:0e:76:ff:67:12:5c:92:
c6:2f:0c:dc:ff:9b:e4:45:a8:6e:48:cf:dc:b0:9a:
b5:19:e6:c8:f5:aa:0b:af:8a:96:dc:a9:1d:c5:92:
e0:7a:91:a2:b9:60:3b:3a:d2:05:58:26:1b:91:cd:
97:25:d5:28:07:79:9c:51:64:35:cb:1b:73:a1:26:
e6:ca:68:e4:40:bd:c9:8b:00:d2:36:f2:dc:0f:7a:
c5:61:eb:76:90:b4:f7:8f:2f:99:7f:2f:89:3f:93:
57:bc:a2:e6:f9:e1:46:2a:fd:db:5b:d7:51:0c:d7:
91:3f:17:2c:31:f9:b3:27:be:f3:e0:2b:87:dc:0d:
f1:c7:ef:8e:b7:03:17:d0:9b:55:bb:aa:fb:01:76:
17:92:bf:1f:21:9d:19:6b:47:41:2b:a3:4f:56:f3:
9e:61:68:ba:24:74:92:34:cd:75:fa:77:a8:f7:91:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:9F:0B:ED:E6:76:5D:38:55:7E:98:49:9C:D3:AD:6E:88:9C:77
X509v3 Authority Key Identifier:
keyid:06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/j3-fC-3mdl04VX6YSZzTrW6InHc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:76:b9:27:ff:97:2f:09:66:e7:0b:f9:57:d9:ed:e8:14:0d:
2b:60:71:fb:4f:d1:09:91:d9:27:e0:60:95:eb:12:78:06:92:
92:82:12:47:ae:75:85:a2:46:0f:b8:85:c8:ba:7d:d7:2b:37:
66:ad:d8:c6:10:3e:84:d3:d0:15:fd:a4:de:69:84:b5:9b:06:
bd:ed:4b:79:60:f3:67:6b:83:bd:86:47:18:3b:9c:6e:b4:db:
24:d1:4f:6d:c6:80:36:13:e0:e4:36:0c:0c:98:83:25:f0:06:
e8:d8:37:ed:21:e0:95:85:32:8a:b7:bc:83:cc:dd:fb:be:c8:
e5:35:1e:4a:4b:a2:47:4c:ef:69:04:4d:9f:7b:18:0e:45:15:
ea:15:b5:44:a3:3c:cf:d6:3b:5e:3b:09:dd:25:69:8c:45:dc:
65:f2:10:52:a0:5f:4c:79:4d:d3:d5:60:91:55:97:bd:74:5e:
5c:b9:42:05:2a:83:a7:88:e3:ce:55:3b:6b:ab:e5:9a:d9:94:
db:74:ed:d0:d3:a4:97:1c:b5:f3:50:b7:a2:b5:f7:8a:5a:59:
72:c6:46:3b:92:bc:58:4f:49:26:b5:26:63:45:0e:c0:61:79:
e0:e2:f4:43:f1:ff:3a:e6:6b:ae:73:0b:ef:d9:4c:79:61:de:
ff:2d:37:54
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkFF
MTQ4MENFRkM1Q0UwODAyOTI5N0Y0RDQ5Q0JDQUJENkNFMkYyMB4XDTIzMDkwMTEw
MDEyNFoXDTI0MDgzMTAzMTA1M1owMzExMC8GA1UEAxMoOEY3RjlGMEJFREU2NzY1
RDM4NTU3RTk4NDk5Q0QzQUQ2RTg4OUM3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMJOfqn6wSVLL9ZivOsrnK28BjKj0cnenGFoTLf6dtb1hf/qBKbQ
nOaelt8Hd7AuOrUc5B74P/FIHTQb9hqEKjhtB40jBKfvLRjL7alNlj/yhHsOdv9n
ElySxi8M3P+b5EWobkjP3LCatRnmyPWqC6+KltypHcWS4HqRorlgOzrSBVgmG5HN
lyXVKAd5nFFkNcsbc6Em5spo5EC9yYsA0jby3A96xWHrdpC0948vmX8viT+TV7yi
5vnhRir921vXUQzXkT8XLDH5sye+8+Arh9wN8cfvjrcDF9CbVbuq+wF2F5K/HyGd
GWtHQSujT1bznmFouiR0kjTNdfp3qPeRAUUCAwEAAaOCAe0wggHpMB0GA1UdDgQW
BBSPf58L7eZ2XThVfphJnNOtboicdzAfBgNVHSMEGDAWgBQGrhSAzvxc4IApKX9N
ScvKvWzi8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9USVNORVQv
QnE0VWdNNzhYT0NBS1NsX1RVbkx5cjFzNHZJLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9CcTRVZ003OFhPQ0FLU2xfVFVuTHlyMXM0dkkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9USVNORVQvajMtZkMtM21kbDA0Vlg2WVNa
elRyVzZJbkhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3
L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIvf
MA0GCSqGSIb3DQEBCwUAA4IBAQCIdrkn/5cvCWbnC/lX2e3oFA0rYHH7T9EJkdkn
4GCV6xJ4BpKSghJHrnWFokYPuIXIun3XKzdmrdjGED6E09AV/aTeaYS1mwa97Ut5
YPNna4O9hkcYO5xutNsk0U9txoA2E+DkNgwMmIMl8Abo2DftIeCVhTKKt7yDzN37
vsjlNR5KS6JHTO9pBE2fexgORRXqFbVEozzP1jteOwndJWmMRdxl8hBSoF9MeU3T
1WCRVZe9dF5cuUIFKoOniOPOVTtrq+Wa2ZTbdO3Q06SXHLXzULeitfeKWllyxkY7
krxYT0kmtSZjRQ7AYXng4vRD8f865muucwvv2Ux5Yd7/LTdU
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:00 2025 by rpki-client