Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/F7wH2cgAbB8LfR3sQChycYG5hyw.roa
File: F7wH2cgAbB8LfR3sQChycYG5hyw.roa (raw, json)
Hash identifier: 3okc9knChLWZJnhN0pZCX0nZ3+ONLa5Zws22Ugj+UeM=
Subject key identifier: 17:BC:07:D9:C8:00:6C:1F:0B:7D:1D:EC:40:28:72:71:81:B9:87:2C
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0161
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/F7wH2cgAbB8LfR3sQChycYG5hyw.roa
Signing time: Sun 07 Feb 2021 13:13:09 +0000
ROA not before: Sun 07 Feb 2021 13:13:09 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 60614
IP address blocks: 103.156.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Feb 7 13:13:09 2021 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=17BC07D9C8006C1F0B7D1DEC4028727181B9872C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:16:68:c5:7a:25:74:39:4a:f8:a7:ff:e0:
b4:c5:72:4e:b4:b3:66:9f:d2:4e:f3:e5:3c:98:66:
4e:e0:5d:ae:af:f8:c7:05:68:94:37:de:c5:91:7b:
80:e7:6b:0b:ce:87:79:88:16:f0:56:77:f4:18:80:
2b:e5:5e:6b:3b:19:6f:ab:56:fc:a8:23:da:69:83:
73:1f:28:b8:ca:f0:dd:0f:96:cc:a5:18:07:80:d6:
72:cd:dc:dc:d8:ff:0f:0c:3c:6b:c7:92:1b:75:c5:
e3:c9:49:f2:9a:a7:c8:99:61:ec:5e:ce:38:7f:24:
50:b4:ad:70:2b:0c:70:2e:6d:ce:6b:f9:ef:4b:8f:
32:e9:89:c0:fc:0a:e6:62:57:e6:21:3a:68:68:89:
8b:30:72:45:7c:3f:70:9e:e3:b8:f0:be:f2:7e:a0:
21:f8:6d:6b:78:e0:9f:74:0b:2f:bf:99:d4:12:ff:
d7:71:16:d2:51:4f:3c:97:a0:1b:92:8b:b1:77:0c:
c6:e2:4d:0b:85:23:44:a4:b4:18:c4:f4:3d:90:1e:
30:ab:30:3a:a1:34:12:94:69:72:87:89:49:1f:cc:
1f:2f:0d:22:69:ff:66:be:84:e2:fc:20:26:b6:98:
66:cf:a8:30:da:35:d1:9c:f8:d8:9f:18:ed:7d:35:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:07:D9:C8:00:6C:1F:0B:7D:1D:EC:40:28:72:71:81:B9:87:2C
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/F7wH2cgAbB8LfR3sQChycYG5hyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
20:c0:3c:f1:a0:40:0a:c6:d6:cb:bf:6c:96:a5:05:6a:d7:1f:
9a:55:b9:dd:58:4f:5a:6b:de:a3:9b:c3:0a:ab:49:4a:bb:f3:
9e:f8:6a:4e:6e:f1:fe:4b:de:08:90:5d:6a:10:f0:76:3a:51:
f8:69:cb:ec:7c:68:d1:94:11:34:b4:0e:8d:06:63:bb:c1:b8:
f5:1b:74:16:26:15:3f:6d:ff:9f:99:83:a2:b6:3d:c7:22:81:
d6:c3:e4:64:4b:cd:ae:4b:4e:2e:78:69:8a:75:af:75:e7:f4:
e1:d0:af:26:a8:bb:d7:05:5e:89:8e:24:a2:3c:5b:82:36:ec:
66:82:e5:ba:39:49:0d:a9:f9:b1:83:8d:f6:c4:8c:dc:64:6b:
25:27:82:af:4b:38:5e:06:0f:c6:6f:7a:82:bd:90:1a:e7:90:
5f:1f:83:d4:c3:b1:7a:9a:58:42:5b:12:f4:b3:1f:34:e0:d7:
25:76:a6:7f:21:ac:cd:80:c9:31:37:bc:91:96:4b:6a:a1:20:
e1:92:63:53:39:2f:c8:0b:1f:10:65:b3:ca:da:da:17:45:33:
dc:0e:cd:b3:fe:61:8f:16:35:44:71:a0:11:0a:be:42:e1:b1:
a6:dd:70:7e:a3:db:08:39:b0:0c:c9:1e:ea:55:45:93:4e:a8:
5b:14:d2:af
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMTAyMDcx
MzEzMDlaFw0yMTEwMDUwNDA0MzZaMDMxMTAvBgNVBAMTKDE3QkMwN0Q5QzgwMDZD
MUYwQjdEMURFQzQwMjg3MjcxODFCOTg3MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvNhZoxXoldDlK+Kf/4LTFck60s2af0k7z5TyYZk7gXa6v+McF
aJQ33sWRe4DnawvOh3mIFvBWd/QYgCvlXms7GW+rVvyoI9ppg3MfKLjK8N0Plsyl
GAeA1nLN3NzY/w8MPGvHkht1xePJSfKap8iZYexezjh/JFC0rXArDHAubc5r+e9L
jzLpicD8CuZiV+YhOmhoiYswckV8P3Ce47jwvvJ+oCH4bWt44J90Cy+/mdQS/9dx
FtJRTzyXoBuSi7F3DMbiTQuFI0SktBjE9D2QHjCrMDqhNBKUaXKHiUkfzB8vDSJp
/2a+hOL8ICa2mGbPqDDaNdGc+NifGO19NZKVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUF7wH2cgAbB8LfR3sQChycYG5hywwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvRjd3SDJjZ0FiQjhMZlIz
c1FDaHljWUc1aHl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWecuDANBgkqhkiG9w0BAQsFAAOCAQEAIMA88aBACsbWy79slqUFatcfmlW53VhP
Wmveo5vDCqtJSrvznvhqTm7x/kveCJBdahDwdjpR+GnL7Hxo0ZQRNLQOjQZju8G4
9Rt0FiYVP23/n5mDorY9xyKB1sPkZEvNrktOLnhpinWvdef04dCvJqi71wVeiY4k
ojxbgjbsZoLlujlJDan5sYON9sSM3GRrJSeCr0s4XgYPxm96gr2QGueQXx+D1MOx
eppYQlsS9LMfNODXJXamfyGszYDJMTe8kZZLaqEg4ZJjUzkvyAsfEGWzytraF0Uz
3A7Ns/5hjxY1RHGgEQq+QuGxpt1wfqPbCDmwDMke6lVFk06oWxTSrw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:43 2023 by rpki-client on console-ams.rpki-client.org