Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/kKHhpCOoo23HMvI-o1w9DXcG0uk.roa
File: kKHhpCOoo23HMvI-o1w9DXcG0uk.roa (raw, json)
Hash identifier: ocuovEQRWEJtnBNZ9QO/jUIZI4YWuoGOzl5OgF2XiiI=
Subject key identifier: 90:A1:E1:A4:23:A8:A3:6D:C7:32:F2:3E:A3:5C:3D:0D:77:06:D2:E9
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 11E5
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/kKHhpCOoo23HMvI-o1w9DXcG0uk.roa
Signing time: Wed 03 Jan 2024 10:35:41 +0000
ROA not before: Wed 03 Jan 2024 10:35:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18180
IP address blocks: 119.75.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Jan 3 10:35:41 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=90A1E1A423A8A36DC732F23EA35C3D0D7706D2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:8a:97:1f:28:bf:01:00:ac:96:14:b6:ff:
a7:3e:5f:53:a0:67:0e:85:0d:4e:99:fe:62:80:74:
e6:0f:70:37:69:0a:8b:84:a4:ad:55:f8:fe:63:16:
dd:e7:fb:3f:72:0a:3f:4c:ba:f6:b0:49:ff:30:06:
b9:a0:c3:44:88:4c:3d:17:85:bd:65:ab:02:1a:89:
96:dd:49:ed:7a:a6:d1:04:8b:f8:8d:27:f0:5c:dc:
6f:d8:a1:35:1c:06:fc:a6:5a:53:a3:87:2c:1c:93:
bd:e8:82:c2:7e:0f:c8:72:70:a8:58:c1:5d:a8:83:
53:a4:98:38:89:a9:f5:8d:c3:90:01:6a:45:0a:8a:
8a:60:9b:b7:91:3c:f4:19:c0:eb:2e:50:b1:f5:e5:
7c:65:c8:df:35:45:17:64:7a:ca:48:17:d6:a2:15:
5b:c5:92:77:e1:75:1d:ab:2c:78:82:64:36:0f:9d:
f7:c9:a8:26:f5:26:1b:ff:a3:e4:3c:fd:06:66:fa:
81:99:9c:fa:a7:54:4a:1d:4f:cd:14:d6:76:ad:e8:
63:a0:f3:3c:bd:90:e8:c7:94:eb:8c:95:a7:72:d1:
e3:ae:7c:2c:14:13:41:39:f3:e9:74:60:d9:53:3a:
68:50:8c:dc:d9:a6:30:1b:f5:cc:3b:e2:b4:ee:69:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:E1:A4:23:A8:A3:6D:C7:32:F2:3E:A3:5C:3D:0D:77:06:D2:E9
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/kKHhpCOoo23HMvI-o1w9DXcG0uk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.75.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ab:60:0f:2f:e8:e2:ba:2a:cf:78:ad:c1:9d:fb:8c:07:de:
cf:ad:7e:bd:d9:74:eb:ed:cb:4f:94:2d:e8:d0:6b:70:09:92:
58:e8:1b:0b:9f:e8:a5:3f:de:8b:ee:c0:d5:fd:4e:ff:7e:ed:
72:2c:d4:92:bb:1c:30:49:e2:9e:85:b8:f0:3f:d1:c9:28:f0:
2f:a6:15:69:23:20:b1:30:85:a6:98:c6:dc:8f:2e:9f:d9:3e:
ae:0c:6c:49:43:85:7a:54:ea:1f:9a:fb:63:76:96:0e:de:ae:
5c:09:4d:3a:d6:5e:d3:f0:62:03:d6:75:5e:60:1d:9d:38:f6:
62:6b:93:c7:3f:77:bc:b5:95:44:b9:1c:ed:d8:31:d6:4f:ab:
bf:22:a7:83:ed:e4:10:71:45:26:ba:40:d5:d1:69:94:22:ec:
01:fb:4f:d7:1f:92:ca:13:a6:4b:13:12:77:d6:30:7f:16:e0:
f8:13:8c:e5:77:4a:45:fb:2a:7b:57:61:bd:09:35:bb:44:12:
12:af:f0:b9:34:55:d7:b3:ee:86:15:9a:79:af:6d:a5:12:3a:
09:c7:ee:9c:e7:9e:f8:5c:10:df:32:8a:a8:4f:78:f3:8c:44:
e0:de:43:40:a9:e5:b8:69:5e:a6:77:e5:66:23:57:d3:fe:eb:
45:53:e2:45
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNDAxMDMx
MDM1NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkwQTFFMUE0MjNBOEEz
NkRDNzMyRjIzRUEzNUMzRDBENzcwNkQyRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbMoqXHyi/AQCslhS2/6c+X1OgZw6FDU6Z/mKAdOYPcDdpCouE
pK1V+P5jFt3n+z9yCj9MuvawSf8wBrmgw0SITD0Xhb1lqwIaiZbdSe16ptEEi/iN
J/Bc3G/YoTUcBvymWlOjhywck73ogsJ+D8hycKhYwV2og1OkmDiJqfWNw5ABakUK
iopgm7eRPPQZwOsuULH15XxlyN81RRdkespIF9aiFVvFknfhdR2rLHiCZDYPnffJ
qCb1Jhv/o+Q8/QZm+oGZnPqnVEodT80U1nat6GOg8zy9kOjHlOuMlady0eOufCwU
E0E58+l0YNlTOmhQjNzZpjAb9cw74rTuaRfZAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUkKHhpCOoo23HMvI+o1w9DXcG0ukwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9rS0hocENPb28yM0hNdkktbzF3
OURYY0cwdWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd0v1
MA0GCSqGSIb3DQEBCwUAA4IBAQBbq2APL+jiuirPeK3BnfuMB97PrX692XTr7ctP
lC3o0GtwCZJY6BsLn+ilP96L7sDV/U7/fu1yLNSSuxwwSeKehbjwP9HJKPAvphVp
IyCxMIWmmMbcjy6f2T6uDGxJQ4V6VOofmvtjdpYO3q5cCU061l7T8GID1nVeYB2d
OPZia5PHP3e8tZVEuRzt2DHWT6u/IqeD7eQQcUUmukDV0WmUIuwB+0/XH5LKE6ZL
ExJ31jB/FuD4E4zld0pF+yp7V2G9CTW7RBISr/C5NFXXs+6GFZp5r22lEjoJx+6c
5574XBDfMoqoT3jzjETg3kNAqeW4aV6md+VmI1fT/utFU+JF
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:22 2025 by rpki-client