Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/jYcL0jJ_Df4VEMnMLwrfgdfSsSI.roa
File: jYcL0jJ_Df4VEMnMLwrfgdfSsSI.roa (raw, json)
Hash identifier: KKysRxH5tEWss08Ks283ZneOEdz/zmwadNfF/YGtU1I=
Subject key identifier: 8D:87:0B:D2:32:7F:0D:FE:15:10:C9:CC:2F:0A:DF:81:D7:D2:B1:22
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CC1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jYcL0jJ_Df4VEMnMLwrfgdfSsSI.roa
Signing time: Sun 07 Feb 2021 12:58:34 +0000
ROA not before: Sun 07 Feb 2021 12:58:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 22787
IP address blocks: 210.58.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 12:58:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8D870BD2327F0DFE1510C9CC2F0ADF81D7D2B122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:77:c7:3d:50:88:f8:04:4e:47:63:96:46:
52:63:22:b9:be:a9:4d:0b:ea:85:18:f2:73:2a:13:
de:7f:f5:54:ab:d5:c3:cf:f6:de:e5:b4:6f:8c:61:
a3:f1:ee:d5:dc:4a:0a:9c:38:13:e2:f4:42:09:c1:
e9:23:46:aa:f6:b9:fc:88:26:e8:8d:ea:85:b4:77:
70:4d:da:0f:c4:cb:94:04:33:2d:53:ba:f0:ee:dc:
98:7f:82:84:d0:99:9d:d0:1d:07:57:20:b1:25:96:
8f:4f:f8:8a:52:dc:64:d7:90:0a:50:a0:05:8a:ed:
e0:54:32:f2:29:c4:d6:00:3c:29:7d:f9:3f:91:5b:
03:d3:2c:64:37:18:1b:4a:a1:ed:fa:47:ee:0e:f6:
f6:92:ec:ab:f3:d5:fd:06:05:38:56:f1:db:23:c1:
5b:6e:ad:3b:d4:d9:c1:62:2e:ba:4f:6d:48:d1:3c:
0c:53:cd:d8:73:6a:9f:84:c1:a2:1d:c6:56:67:7c:
5b:6a:f5:65:e7:4c:92:fc:68:0d:ac:70:63:df:b1:
8c:ef:53:b7:29:5e:ee:cd:64:ed:a1:53:45:06:36:
38:c2:ab:90:9b:da:f9:f6:0e:e5:d3:e4:5a:56:cf:
74:d6:be:21:a9:b0:5e:ba:6e:f9:56:41:61:28:9e:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:0B:D2:32:7F:0D:FE:15:10:C9:CC:2F:0A:DF:81:D7:D2:B1:22
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jYcL0jJ_Df4VEMnMLwrfgdfSsSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.91.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cd:9c:5f:d1:6d:be:e6:8a:34:8e:67:0b:19:04:1a:d4:44:
e0:44:9e:d3:eb:96:1a:f9:25:a8:43:7c:5a:35:38:f2:62:8d:
91:c9:ff:0c:24:d1:96:b4:78:43:16:4e:09:1b:90:bc:4c:0d:
54:e9:9d:ab:41:79:16:e8:a7:38:e6:d8:bb:08:42:e5:1e:ce:
f1:c5:5b:6c:aa:67:46:22:c0:86:88:4e:14:b7:b6:cf:df:b6:
ac:f1:7d:a5:f1:31:4a:d3:64:f8:c6:8b:a6:4d:b9:24:d0:98:
6d:d9:aa:11:28:17:f4:ec:5c:ec:63:1f:dc:d2:c2:89:9b:8c:
25:2f:6f:9e:fe:27:dd:8b:7b:50:ab:78:75:e5:db:c4:fc:0d:
d8:78:17:b0:37:77:d0:72:9d:6f:62:24:4f:bb:3e:e6:65:39:
45:ff:46:93:d0:4b:db:0d:6c:1a:04:ca:18:53:56:4f:70:7a:
32:8d:eb:73:b4:53:8c:c9:98:84:d5:9d:c1:26:6a:58:69:fc:
c3:bf:e1:b1:73:d9:07:e7:c8:7b:61:9e:18:ea:e6:5d:6b:d7:
19:be:43:a8:95:00:8c:16:e3:d2:aa:2f:8b:b3:09:23:bd:ff:
f0:77:c6:7e:e7:d1:d4:b0:1e:ae:16:52:60:f9:49:a7:64:91:
76:85:f5:fb
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MjU4MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhEODcwQkQyMzI3RjBE
RkUxNTEwQzlDQzJGMEFERjgxRDdEMkIxMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsRXfHPVCI+AROR2OWRlJjIrm+qU0L6oUY8nMqE95/9VSr1cPP
9t7ltG+MYaPx7tXcSgqcOBPi9EIJwekjRqr2ufyIJuiN6oW0d3BN2g/Ey5QEMy1T
uvDu3Jh/goTQmZ3QHQdXILEllo9P+IpS3GTXkApQoAWK7eBUMvIpxNYAPCl9+T+R
WwPTLGQ3GBtKoe36R+4O9vaS7Kvz1f0GBThW8dsjwVturTvU2cFiLrpPbUjRPAxT
zdhzap+EwaIdxlZnfFtq9WXnTJL8aA2scGPfsYzvU7cpXu7NZO2hU0UGNjjCq5Cb
2vn2DuXT5FpWz3TWviGpsF66bvlWQWEonhorAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUjYcL0jJ/Df4VEMnMLwrfgdfSsSIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvalljTDBqSl9EZjRWRU1uTUx3cmZn
ZGZTc1NJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI6WzAN
BgkqhkiG9w0BAQsFAAOCAQEAus2cX9FtvuaKNI5nCxkEGtRE4ESe0+uWGvklqEN8
WjU48mKNkcn/DCTRlrR4QxZOCRuQvEwNVOmdq0F5FuinOObYuwhC5R7O8cVbbKpn
RiLAhohOFLe2z9+2rPF9pfExStNk+MaLpk25JNCYbdmqESgX9Oxc7GMf3NLCiZuM
JS9vnv4n3Yt7UKt4deXbxPwN2HgXsDd30HKdb2IkT7s+5mU5Rf9Gk9BL2w1sGgTK
GFNWT3B6Mo3rc7RTjMmYhNWdwSZqWGn8w7/hsXPZB+fIe2GeGOrmXWvXGb5DqJUA
jBbj0qovi7MJI73/8HfGfufR1LAerhZSYPlJp2SRdoX1+w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:45 2023 by rpki-client on console-ams.rpki-client.org