Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/i6F5f1gG-8VeIgD724Va_LQU3kc.roa
File: i6F5f1gG-8VeIgD724Va_LQU3kc.roa (raw, json)
Hash identifier: fgPe9fbmkP3bk8Rfph0VxbMdCFwOl2xXusAf2usgX2k=
Subject key identifier: 8B:A1:79:7F:58:06:FB:C5:5E:22:00:FB:DB:85:5A:FC:B4:14:DE:47
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 095D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/i6F5f1gG-8VeIgD724Va_LQU3kc.roa
Signing time: Tue 29 Sep 2020 10:01:45 +0000
ROA not before: Tue 29 Sep 2020 10:01:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 218.35.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8BA1797F5806FBC55E2200FBDB855AFCB414DE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:c1:ab:cf:2d:bb:8a:ee:a3:65:f2:c8:12:
b8:52:a0:ab:26:4f:df:4d:d4:63:5c:e4:cb:9b:bd:
f8:4d:fa:98:c3:20:37:cc:ba:82:5f:45:3d:38:39:
eb:20:b4:d7:f7:99:d1:a8:58:36:a8:e9:21:0e:0b:
76:30:49:f2:62:1b:25:63:de:78:5b:73:d7:88:01:
b5:9e:eb:ba:54:a4:4d:27:b9:a4:8d:6f:1d:91:16:
ce:4c:97:67:48:fd:5e:63:95:7c:0d:41:5e:85:2a:
7d:9c:39:3f:49:18:15:25:f7:dc:a4:c4:13:8c:97:
1d:f0:34:c5:8a:9d:ee:c4:87:ae:38:1e:4a:6a:f9:
71:57:22:87:f6:01:b7:11:ed:0a:b8:46:e8:9c:7d:
33:46:37:71:d6:4c:9e:54:3d:8f:83:2c:50:16:6d:
c2:ea:93:b0:d8:8d:63:0c:91:72:67:be:a1:cc:bb:
74:3a:86:2a:8a:7b:19:5a:ec:14:fe:3e:83:b8:f7:
69:e6:b2:28:54:14:9d:1a:cb:e9:45:85:4e:ef:67:
27:30:a6:05:e8:00:37:37:74:92:f5:7e:3c:78:05:
2c:a4:8e:c9:36:23:10:ce:f1:cd:cf:73:10:3e:64:
f3:aa:ca:b8:65:ba:30:fa:93:c0:75:4f:e2:49:f9:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:79:7F:58:06:FB:C5:5E:22:00:FB:DB:85:5A:FC:B4:14:DE:47
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/i6F5f1gG-8VeIgD724Va_LQU3kc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:04:09:e0:7d:ab:55:79:19:89:04:dd:d7:0e:56:f7:2c:e7:
14:84:0a:5f:dc:55:50:3d:67:57:35:e4:33:95:2f:3c:e8:d0:
cd:e0:20:32:00:18:5c:af:94:58:f2:1c:17:0a:60:a0:e7:cc:
30:ec:aa:90:db:cb:6b:0b:0f:65:54:bc:fe:74:4f:aa:a1:78:
66:ab:a3:db:b2:a8:64:28:f1:dc:9c:47:e1:37:55:61:7a:bc:
f0:21:02:1e:fa:31:9d:87:fe:79:c4:69:d4:78:91:82:44:01:
97:0e:c0:a3:72:ab:b8:ca:0a:a9:a3:09:08:3d:c5:33:2e:46:
dc:18:3b:b7:a5:fd:25:66:66:06:43:58:19:aa:fc:8e:4f:72:
29:60:fe:06:9f:3a:29:95:67:c3:e6:61:ec:85:a3:66:3d:81:
93:28:38:17:44:1f:c7:fb:78:d0:35:60:cf:29:d2:ec:04:ed:
17:62:f2:2d:c6:78:6d:82:30:86:01:0c:ae:11:8c:39:43:f7:
48:c2:f3:34:19:23:cf:2c:66:95:b7:1f:4b:83:89:a0:9c:b0:
8a:6b:ab:33:b0:28:ce:e5:c1:f8:27:35:d0:c5:7d:56:13:61:
27:63:17:d7:12:fa:aa:82:24:c0:2a:76:c8:e0:62:57:fe:18:
30:a6:68:ad
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxNDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhCQTE3OTdGNTgwNkZC
QzU1RTIyMDBGQkRCODU1QUZDQjQxNERFNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJZcGrzy27iu6jZfLIErhSoKsmT99N1GNc5MubvfhN+pjDIDfM
uoJfRT04OesgtNf3mdGoWDao6SEOC3YwSfJiGyVj3nhbc9eIAbWe67pUpE0nuaSN
bx2RFs5Ml2dI/V5jlXwNQV6FKn2cOT9JGBUl99ykxBOMlx3wNMWKne7Eh644Hkpq
+XFXIof2AbcR7Qq4RuicfTNGN3HWTJ5UPY+DLFAWbcLqk7DYjWMMkXJnvqHMu3Q6
hiqKexla7BT+PoO492nmsihUFJ0ay+lFhU7vZycwpgXoADc3dJL1fjx4BSykjsk2
IxDO8c3PcxA+ZPOqyrhlujD6k8B1T+JJ+RFhAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUi6F5f1gG+8VeIgD724Va/LQU3kcwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvaTZGNWYxZ0ctOFZlSWdENzI0VmFf
TFFVM2tjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANojMA0G
CSqGSIb3DQEBCwUAA4IBAQBHBAngfatVeRmJBN3XDlb3LOcUhApf3FVQPWdXNeQz
lS886NDN4CAyABhcr5RY8hwXCmCg58ww7KqQ28trCw9lVLz+dE+qoXhmq6Pbsqhk
KPHcnEfhN1VherzwIQIe+jGdh/55xGnUeJGCRAGXDsCjcqu4ygqpowkIPcUzLkbc
GDu3pf0lZmYGQ1gZqvyOT3IpYP4GnzoplWfD5mHshaNmPYGTKDgXRB/H+3jQNWDP
KdLsBO0XYvItxnhtgjCGAQyuEYw5Q/dIwvM0GSPPLGaVtx9Lg4mgnLCKa6szsCjO
5cH4JzXQxX1WE2EnYxfXEvqqgiTAKnbI4GJX/hgwpmit
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org