Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/wjNEaK1rk_V7pMlm71SfFD9PQdk.roa
File: wjNEaK1rk_V7pMlm71SfFD9PQdk.roa (raw, json)
Hash identifier: uYqFviCjA/kLtd1WsaV/Qk7+n1IeZIyV0JDgP5+OfjM=
Subject key identifier: C2:33:44:68:AD:6B:93:F5:7B:A4:C9:66:EF:54:9F:14:3F:4F:41:D9
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0B56
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/wjNEaK1rk_V7pMlm71SfFD9PQdk.roa
Signing time: Fri 01 Sep 2023 10:24:06 +0000
ROA not before: Fri 01 Sep 2023 10:24:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 202.12.76.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2902 (0xb56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Sep 1 10:24:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C2334468AD6B93F57BA4C966EF549F143F4F41D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:67:08:48:11:37:a0:97:d7:69:b0:0e:f2:
52:3c:5f:ad:03:16:aa:0a:80:0f:fc:e3:93:12:d8:
ee:f4:0c:ae:89:fe:5e:14:a5:71:ab:32:9a:39:33:
f8:5c:5f:86:1f:38:99:62:b7:7e:24:59:99:2c:39:
74:7b:6a:7d:3f:61:7b:1a:ba:b8:21:8f:68:d1:50:
d4:ef:82:dd:e9:64:ec:20:e7:49:ae:4e:97:24:13:
21:c8:3b:39:77:e2:a1:b6:93:33:65:67:2b:3f:58:
89:5e:7c:9e:7c:d4:7b:6e:27:37:d6:80:17:ad:6b:
b7:fe:b8:18:03:d2:ed:ec:94:ce:f8:66:9a:83:bb:
4e:02:92:75:88:19:f1:2d:49:ba:6e:65:d6:c5:1d:
fb:ef:77:e3:ae:98:89:e5:a2:c1:fe:fe:6f:8f:20:
a6:56:33:a2:c8:3c:5a:81:87:73:17:79:87:b0:eb:
c4:69:f2:3b:a8:04:fe:6a:13:ab:15:46:bd:a0:2b:
c3:5c:2c:fc:ec:96:a0:e4:df:be:1a:22:06:83:e1:
a3:ed:a0:ac:30:cf:64:a0:ee:2d:79:3f:4d:f0:bd:
10:33:30:74:b0:b6:cd:c6:47:b3:a9:20:c4:88:19:
fb:42:15:aa:f2:c3:0a:eb:98:8d:3f:e0:a4:43:52:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:44:68:AD:6B:93:F5:7B:A4:C9:66:EF:54:9F:14:3F:4F:41:D9
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/wjNEaK1rk_V7pMlm71SfFD9PQdk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.76.0/22
Signature Algorithm: sha256WithRSAEncryption
88:95:fe:d0:f1:5a:f4:0d:aa:75:7c:ce:77:da:b5:cd:e7:79:
00:41:e9:7f:f4:0f:17:4d:d1:bc:4f:02:04:89:52:5b:70:7f:
f7:e2:e7:f1:3b:17:d8:59:bc:45:21:11:6c:fe:00:df:58:b8:
5a:cd:7c:13:04:f1:53:af:de:b6:c8:26:16:02:36:e3:64:b8:
7e:11:95:43:49:b2:4f:d7:84:09:d2:a0:ee:48:25:2d:7d:05:
cd:23:e3:e2:f7:8b:d6:81:0d:0f:5b:02:57:f6:8b:40:30:ab:
18:ca:80:3c:24:0b:6d:a1:10:a6:c7:ef:eb:4c:1b:36:8f:10:
98:88:94:7a:b9:3a:9f:39:6e:31:3d:0e:1b:b8:51:41:65:98:
22:b0:4d:f6:cf:db:80:b7:55:50:c4:0c:18:82:d8:a8:60:9e:
0b:24:3d:2c:97:29:9f:60:ba:02:6b:8b:d4:5d:13:a2:11:26:
31:6c:a4:4a:de:f8:f2:10:ea:0a:43:3b:5f:92:65:1f:c9:b9:
2d:07:b2:f7:d4:ff:af:87:54:76:4a:78:fd:4c:19:5d:c0:8b:
7c:b6:88:10:19:8f:3a:c5:b4:9a:0d:ca:43:f9:b5:77:e0:ee:
dd:17:f8:39:90:b1:2d:f7:6a:20:71:32:52:35:97:91:d4:1e:
51:3c:97:f7
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB
NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yMzA5MDEx
MDI0MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMyMzM0NDY4QUQ2Qjkz
RjU3QkE0Qzk2NkVGNTQ5RjE0M0Y0RjQxRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgymcISBE3oJfXabAO8lI8X60DFqoKgA/845MS2O70DK6J/l4U
pXGrMpo5M/hcX4YfOJlit34kWZksOXR7an0/YXsaurghj2jRUNTvgt3pZOwg50mu
TpckEyHIOzl34qG2kzNlZys/WIlefJ581HtuJzfWgBeta7f+uBgD0u3slM74ZpqD
u04CknWIGfEtSbpuZdbFHfvvd+OumInlosH+/m+PIKZWM6LIPFqBh3MXeYew68Rp
8juoBP5qE6sVRr2gK8NcLPzslqDk374aIgaD4aPtoKwwz2Sg7i15P03wvRAzMHSw
ts3GR7OpIMSIGftCFarywwrrmI0/4KRDUhE/AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUwjNEaK1rk/V7pMlm71SfFD9PQdkwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe
Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI
RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi93ak5FYUsxcmtfVjdw
TWxtNzFTZkZEOVBRZGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCygxMMA0GCSqGSIb3DQEBCwUAA4IBAQCIlf7Q8Vr0Dap1fM532rXN53kAQel/
9A8XTdG8TwIEiVJbcH/34ufxOxfYWbxFIRFs/gDfWLhazXwTBPFTr962yCYWAjbj
ZLh+EZVDSbJP14QJ0qDuSCUtfQXNI+Pi94vWgQ0PWwJX9otAMKsYyoA8JAttoRCm
x+/rTBs2jxCYiJR6uTqfOW4xPQ4buFFBZZgisE32z9uAt1VQxAwYgtioYJ4LJD0s
lymfYLoCa4vUXROiESYxbKRK3vjyEOoKQztfkmUfybktB7L31P+vh1R2Snj9TBld
wIt8togQGY86xbSaDcpD+bV34O7dF/g5kLEt92ogcTJSNZeR1B5RPJf3
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:30 2025 by rpki-client