Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/HBK2Zum4SXkXFy4XdwKlbgs2YNY.roa
File: HBK2Zum4SXkXFy4XdwKlbgs2YNY.roa (raw, json)
Hash identifier: Hbb1llspGh9nwud9UMpdzSghme1PD19f3FtGG686u/E=
Subject key identifier: 1C:12:B6:66:E9:B8:49:79:17:17:2E:17:77:02:A5:6E:0B:36:60:D6
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0790
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/HBK2Zum4SXkXFy4XdwKlbgs2YNY.roa
Signing time: Tue 29 Sep 2020 10:00:33 +0000
ROA not before: Tue 29 Sep 2020 10:00:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24168
IP address blocks: 103.30.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Sep 29 10:00:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1C12B666E9B8497917172E177702A56E0B3660D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:77:69:1b:f1:7a:c1:d3:30:da:7e:9d:94:
35:48:4c:b5:22:b6:6f:05:cf:e8:f9:d6:06:eb:c9:
6f:56:50:9b:12:f0:85:a7:58:01:2f:57:1a:22:8a:
c4:0a:e1:1a:26:d1:4f:96:ee:a7:91:6a:28:06:19:
f8:bd:6a:3a:f7:18:7e:fc:e9:0e:f3:51:22:e7:f0:
a3:ac:e8:be:ae:31:2c:94:31:be:b1:d6:07:02:05:
21:2c:c2:7b:30:19:74:a2:84:27:fa:21:ec:a8:97:
e0:71:c2:e7:99:dc:7a:20:bf:7c:a2:53:6e:ef:c5:
a2:17:4a:21:bc:08:8e:98:70:33:cd:66:9b:f1:4d:
d8:01:14:06:b0:1e:90:14:eb:ee:3b:de:96:83:80:
65:d1:57:5a:e1:1c:cc:c7:65:eb:f5:59:be:f0:12:
c3:22:2f:e5:5a:02:98:3b:39:95:93:4e:e8:f6:51:
32:a6:bb:b7:0a:35:2b:49:45:bf:9a:2a:b1:69:60:
4d:a5:82:61:98:d4:a9:66:aa:5e:d1:5b:78:ad:60:
c6:83:db:26:a3:6c:a6:38:16:02:13:41:84:eb:5c:
bb:8a:93:8c:10:dd:2a:4b:ba:6c:64:5c:bd:82:7b:
0a:f8:c1:35:fc:cb:6e:78:5a:91:c1:fa:9f:51:8a:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:12:B6:66:E9:B8:49:79:17:17:2E:17:77:02:A5:6E:0B:36:60:D6
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/HBK2Zum4SXkXFy4XdwKlbgs2YNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.44.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b0:33:b2:32:2c:04:95:aa:1f:48:7c:cb:86:c4:38:b1:2d:
71:aa:ed:c3:15:15:44:65:be:98:76:a3:02:f1:c6:ea:c8:57:
fa:61:64:77:ac:74:06:ca:71:54:0f:a4:ac:9a:7a:51:88:93:
64:fc:7e:c8:41:09:48:c4:b2:dd:5b:99:0c:1c:e5:22:e4:d1:
3b:3d:50:2c:d5:c8:08:99:ce:73:4d:ca:46:7a:d7:32:d0:b8:
f4:e8:8b:5e:61:5a:7e:73:43:93:60:4e:00:30:38:b4:75:41:
f6:a3:c6:c0:07:fb:59:31:fc:74:95:98:62:42:71:fb:7c:d2:
fc:88:f6:ba:a7:1a:bb:27:f6:c0:f9:86:3e:4b:9b:58:c9:47:
c3:e4:f4:81:c5:92:5d:8c:54:c6:a8:3c:ba:18:1b:9b:1a:75:
fc:6c:ff:a5:c6:5a:6a:1f:6a:78:db:c9:b8:71:14:74:7a:fc:
85:58:e5:89:a9:86:e5:4b:e0:62:ee:a2:dd:cd:a7:77:d4:15:
a3:1c:d5:99:56:40:79:b0:0a:14:a1:0d:af:2d:cb:b1:97:26:
3a:e1:47:7a:57:cf:b9:97:a5:57:e8:01:09:2e:02:db:44:b7:
3a:90:f0:91:8e:86:c1:02:4f:3e:e1:d3:33:36:3d:27:4c:08:
71:2d:15:76
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDA5Mjkx
MDAwMzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFDMTJCNjY2RTlCODQ5
NzkxNzE3MkUxNzc3MDJBNTZFMEIzNjYwRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE7HdpG/F6wdMw2n6dlDVITLUitm8Fz+j51gbryW9WUJsS8IWn
WAEvVxoiisQK4Rom0U+W7qeRaigGGfi9ajr3GH786Q7zUSLn8KOs6L6uMSyUMb6x
1gcCBSEswnswGXSihCf6Ieyol+BxwueZ3Hogv3yiU27vxaIXSiG8CI6YcDPNZpvx
TdgBFAawHpAU6+473paDgGXRV1rhHMzHZev1Wb7wEsMiL+VaApg7OZWTTuj2UTKm
u7cKNStJRb+aKrFpYE2lgmGY1Klmql7RW3itYMaD2yajbKY4FgITQYTrXLuKk4wQ
3SpLumxkXL2Cewr4wTX8y254WpHB+p9RimKbAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUHBK2Zum4SXkXFy4XdwKlbgs2YNYwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0hCSzJadW00U1hr
WEZ5NFhkd0tsYmdzMllOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnHiwwDQYJKoZIhvcNAQELBQADggEBACewM7IyLASVqh9IfMuGxDixLXGq
7cMVFURlvph2owLxxurIV/phZHesdAbKcVQPpKyaelGIk2T8fshBCUjEst1bmQwc
5SLk0Ts9UCzVyAiZznNNykZ61zLQuPToi15hWn5zQ5NgTgAwOLR1QfajxsAH+1kx
/HSVmGJCcft80vyI9rqnGrsn9sD5hj5Lm1jJR8Pk9IHFkl2MVMaoPLoYG5sadfxs
/6XGWmofanjbybhxFHR6/IVY5YmphuVL4GLuot3Np3fUFaMc1ZlWQHmwChShDa8t
y7GXJjrhR3pXz7mXpVfoAQkuAttEtzqQ8JGOhsECTz7h0zM2PSdMCHEtFXY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org