Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/3sIjww1wQDxOY7eaW3ZnNxselg0.roa
File: 3sIjww1wQDxOY7eaW3ZnNxselg0.roa (raw, json)
Hash identifier: 8/oXQ+QyV0CrCQMz0T6WHCTMs+BCq7QUo6eHF/rkT3c=
Subject key identifier: DE:C2:23:C3:0D:70:40:3C:4E:63:B7:9A:5B:76:67:37:1B:1E:96:0D
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 10AD
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/3sIjww1wQDxOY7eaW3ZnNxselg0.roa
Signing time: Thu 15 Sep 2022 02:49:17 +0000
ROA not before: Thu 15 Sep 2022 02:49:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131636
IP address blocks: 103.130.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 15 02:49:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DEC223C30D70403C4E63B79A5B7667371B1E960D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:8a:1f:84:92:eb:f8:2a:a4:ff:c0:bc:2f:
f2:9e:75:83:60:16:f6:b1:c1:2d:c1:a1:92:41:1e:
37:14:da:37:df:1b:84:77:a4:71:74:4a:2e:04:42:
4b:f4:af:11:1b:d9:2a:13:ed:45:b7:e6:1a:65:bf:
52:29:24:28:8c:d1:e6:49:43:90:e6:28:42:3d:b7:
e3:b7:de:ef:3b:53:56:c1:14:86:b8:56:f0:14:ea:
8e:fe:f4:a4:e6:a9:95:8d:e6:c8:a3:9d:19:af:d1:
08:08:ce:9c:99:3f:fa:ea:6f:26:2e:4a:65:c3:58:
cc:70:b6:01:22:32:04:ef:18:6f:a8:6a:52:12:11:
e6:07:3f:9e:d2:6a:fe:d2:90:c4:5b:12:10:56:07:
15:c8:30:20:45:78:56:a9:86:d6:ce:c2:09:f8:b5:
25:7e:70:c7:97:81:d9:ab:ad:12:32:f5:0a:95:79:
2a:4f:55:1b:bd:5b:99:0e:43:4c:9e:db:b0:66:d5:
af:b2:28:49:bc:f2:89:35:99:ac:e8:58:77:db:d5:
5d:b9:eb:fa:ff:23:23:d7:66:4a:78:d3:4e:7b:2b:
c8:8f:77:38:62:8a:df:ed:f6:9f:bb:06:72:0a:b3:
d6:f0:2f:f7:36:b2:5c:38:b0:4f:45:8b:f6:97:08:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:23:C3:0D:70:40:3C:4E:63:B7:9A:5B:76:67:37:1B:1E:96:0D
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/3sIjww1wQDxOY7eaW3ZnNxselg0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:09:43:cb:9e:30:f6:31:ca:6b:d9:8b:3e:70:ed:3f:94:53:
a5:17:a5:f3:8c:cb:7e:2b:4b:6a:16:b2:b7:88:5b:33:7c:fa:
00:95:bb:cb:46:92:84:9a:3b:c0:62:7d:e7:81:00:98:86:40:
42:c6:8e:50:ae:63:78:ca:f8:1b:d6:ae:f5:ab:1c:73:48:c1:
7f:54:bd:15:fa:30:5c:9e:f1:01:a9:c9:d9:46:01:81:41:a0:
2e:80:c6:c3:6f:13:2c:38:92:22:65:ce:f9:c4:87:62:ab:06:
e6:e1:44:4a:4a:e3:56:3c:6a:49:3b:b0:26:67:9c:9f:5b:17:
c8:21:7d:58:74:76:87:07:01:8e:24:d9:b0:54:12:ae:17:24:
cb:69:1c:2c:ef:24:b3:b2:8f:f6:7c:f7:91:c2:f5:94:93:63:
05:c4:86:c4:26:fe:69:44:aa:04:fe:20:0c:a1:22:b5:70:35:
d3:af:01:18:e6:aa:17:8c:4e:85:14:a6:ca:dd:7b:10:6e:2f:
e9:e6:a3:20:4c:12:0c:bf:4a:18:3e:e3:82:4f:1c:a2:4f:96:
f8:dd:3c:15:55:9d:44:ab:33:b8:47:4d:8c:fa:73:97:92:db:
f8:81:58:ef:6e:7f:32:48:74:a0:3a:23:50:75:6a:8a:68:06:
bd:0b:02:35
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE
MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yMjA5MTUw
MjQ5MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERFQzIyM0MzMEQ3MDQw
M0M0RTYzQjc5QTVCNzY2NzM3MUIxRTk2MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZsoofhJLr+Cqk/8C8L/KedYNgFvaxwS3BoZJBHjcU2jffG4R3
pHF0Si4EQkv0rxEb2SoT7UW35hplv1IpJCiM0eZJQ5DmKEI9t+O33u87U1bBFIa4
VvAU6o7+9KTmqZWN5sijnRmv0QgIzpyZP/rqbyYuSmXDWMxwtgEiMgTvGG+oalIS
EeYHP57Sav7SkMRbEhBWBxXIMCBFeFaphtbOwgn4tSV+cMeXgdmrrRIy9QqVeSpP
VRu9W5kOQ0ye27Bm1a+yKEm88ok1mazoWHfb1V256/r/IyPXZkp40057K8iPdzhi
it/t9p+7BnIKs9bwL/c2slw4sE9Fi/aXCIcBAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU3sIjww1wQDxOY7eaW3ZnNxselg0wHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1
CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v
d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi8zc0lqd3cxd1FEeE9ZN2VhVzNa
bk54c2VsZzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J9
MA0GCSqGSIb3DQEBCwUAA4IBAQB/CUPLnjD2Mcpr2Ys+cO0/lFOlF6XzjMt+K0tq
FrK3iFszfPoAlbvLRpKEmjvAYn3ngQCYhkBCxo5QrmN4yvgb1q71qxxzSMF/VL0V
+jBcnvEBqcnZRgGBQaAugMbDbxMsOJIiZc75xIdiqwbm4URKSuNWPGpJO7AmZ5yf
WxfIIX1YdHaHBwGOJNmwVBKuFyTLaRws7ySzso/2fPeRwvWUk2MFxIbEJv5pRKoE
/iAMoSK1cDXTrwEY5qoXjE6FFKbK3XsQbi/p5qMgTBIMv0oYPuOCTxyiT5b43TwV
VZ1EqzO4R02M+nOXktv4gVjvbn8ySHSgOiNQdWqKaAa9CwI1
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org