Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/d0yffbd_DDSISUch8C5ifxadnwc.roa
File: d0yffbd_DDSISUch8C5ifxadnwc.roa (raw, json)
Hash identifier: aWsdUKimbHT3wfeid/IfzTUD68sNts8ml6cfDdM6nAo=
Subject key identifier: 77:4C:9F:7D:B7:7F:0C:34:88:49:47:21:F0:2E:62:7F:16:9D:9F:07
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09BB
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/d0yffbd_DDSISUch8C5ifxadnwc.roa
Signing time: Wed 29 Sep 2021 02:36:44 +0000
ROA not before: Wed 29 Sep 2021 02:36:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 113.21.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=774C9F7DB77F0C3488494721F02E627F169D9F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:51:d3:0e:9a:fe:b7:9d:96:fc:e0:77:4f:
4a:31:67:a1:23:db:f4:68:f1:ef:e2:4d:93:30:02:
27:9e:5e:ef:ab:35:6a:6a:a8:f6:cd:42:d0:1a:27:
ad:e6:ae:b4:f4:78:11:0a:47:0a:9f:03:59:41:bf:
05:25:90:a2:5d:b1:8e:80:99:bc:66:68:14:1f:87:
a2:91:c6:d3:a7:d3:7b:44:30:47:c9:59:77:14:be:
4c:33:b6:78:a7:df:ee:18:67:30:ba:06:cd:c1:33:
1e:24:1c:67:89:ab:59:d5:dc:b5:e2:9d:b8:33:69:
0d:8d:59:5d:67:8f:2e:c3:45:2e:f4:c9:ab:ef:2b:
72:c9:aa:2e:8e:14:89:a5:0d:f1:d0:2f:b3:34:54:
91:50:f8:cb:3b:e4:d0:ae:a4:5b:0f:6e:e1:40:ce:
1e:a5:e9:9a:ce:94:b0:89:5e:74:ca:f2:f1:1a:a9:
5c:76:44:3e:ed:47:d8:62:a1:14:46:9f:f7:65:c6:
b5:e8:4f:0b:be:cc:ad:90:fb:c1:d9:f0:c4:79:b9:
d9:f7:d0:5e:34:d8:5d:e8:a7:5f:a7:65:02:8e:3e:
16:c8:a2:dc:66:25:09:90:a8:d8:e4:be:90:90:cd:
65:ee:2b:f1:82:72:99:5e:24:31:40:79:a9:39:26:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4C:9F:7D:B7:7F:0C:34:88:49:47:21:F0:2E:62:7F:16:9D:9F:07
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/d0yffbd_DDSISUch8C5ifxadnwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.160.0/20
Signature Algorithm: sha256WithRSAEncryption
15:e3:e0:44:0d:cd:93:4f:6b:8c:02:db:d3:dc:6f:00:28:e6:
82:72:7f:8d:75:4e:40:aa:ef:28:8c:15:e0:b6:fe:b2:39:e7:
7b:c7:b2:5f:a5:b8:24:d1:66:be:a0:fb:d4:41:17:31:2f:92:
8d:3c:82:f4:4c:45:49:14:c9:9b:ae:0f:2d:c9:bb:4e:34:08:
47:f8:9c:61:01:63:aa:41:fe:43:9f:87:b6:30:4e:78:6c:a9:
4e:f1:77:d1:5c:46:0c:a4:bb:70:f6:ed:5c:d9:53:19:db:be:
a9:b3:c7:08:99:65:ce:58:ff:32:e3:aa:31:26:d3:25:ea:41:
cd:f9:e7:c7:bc:6f:27:3c:1e:b1:38:bf:8d:b9:75:7f:1d:0b:
b8:db:9d:fd:51:9e:94:0d:d5:56:bb:bf:96:6b:a2:07:13:69:
dd:8e:f3:d3:67:f0:0d:95:99:ba:b3:27:71:e8:42:3a:fa:05:
4f:ca:1b:65:fe:7c:66:ea:81:db:e3:56:64:65:f1:3a:c4:ac:
5e:51:6f:02:e3:ac:60:ac:cd:0a:9b:36:1d:76:9f:61:e7:1d:
d5:e5:bd:97:98:d3:a3:2b:e7:1c:1b:46:8b:29:d1:05:3c:94:
c8:98:05:95:0e:96:3d:63:c8:5c:8f:d5:75:59:01:57:4a:cf:
2a:a6:71:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMTA5Mjkw
MjM2NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc3NEM5RjdEQjc3RjBD
MzQ4ODQ5NDcyMUYwMkU2MjdGMTY5RDlGMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC24FHTDpr+t52W/OB3T0oxZ6Ej2/Ro8e/iTZMwAieeXu+rNWpq
qPbNQtAaJ63mrrT0eBEKRwqfA1lBvwUlkKJdsY6AmbxmaBQfh6KRxtOn03tEMEfJ
WXcUvkwztnin3+4YZzC6Bs3BMx4kHGeJq1nV3LXinbgzaQ2NWV1njy7DRS70yavv
K3LJqi6OFImlDfHQL7M0VJFQ+Ms75NCupFsPbuFAzh6l6ZrOlLCJXnTK8vEaqVx2
RD7tR9hioRRGn/dlxrXoTwu+zK2Q+8HZ8MR5udn30F402F3op1+nZQKOPhbIotxm
JQmQqNjkvpCQzWXuK/GCcpleJDFAeak5JsVTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUd0yffbd/DDSISUch8C5ifxadnwcwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2QweWZmYmRfRERTSVNVY2g4
QzVpZnhhZG53Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARx
FaAwDQYJKoZIhvcNAQELBQADggEBABXj4EQNzZNPa4wC29PcbwAo5oJyf411TkCq
7yiMFeC2/rI553vHsl+luCTRZr6g+9RBFzEvko08gvRMRUkUyZuuDy3Ju040CEf4
nGEBY6pB/kOfh7YwTnhsqU7xd9FcRgyku3D27VzZUxnbvqmzxwiZZc5Y/zLjqjEm
0yXqQc3558e8byc8HrE4v425dX8dC7jbnf1RnpQN1Va7v5ZrogcTad2O89Nn8A2V
mbqzJ3HoQjr6BU/KG2X+fGbqgdvjVmRl8TrErF5RbwLjrGCszQqbNh12n2HnHdXl
vZeY06Mr5xwbRosp0QU8lMiYBZUOlj1jyFyP1XVZAVdKzyqmcTo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org