Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/uPP0e9joXYtsMDOe699OriPz1EE.roa
File: uPP0e9joXYtsMDOe699OriPz1EE.roa (raw, json)
Hash identifier: Q5WJsfhrD/ZSecm5jeaK3DEI3Mqc4kE+J36c4ruxbQY=
Subject key identifier: B8:F3:F4:7B:D8:E8:5D:8B:6C:30:33:9E:EB:DF:4E:AE:23:F3:D4:41
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 077D
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/uPP0e9joXYtsMDOe699OriPz1EE.roa
Signing time: Tue 29 Sep 2020 10:07:22 +0000
ROA not before: Tue 29 Sep 2020 10:07:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 103.229.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Sep 29 10:07:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B8F3F47BD8E85D8B6C30339EEBDF4EAE23F3D441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:5c:7b:1f:59:b3:80:4c:18:d6:91:06:3f:
3c:00:d9:d3:b1:cc:68:7f:ce:a5:d4:55:9a:c5:75:
d5:3d:ec:12:44:8e:fd:60:83:f3:b2:fe:73:5c:74:
70:b3:57:b6:5b:69:a6:db:b9:1d:b0:3a:09:1d:0c:
16:50:f1:6f:02:21:b7:45:fb:86:01:81:16:2a:c8:
66:3c:9f:a4:3e:06:8d:ed:72:63:9b:70:43:4f:69:
b6:a3:cb:8e:15:0c:ad:79:0d:89:62:18:c8:01:4d:
26:27:c7:71:10:dd:d4:8b:9d:a9:06:0d:30:dd:c3:
29:ef:08:7f:3e:f0:6e:dd:41:d2:86:cc:84:82:72:
54:ab:8f:ad:d0:5c:f9:94:bb:3b:00:26:68:18:64:
74:26:96:e4:11:ac:a2:4b:8d:ca:f8:74:f4:ec:e7:
73:e5:6f:83:50:14:9e:88:bf:c4:5f:da:89:0c:93:
f5:8b:b7:32:60:e6:14:48:a4:8f:c1:ca:e3:b2:ec:
d4:a4:0d:df:3c:67:e3:3c:7a:78:53:ad:55:04:90:
0f:87:b1:ad:0b:6b:62:db:f7:cc:5c:70:2a:e5:0a:
55:72:3c:30:9a:cf:4b:b6:fc:ba:0f:04:c0:00:23:
19:cb:29:70:93:19:bd:49:69:59:81:bd:b1:c6:49:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:F4:7B:D8:E8:5D:8B:6C:30:33:9E:EB:DF:4E:AE:23:F3:D4:41
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/uPP0e9joXYtsMDOe699OriPz1EE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:3e:06:85:4a:84:b8:bc:16:d8:fc:92:b3:7e:d1:26:30:b6:
4f:e5:dc:31:89:10:07:cd:f5:53:fd:b4:ad:e3:df:9e:fc:f1:
8b:ca:30:39:7d:1b:10:0c:32:a1:ca:65:3a:1c:99:c2:62:8e:
5c:25:fd:37:e7:f4:fb:35:06:4d:97:f0:4e:5d:8a:f7:03:aa:
e7:32:4a:54:e5:f1:d2:61:df:88:95:07:a2:29:99:f7:33:08:
f7:5d:db:3a:3f:4a:0e:37:31:ba:c4:9a:73:9c:d7:a6:d5:40:
72:3a:74:d6:67:e4:22:c3:65:57:bf:b9:db:9d:1e:89:e9:80:
c0:87:5b:6a:8e:bb:ba:b4:2b:6b:ab:5d:09:a6:8d:e3:55:4b:
dd:bb:25:8e:05:bc:d6:dd:52:ba:b9:f1:e4:62:20:c8:c0:91:
97:ee:55:d5:5f:d9:23:57:ad:4b:b6:12:91:ad:64:9a:a7:b9:
c9:25:51:f7:64:3c:66:77:d1:7c:6c:28:f5:a2:3b:18:9d:21:
5a:11:db:fe:32:13:72:f2:aa:86:bc:1e:f1:8a:33:57:b2:92:
54:08:31:f3:a5:6b:20:37:65:36:6d:55:70:ba:82:a7:a7:6e:
af:e5:be:04:56:01:b1:75:a9:f3:51:46:ed:0c:a4:af:92:49:
f0:2d:b0:f0
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICB30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VD
N0YxNjc3QkI0OTIzODAyODIxNTNCQjc3RUMyRUJFMzE4NTM3ODAeFw0yMDA5Mjkx
MDA3MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI4RjNGNDdCRDhFODVE
OEI2QzMwMzM5RUVCREY0RUFFMjNGM0Q0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGzFx7H1mzgEwY1pEGPzwA2dOxzGh/zqXUVZrFddU97BJEjv1g
g/Oy/nNcdHCzV7ZbaabbuR2wOgkdDBZQ8W8CIbdF+4YBgRYqyGY8n6Q+Bo3tcmOb
cENPabajy44VDK15DYliGMgBTSYnx3EQ3dSLnakGDTDdwynvCH8+8G7dQdKGzISC
clSrj63QXPmUuzsAJmgYZHQmluQRrKJLjcr4dPTs53Plb4NQFJ6Iv8Rf2okMk/WL
tzJg5hRIpI/ByuOy7NSkDd88Z+M8enhTrVUEkA+Hsa0La2Lb98xccCrlClVyPDCa
z0u2/LoPBMAAIxnLKXCTGb1JaVmBvbHGSRD3AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUuPP0e9joXYtsMDOe699OriPz1EEwHwYDVR0jBBgwFoAUfsfxZ3u0kjgCghU7
t37C6+MYU3gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL2Zz
ZnhaM3Uwa2pnQ2doVTd0MzdDNi1NWVUzZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZnNmeFozdTBramdDZ2hVN3QzN0M2LU1ZVTNnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL3VQUDBlOWpvWFl0c01ET2U2OTlPcmlQ
ejFFRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn5WQwDQYJ
KoZIhvcNAQELBQADggEBAJo+BoVKhLi8Ftj8krN+0SYwtk/l3DGJEAfN9VP9tK3j
35788YvKMDl9GxAMMqHKZTocmcJijlwl/Tfn9Ps1Bk2X8E5divcDqucySlTl8dJh
34iVB6IpmfczCPdd2zo/Sg43MbrEmnOc16bVQHI6dNZn5CLDZVe/ududHonpgMCH
W2qOu7q0K2urXQmmjeNVS927JY4FvNbdUrq58eRiIMjAkZfuVdVf2SNXrUu2EpGt
ZJqnucklUfdkPGZ30XxsKPWiOxidIVoR2/4yE3Lyqoa8HvGKM1eyklQIMfOlayA3
ZTZtVXC6gqenbq/lvgRWAbF1qfNRRu0MpK+SSfAtsPA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:02 2025 by rpki-client