Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/QUIVv-GbkII5Gpft7xZgggBBErk.roa
File: QUIVv-GbkII5Gpft7xZgggBBErk.roa (raw, json)
Hash identifier: wZZmV9OPETt2TW5zSIoiSUbrfBh8z3YR/yWACy8O4To=
Subject key identifier: 41:42:15:BF:E1:9B:90:82:39:1A:97:ED:EF:16:60:82:00:41:12:B9
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 094E
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/QUIVv-GbkII5Gpft7xZgggBBErk.roa
Signing time: Wed 29 Sep 2021 02:51:29 +0000
ROA not before: Wed 29 Sep 2021 02:51:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24167
IP address blocks: 202.140.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 29 02:51:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=414215BFE19B9082391A97EDEF166082004112B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4b:30:da:5a:d6:10:31:b8:25:d9:7b:e6:55:
dd:3b:e7:fd:80:2b:34:f2:2c:61:f3:49:4d:b9:8d:
f8:73:08:28:27:4f:e8:ab:d8:74:a9:f8:21:2f:7e:
f7:4a:27:cc:62:ac:67:8b:aa:4e:bc:d1:1e:52:bd:
23:38:2c:2b:50:df:87:c9:25:a2:31:2c:30:00:f8:
8b:a1:dc:33:65:2d:e2:e3:cd:0f:b7:63:be:7a:ea:
0d:56:5e:70:50:d7:10:6b:6f:05:c3:33:9f:82:84:
7c:6e:ed:aa:54:ab:1a:4b:e6:bc:80:51:d3:aa:fc:
98:b5:2a:84:f6:da:86:50:f3:c8:5b:c8:69:92:96:
b3:e5:05:4f:40:11:37:da:f5:12:5a:2c:58:f1:a3:
ec:59:6b:e2:e5:3b:f7:42:d9:85:c7:c9:f0:6c:5b:
70:5c:f4:5c:e6:3f:c6:08:73:1f:e4:8c:1a:7f:64:
90:50:c0:52:ba:1b:7d:55:fa:ec:3e:19:7c:69:94:
1f:20:23:af:7f:72:9e:99:05:30:60:84:a2:86:4d:
9f:84:88:67:7f:0b:ac:96:f8:89:63:bc:b3:a3:d7:
2b:7a:65:6f:ea:71:73:14:12:df:30:52:90:ec:57:
05:ad:0b:4d:a3:91:86:2c:f9:2d:f4:2d:66:22:55:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:15:BF:E1:9B:90:82:39:1A:97:ED:EF:16:60:82:00:41:12:B9
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/QUIVv-GbkII5Gpft7xZgggBBErk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.140.160.0/19
Signature Algorithm: sha256WithRSAEncryption
18:fa:ae:87:36:59:6f:cc:76:66:d8:9e:4b:c4:74:45:15:c5:
6e:dd:94:cb:22:c7:c9:33:ba:a3:8e:76:68:b2:6f:b0:fa:03:
7f:59:2f:49:d9:62:1a:d5:44:99:44:a3:76:fd:e6:7b:6c:cc:
60:7b:4e:97:11:fe:2d:b2:27:a6:a4:92:64:23:9c:bd:43:61:
39:5d:70:11:96:be:87:a4:ff:8b:36:f4:d3:ac:81:06:be:9f:
59:06:66:a6:10:96:58:1f:c6:85:60:79:7b:11:ca:0b:0d:ff:
10:a7:32:e3:aa:d5:13:ff:82:c1:c6:0d:a5:b7:7b:e7:ba:f4:
d5:da:cc:24:d0:70:52:79:8a:33:21:58:32:9e:d8:1e:01:a0:
d2:73:17:2e:b0:b0:52:be:8a:fb:04:44:66:30:9d:7d:fc:d9:
9d:b3:b3:89:8b:75:84:63:2b:4f:62:21:47:aa:53:73:77:96:
78:ab:63:97:f2:93:bc:cf:51:8c:59:62:2a:14:ec:39:06:a7:
91:eb:34:0b:28:75:22:dd:c3:0f:b8:5b:dc:b9:6e:f5:90:b9:
11:be:21:26:a4:3b:5b:be:3f:0b:c2:64:bd:6a:02:ba:f3:7e:
c5:e1:b5:af:b9:28:42:27:d6:c2:a7:1a:7a:e5:82:39:50:72:
9d:ae:bb:9b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzYw
RUE5Rjc4MzNFREM2MzY2RkQ1RTIzQTQyNkJDRjYyQkIwMUU2QzAeFw0yMTA5Mjkw
MjUxMjlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDQxNDIxNUJGRTE5Qjkw
ODIzOTFBOTdFREVGMTY2MDgyMDA0MTEyQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1SzDaWtYQMbgl2XvmVd075/2AKzTyLGHzSU25jfhzCCgnT+ir
2HSp+CEvfvdKJ8xirGeLqk680R5SvSM4LCtQ34fJJaIxLDAA+Iuh3DNlLeLjzQ+3
Y7566g1WXnBQ1xBrbwXDM5+ChHxu7apUqxpL5ryAUdOq/Ji1KoT22oZQ88hbyGmS
lrPlBU9AETfa9RJaLFjxo+xZa+LlO/dC2YXHyfBsW3Bc9FzmP8YIcx/kjBp/ZJBQ
wFK6G31V+uw+GXxplB8gI69/cp6ZBTBghKKGTZ+EiGd/C6yW+IljvLOj1yt6ZW/q
cXMUEt8wUpDsVwWtC02jkYYs+S30LWYiVUZdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUQUIVv+GbkII5Gpft7xZgggBBErkwHwYDVR0jBBgwFoAUdg6p94M+3GNm/V4j
pCa89iuwHmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNHQy9k
ZzZwOTRNLTNHTm1fVjRqcENhODlpdXdIbXcuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2RnNnA5NE0tM0dObV9WNGpwQ2E4OWl1d0htdy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FTR0MvUVVJVnYtR2JrSUk1R3BmdDd4Wmdn
Z0JCRXJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqMoDAN
BgkqhkiG9w0BAQsFAAOCAQEAGPquhzZZb8x2ZtieS8R0RRXFbt2UyyLHyTO6o452
aLJvsPoDf1kvSdliGtVEmUSjdv3me2zMYHtOlxH+LbInpqSSZCOcvUNhOV1wEZa+
h6T/izb006yBBr6fWQZmphCWWB/GhWB5exHKCw3/EKcy46rVE/+CwcYNpbd757r0
1drMJNBwUnmKMyFYMp7YHgGg0nMXLrCwUr6K+wREZjCdffzZnbOziYt1hGMrT2Ih
R6pTc3eWeKtjl/KTvM9RjFliKhTsOQankes0Cyh1It3DD7hb3Llu9ZC5Eb4hJqQ7
W74/C8JkvWoCuvN+xeG1r7koQifWwqcaeuWCOVByna67mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org