Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XW2ElYFiL_d-u8J-XOoQvWXxnQM.roa
File: XW2ElYFiL_d-u8J-XOoQvWXxnQM.roa (raw, json)
Hash identifier: amBXqMLG6Mhh5O7P5xlgipBMtAMClYw19EOsKY/z2pQ=
Subject key identifier: 5D:6D:84:95:81:62:2F:F7:7E:BB:C2:7E:5C:EA:10:BD:65:F1:9D:03
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0905
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XW2ElYFiL_d-u8J-XOoQvWXxnQM.roa
Signing time: Sun 07 Feb 2021 11:55:46 +0000
ROA not before: Sun 07 Feb 2021 11:55:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 7 11:55:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5D6D849581622FF77EBBC27E5CEA10BD65F19D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:76:d7:0c:e5:25:08:2c:96:45:a3:bc:6d:
3f:77:c6:ab:e0:1f:9a:32:65:b7:28:b1:12:1d:94:
f2:62:1e:ab:cb:a2:e4:34:8a:bf:f5:0d:c3:67:86:
af:38:a3:a3:d7:4a:bf:d1:e4:a6:88:55:cb:ac:27:
05:6f:fd:b1:47:97:97:a9:da:a8:5a:17:77:39:b2:
1f:f7:27:3c:f1:d6:c6:69:75:a1:77:e5:90:3c:77:
52:ef:25:dc:a0:9e:4f:50:a2:31:51:78:2c:fb:db:
5e:8f:e8:94:fe:28:aa:01:f5:93:45:82:9e:76:f2:
1b:79:0a:9b:f1:c7:9c:24:39:2a:90:6f:3e:af:98:
54:24:b9:fd:ad:d6:2a:c3:23:16:75:fd:73:98:50:
2d:d9:a5:44:6b:1e:fd:84:e4:8a:f4:f5:ec:5d:7e:
8b:02:7b:ba:b9:b8:a2:32:24:a8:36:5d:cb:01:69:
9b:5c:2f:92:9e:20:d9:50:9f:da:1f:99:9a:f1:aa:
f5:03:1d:ba:e5:9c:ba:6a:1d:bd:1c:36:d6:de:82:
96:a3:7f:b4:1e:4f:02:f3:e1:0f:a0:21:37:f9:ac:
a9:d5:ec:2e:85:27:3b:c5:99:f3:dd:48:10:e1:d4:
6d:0c:f4:f8:8b:46:dc:c0:8d:a0:51:63:25:5a:63:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:84:95:81:62:2F:F7:7E:BB:C2:7E:5C:EA:10:BD:65:F1:9D:03
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XW2ElYFiL_d-u8J-XOoQvWXxnQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
13:32:b4:93:2d:6d:6a:f1:97:17:05:24:fd:53:78:5d:96:92:
e8:a7:74:0f:ba:f7:1b:db:36:c8:8c:e1:97:ba:dd:6c:b7:69:
ee:83:d9:cd:29:a6:cc:bc:c3:d7:20:c1:0c:6a:f5:6a:f3:0b:
c3:79:c1:4a:4d:03:82:74:10:ba:48:59:1c:15:f6:e4:db:f5:
00:89:06:15:b0:6f:bf:4c:f0:7d:68:03:bd:87:99:16:76:5d:
f9:1b:78:fd:c4:f9:68:03:4c:a5:34:24:c7:b8:ff:71:fd:52:
30:01:a9:a2:94:64:76:16:20:38:f7:3a:c5:24:95:17:9f:2a:
67:12:02:17:aa:d6:2f:56:b3:18:4a:c5:62:1d:ba:3b:3c:1a:
b3:73:55:6b:d3:93:3e:09:35:bf:5f:71:ea:9a:c8:59:86:bb:
ea:dd:39:ff:56:19:e8:8d:c7:15:56:07:32:68:5e:b4:c7:14:
0d:7b:f5:f9:c8:90:3d:73:34:3b:7c:14:d9:62:d1:54:5c:30:
9f:ae:fb:98:5a:e4:9a:8f:b9:9f:dd:bf:4b:3b:41:1f:eb:b6:
49:b6:3d:82:e6:55:c7:61:be:b6:d6:79:88:f8:5b:01:c2:b2:
d9:1d:27:25:2f:90:be:24:f4:d8:d7:bf:68:67:2b:40:b2:9d:
f7:75:67:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMTAyMDcx
MTU1NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVENkQ4NDk1ODE2MjJG
Rjc3RUJCQzI3RTVDRUExMEJENjVGMTlEMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGAXbXDOUlCCyWRaO8bT93xqvgH5oyZbcosRIdlPJiHqvLouQ0
ir/1DcNnhq84o6PXSr/R5KaIVcusJwVv/bFHl5ep2qhaF3c5sh/3Jzzx1sZpdaF3
5ZA8d1LvJdygnk9QojFReCz7216P6JT+KKoB9ZNFgp528ht5Cpvxx5wkOSqQbz6v
mFQkuf2t1irDIxZ1/XOYUC3ZpURrHv2E5Ir09exdfosCe7q5uKIyJKg2XcsBaZtc
L5KeINlQn9ofmZrxqvUDHbrlnLpqHb0cNtbegpajf7QeTwLz4Q+gITf5rKnV7C6F
JzvFmfPdSBDh1G0M9PiLRtzAjaBRYyVaY9r3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXW2ElYFiL/d+u8J+XOoQvWXxnQMwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1hXMkVsWUZpTF9kLXU4Si1Y
T29RdldYeG5RTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
OFQwDQYJKoZIhvcNAQELBQADggEBABMytJMtbWrxlxcFJP1TeF2WkuindA+69xvb
NsiM4Ze63Wy3ae6D2c0ppsy8w9cgwQxq9WrzC8N5wUpNA4J0ELpIWRwV9uTb9QCJ
BhWwb79M8H1oA72HmRZ2XfkbeP3E+WgDTKU0JMe4/3H9UjABqaKUZHYWIDj3OsUk
lRefKmcSAheq1i9WsxhKxWIdujs8GrNzVWvTkz4JNb9fceqayFmGu+rdOf9WGeiN
xxVWBzJoXrTHFA179fnIkD1zNDt8FNli0VRcMJ+u+5ha5JqPuZ/dv0s7QR/rtkm2
PYLmVcdhvrbWeYj4WwHCstkdJyUvkL4k9NjXv2hnK0Cynfd1Z7U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org