Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Wu3XX70i6P392kWyi6k7_zvqQD0.roa
File: Wu3XX70i6P392kWyi6k7_zvqQD0.roa (raw, json)
Hash identifier: UOiyBNolqr01SRrjVACA1fnSoRVGtST0JNekwlU1PnI=
Subject key identifier: 5A:ED:D7:5F:BD:22:E8:FD:FD:DA:45:B2:8B:A9:3B:FF:3B:EA:40:3D
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09B7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Wu3XX70i6P392kWyi6k7_zvqQD0.roa
Signing time: Wed 29 Sep 2021 02:36:43 +0000
ROA not before: Wed 29 Sep 2021 02:36:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 113.21.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5AEDD75FBD22E8FDFDDA45B28BA93BFF3BEA403D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c0:21:83:5a:10:c5:d2:de:db:cf:0a:0e:df:
1d:f0:70:99:74:ea:33:e7:32:94:7b:61:24:8f:1e:
2f:5c:43:a4:00:22:96:e3:f0:53:ba:4a:18:61:ef:
3c:cf:a2:bf:c8:20:53:49:a1:c3:51:44:2c:68:5f:
52:c1:84:2f:62:96:1a:af:60:5d:69:bb:a2:18:0e:
91:85:27:a9:e5:09:e3:a8:83:ca:84:79:8a:0c:12:
a1:7b:1f:de:63:7e:2d:15:2d:8a:8a:17:f4:b4:c0:
bb:23:25:95:ae:a6:53:e6:ff:28:43:32:87:ea:23:
97:ef:3e:ed:27:70:61:82:da:95:59:59:e3:42:8c:
78:9f:a5:7b:bc:88:0a:19:1d:b5:f2:32:0d:43:27:
c1:47:7c:38:a8:66:2a:f6:91:04:43:b6:dc:75:43:
47:40:c8:00:72:94:5d:26:5a:b5:fe:d1:a6:9e:dc:
1c:7e:bb:cc:52:2a:6a:a3:e6:41:de:cf:7a:ba:ee:
af:b1:bc:f3:a0:f5:ad:19:55:2d:3e:01:31:a9:91:
f8:e8:ea:4c:c8:fc:97:ff:5c:6d:08:09:a5:ae:88:
e1:58:c4:00:19:bf:f4:30:00:b6:a8:5d:07:5b:a4:
33:0e:83:bf:2d:9c:2c:36:ef:ad:98:c6:56:d8:e0:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:D7:5F:BD:22:E8:FD:FD:DA:45:B2:8B:A9:3B:FF:3B:EA:40:3D
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Wu3XX70i6P392kWyi6k7_zvqQD0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:44:18:74:0a:3e:f9:a5:11:c8:5e:e9:67:bf:f5:39:5d:5c:
12:6a:4f:24:93:bb:f7:95:75:9b:0e:30:f6:3d:0f:76:6b:15:
68:e4:ff:20:d5:c8:fe:4f:60:1e:2f:29:c8:b2:11:03:b9:39:
d2:ad:09:37:66:c8:c2:0c:22:ad:35:65:9b:b6:eb:14:b9:76:
8e:60:ea:8a:9b:1f:a9:30:8c:f6:31:75:33:8f:7c:18:04:37:
0d:d5:4d:f6:b4:25:ca:bb:8c:68:34:67:3d:da:0d:55:0b:14:
64:6e:e3:99:f1:95:75:3b:78:8e:bf:9c:68:73:1e:5d:7e:3f:
3a:b3:3c:aa:88:7c:55:0b:15:63:0a:e9:0a:4f:93:99:ed:88:
af:60:e5:ae:c7:02:50:e1:9b:35:bc:43:29:75:06:82:bb:3e:
d3:46:ca:3e:2e:74:84:1d:0b:af:8c:1d:5c:d7:fd:6e:f1:1b:
9a:4d:e7:c0:7b:fd:37:ee:19:bc:85:e9:69:5c:03:29:0e:e2:
86:62:26:1f:50:5b:a1:45:a3:73:5a:05:3d:1b:72:27:f2:e8:
63:24:02:dd:42:aa:f5:4d:b3:f1:af:25:bb:bd:e1:1e:4c:f0:
28:1d:a0:63:66:c5:b7:ff:41:94:28:cd:65:56:2d:8c:3c:3b:
aa:2a:b3:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMTA5Mjkw
MjM2NDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDVBRURENzVGQkQyMkU4
RkRGRERBNDVCMjhCQTkzQkZGM0JFQTQwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDswCGDWhDF0t7bzwoO3x3wcJl06jPnMpR7YSSPHi9cQ6QAIpbj
8FO6Shhh7zzPor/IIFNJocNRRCxoX1LBhC9ilhqvYF1pu6IYDpGFJ6nlCeOog8qE
eYoMEqF7H95jfi0VLYqKF/S0wLsjJZWuplPm/yhDMofqI5fvPu0ncGGC2pVZWeNC
jHifpXu8iAoZHbXyMg1DJ8FHfDioZir2kQRDttx1Q0dAyABylF0mWrX+0aae3Bx+
u8xSKmqj5kHez3q67q+xvPOg9a0ZVS0+ATGpkfjo6kzI/Jf/XG0ICaWuiOFYxAAZ
v/QwALaoXQdbpDMOg78tnCw2762YxlbY4BQTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWu3XX70i6P392kWyi6k7/zvqQD0wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1d1M1hYNzBpNlAzOTJrV3lp
Nms3X3p2cVFEMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJx
FbwwDQYJKoZIhvcNAQELBQADggEBAKhEGHQKPvmlEche6We/9TldXBJqTySTu/eV
dZsOMPY9D3ZrFWjk/yDVyP5PYB4vKciyEQO5OdKtCTdmyMIMIq01ZZu26xS5do5g
6oqbH6kwjPYxdTOPfBgENw3VTfa0Jcq7jGg0Zz3aDVULFGRu45nxlXU7eI6/nGhz
Hl1+PzqzPKqIfFULFWMK6QpPk5ntiK9g5a7HAlDhmzW8Qyl1BoK7PtNGyj4udIQd
C6+MHVzX/W7xG5pN58B7/TfuGbyF6WlcAykO4oZiJh9QW6FFo3NaBT0bcify6GMk
At1CqvVNs/GvJbu94R5M8CgdoGNmxbf/QZQozWVWLYw8O6oqs3Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org