Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bAfa6Gb6rbwEvTYxGQCPkRRk7lg.roa
File: bAfa6Gb6rbwEvTYxGQCPkRRk7lg.roa (raw, json)
Hash identifier: vwUWpIZlyPASnDabSGGkYSoQK4WJpsAW5BJV1DDLaZM=
Subject key identifier: 6C:07:DA:E8:66:FA:AD:BC:04:BD:36:31:19:00:8F:91:14:64:EE:58
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E32
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bAfa6Gb6rbwEvTYxGQCPkRRk7lg.roa
Signing time: Wed 29 Sep 2021 02:40:05 +0000
ROA not before: Wed 29 Sep 2021 02:40:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 223.23.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3634 (0xe32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6C07DAE866FAADBC04BD363119008F911464EE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:bc:9d:23:b7:25:2d:3c:50:3d:ec:a4:0d:
15:f1:96:ee:80:2c:80:7b:eb:19:d4:a3:11:cc:bb:
4e:9f:42:ed:72:47:65:13:d7:03:ea:ec:0a:4d:3d:
7d:a2:bb:62:17:4d:7b:16:7a:2f:5b:0e:b4:e5:ae:
11:27:63:71:10:d3:15:cd:de:79:70:40:b5:49:ad:
fe:9f:f5:65:28:e2:e6:d8:54:28:cf:81:ea:db:01:
d1:84:6f:39:6d:f4:52:28:17:f2:dc:6e:91:16:00:
01:3a:b5:5d:77:41:3b:28:8a:88:8f:bf:48:7f:42:
ca:70:52:c3:af:59:2f:30:84:0d:03:ee:49:c6:21:
5b:5a:17:b2:4f:6c:61:f5:71:79:83:db:c7:bb:12:
46:f0:9b:59:b0:02:f1:1c:9f:84:a2:e4:fa:68:ce:
24:e7:f7:13:fd:bc:35:55:72:c5:7a:e2:13:70:06:
24:f2:ef:49:89:a6:f6:3b:70:55:68:1c:63:c2:14:
02:8a:16:ca:d8:2e:83:da:83:4b:5a:a9:e7:b1:4f:
df:cb:47:f4:23:01:a7:f8:4d:26:7f:7d:44:d3:3b:
29:94:06:11:5e:bf:1a:5d:22:77:58:62:e6:2a:58:
24:23:65:cf:74:23:9e:ea:df:5f:37:ce:67:26:f9:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:DA:E8:66:FA:AD:BC:04:BD:36:31:19:00:8F:91:14:64:EE:58
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bAfa6Gb6rbwEvTYxGQCPkRRk7lg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.23.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:74:73:80:00:93:5e:b3:4d:2e:fb:4e:de:af:5e:de:ed:fc:
35:0d:08:b8:48:2a:e7:f2:92:5f:3a:b1:20:a1:d4:51:9a:fe:
22:73:bb:88:19:6c:11:b3:c1:0a:fd:b6:97:5f:67:68:77:50:
76:b4:2e:bd:24:f9:35:ac:0a:00:17:50:cf:bd:20:d1:fb:dd:
06:1f:31:69:e2:f0:7b:2b:b4:07:3a:60:dc:26:af:a0:21:cb:
2c:d3:4d:c3:9b:9d:0d:68:53:4a:ba:c5:f9:d4:f1:cb:15:0d:
d8:8e:b4:c2:4e:07:60:6a:ab:ee:5b:f3:33:c6:eb:78:9a:f6:
ea:e3:57:b0:a1:0a:17:5c:e7:83:3f:c6:74:46:1a:63:de:ae:
67:02:d1:b1:6e:1e:b8:08:f2:86:44:2c:1f:75:26:bb:0e:4f:
46:dd:9f:23:f5:d6:db:7f:d6:d8:56:5a:f5:1f:e4:f7:8c:ab:
c9:99:46:cd:60:ef:fa:23:67:8e:e1:ab:f0:38:40:e9:52:d0:
33:b1:10:42:3d:32:23:72:6a:18:cb:35:0c:15:3a:d1:5a:09:
85:73:d4:45:c9:7d:77:d3:ca:46:1c:d4:65:df:99:53:0e:c2:
34:0b:3a:b8:5a:5c:9c:af:4d:64:6f:3a:d0:56:50:da:02:2c:
ac:72:2e:7a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjQwMDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZDMDdEQUU4NjZGQUFE
QkMwNEJEMzYzMTE5MDA4RjkxMTQ2NEVFNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9hLydI7clLTxQPeykDRXxlu6ALIB76xnUoxHMu06fQu1yR2UT
1wPq7ApNPX2iu2IXTXsWei9bDrTlrhEnY3EQ0xXN3nlwQLVJrf6f9WUo4ubYVCjP
gerbAdGEbzlt9FIoF/LcbpEWAAE6tV13QTsoioiPv0h/QspwUsOvWS8whA0D7knG
IVtaF7JPbGH1cXmD28e7Ekbwm1mwAvEcn4Si5PpoziTn9xP9vDVVcsV64hNwBiTy
70mJpvY7cFVoHGPCFAKKFsrYLoPag0taqeexT9/LR/QjAaf4TSZ/fUTTOymUBhFe
vxpdIndYYuYqWCQjZc90I57q3183zmcm+X7BAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUbAfa6Gb6rbwEvTYxGQCPkRRk7lgwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvYkFmYTZHYjZyYndFdlRZeEdRQ1Br
UlJrN2xnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8XPzAN
BgkqhkiG9w0BAQsFAAOCAQEAinRzgACTXrNNLvtO3q9e3u38NQ0IuEgq5/KSXzqx
IKHUUZr+InO7iBlsEbPBCv22l19naHdQdrQuvST5NawKABdQz70g0fvdBh8xaeLw
eyu0Bzpg3CavoCHLLNNNw5udDWhTSrrF+dTxyxUN2I60wk4HYGqr7lvzM8breJr2
6uNXsKEKF1zngz/GdEYaY96uZwLRsW4euAjyhkQsH3Umuw5PRt2fI/XW23/W2FZa
9R/k94yryZlGzWDv+iNnjuGr8DhA6VLQM7EQQj0yI3JqGMs1DBU60VoJhXPURcl9
d9PKRhzUZd+ZUw7CNAs6uFpcnK9NZG860FZQ2gIsrHIueg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org