Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9EDOoNfj0nOW0w1fvUs2aB8QWvE.roa
File: 9EDOoNfj0nOW0w1fvUs2aB8QWvE.roa (raw, json)
Hash identifier: 0Pv6FiVMVFHpR8WF6lT1YL71++5CA4Xub+K4PVD4f7E=
Subject key identifier: F4:40:CE:A0:D7:E3:D2:73:96:D3:0D:5F:BD:4B:36:68:1F:10:5A:F1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CCB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9EDOoNfj0nOW0w1fvUs2aB8QWvE.roa
Signing time: Sun 07 Feb 2021 13:00:23 +0000
ROA not before: Sun 07 Feb 2021 13:00:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.58.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3275 (0xccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 13:00:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F440CEA0D7E3D27396D30D5FBD4B36681F105AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:98:49:d8:71:db:c1:4c:bf:01:01:33:19:
4e:0b:27:65:c4:20:32:6b:3a:a6:27:6b:bf:b5:4f:
40:ea:3e:58:2d:7d:69:98:47:7a:d5:70:b8:c1:f5:
6b:e6:67:94:f5:11:25:b1:26:14:65:36:fe:65:ca:
f6:d7:59:46:af:8c:68:79:f5:3d:49:0e:cd:6a:e2:
f6:a4:f0:e1:6d:93:1a:91:3c:69:10:71:dc:17:07:
73:e6:b8:b1:97:fb:13:44:c6:b7:b5:2e:b2:c9:fa:
ef:5d:1d:c1:5c:12:6f:68:06:91:7b:c7:ed:17:55:
88:6d:7b:e4:78:02:83:a7:77:b9:ec:04:9f:c2:02:
26:7e:84:f2:d5:c2:81:46:f3:91:06:6e:5f:3b:e8:
11:f2:2a:38:56:57:97:fc:9d:d7:b0:24:8c:39:d1:
ce:ab:27:61:0e:0e:e6:0d:fa:e6:ba:57:50:e9:00:
d6:dd:e0:a4:b9:c8:87:76:e5:3c:bb:bc:78:3b:cb:
3f:2e:d5:f4:49:56:35:2b:a4:42:a2:97:e1:8f:1c:
00:74:b5:03:be:26:06:5c:2f:63:0f:61:78:2a:30:
6c:e4:0c:4d:1e:a7:d9:b5:cb:bd:98:e7:5f:e8:5f:
91:f2:f3:86:cc:27:a2:c8:38:78:70:7d:ae:64:35:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:CE:A0:D7:E3:D2:73:96:D3:0D:5F:BD:4B:36:68:1F:10:5A:F1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9EDOoNfj0nOW0w1fvUs2aB8QWvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:22:6d:49:24:f5:a5:58:37:ee:02:97:f9:33:e6:34:6d:67:
b3:98:0c:34:34:3a:ee:3b:c9:f2:46:d3:74:2a:00:a5:1f:5b:
60:da:e1:57:2d:41:37:8b:42:04:20:82:d9:76:bd:05:11:df:
9f:fb:cc:05:a9:02:9d:14:16:d5:dc:b2:d8:63:11:a9:e1:1b:
53:47:31:62:0b:4d:93:a4:65:1d:37:07:5a:95:25:f8:83:1f:
f5:99:79:b2:96:88:b6:4e:2f:5b:9d:f2:12:94:02:b8:2e:99:
67:23:98:1f:33:21:e7:d0:5c:f4:47:f6:be:b4:67:8b:ad:36:
16:73:60:be:29:42:9f:c7:1e:6c:1d:9e:7d:f1:01:14:71:aa:
42:bc:c5:74:bf:a5:ed:9c:aa:6c:21:cb:be:96:12:84:c6:9e:
e5:48:ad:21:76:38:62:51:84:45:95:55:c3:48:d5:bc:40:9c:
42:d5:91:6a:21:66:bd:d4:04:25:41:b5:d2:6c:e7:9b:2c:8a:
a1:82:9d:3a:9a:85:88:13:a1:d9:77:22:8e:94:05:39:23:c5:
76:f2:03:15:7d:ed:40:51:c9:33:e7:05:43:4a:ed:21:08:e2:
05:0f:f1:f5:91:e1:75:86:0d:a6:a7:85:ff:89:08:ec:1f:64:
50:ca:39:b1
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MzAwMjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY0NDBDRUEwRDdFM0Qy
NzM5NkQzMEQ1RkJENEIzNjY4MUYxMDVBRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA75hJ2HHbwUy/AQEzGU4LJ2XEIDJrOqYna7+1T0DqPlgtfWmY
R3rVcLjB9WvmZ5T1ESWxJhRlNv5lyvbXWUavjGh59T1JDs1q4vak8OFtkxqRPGkQ
cdwXB3PmuLGX+xNExre1LrLJ+u9dHcFcEm9oBpF7x+0XVYhte+R4AoOnd7nsBJ/C
AiZ+hPLVwoFG85EGbl876BHyKjhWV5f8ndewJIw50c6rJ2EODuYN+ua6V1DpANbd
4KS5yId25Ty7vHg7yz8u1fRJVjUrpEKil+GPHAB0tQO+JgZcL2MPYXgqMGzkDE0e
p9m1y72Y51/oX5Hy84bMJ6LIOHhwfa5kNcIxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU9EDOoNfj0nOW0w1fvUs2aB8QWvEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvOUVET29OZmowbk9XMHcxZnZVczJh
QjhRV3ZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI6eDAN
BgkqhkiG9w0BAQsFAAOCAQEATSJtSST1pVg37gKX+TPmNG1ns5gMNDQ67jvJ8kbT
dCoApR9bYNrhVy1BN4tCBCCC2Xa9BRHfn/vMBakCnRQW1dyy2GMRqeEbU0cxYgtN
k6RlHTcHWpUl+IMf9Zl5spaItk4vW53yEpQCuC6ZZyOYHzMh59Bc9Ef2vrRni602
FnNgvilCn8cebB2effEBFHGqQrzFdL+l7ZyqbCHLvpYShMae5UitIXY4YlGERZVV
w0jVvECcQtWRaiFmvdQEJUG10mznmyyKoYKdOpqFiBOh2XcijpQFOSPFdvIDFX3t
QFHJM+cFQ0rtIQjiBQ/x9ZHhdYYNpqeF/4kI7B9kUMo5sQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org