Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/kmmAwy8bDii34uPLw-WCvxN7OwA.roa
File: kmmAwy8bDii34uPLw-WCvxN7OwA.roa (raw, json)
Hash identifier: OAMfugXX2TMuYRjJ51P/iTVhofI1kzhRMmQ/qN16vZY=
Subject key identifier: 92:69:80:C3:2F:1B:0E:28:B7:E2:E3:CB:C3:E5:82:BF:13:7B:3B:00
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 0840
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/kmmAwy8bDii34uPLw-WCvxN7OwA.roa
Signing time: Mon 07 Dec 2020 03:33:07 +0000
ROA not before: Mon 07 Dec 2020 03:33:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131144
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Dec 7 03:33:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=926980C32F1B0E28B7E2E3CBC3E582BF137B3B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:1e:43:25:64:cb:f8:b6:31:f8:c6:a7:6b:
dc:e5:90:bc:11:86:ec:0c:75:58:a6:e1:31:63:f7:
0e:3e:13:c7:f1:a2:9c:06:62:6c:de:1d:1f:8e:66:
85:54:cb:8e:0f:5d:f3:68:60:d2:8d:85:a0:aa:54:
5c:cc:e3:61:e8:64:0a:04:04:a2:05:35:6c:13:d2:
9b:15:a9:6d:d4:27:6d:e2:0e:ec:9e:8d:e4:76:1a:
f2:05:a8:4c:49:27:a1:9d:ac:f5:63:de:38:ed:00:
00:9d:51:80:a4:64:3d:b9:4f:89:9d:94:61:bd:71:
4d:c7:46:39:4e:9a:32:8b:7e:6b:9c:37:73:3f:ae:
6c:a3:96:b0:b8:34:93:e2:87:72:9a:75:f8:11:31:
7e:9b:6c:c6:68:90:cd:96:25:9c:24:72:c3:40:e0:
1b:66:2b:60:cd:fb:d9:79:b2:1b:f3:a1:3a:bc:bd:
39:fb:ac:c4:bd:9d:7d:a7:1b:6a:60:22:b5:5d:4d:
df:ae:dc:45:51:79:88:21:49:87:33:78:7d:39:e4:
40:61:4e:df:10:2f:a7:17:a4:a4:b6:28:71:6c:ce:
26:8f:ad:45:6a:1e:cc:ac:a8:1b:5a:08:36:0f:2a:
6a:77:96:e2:a6:bd:9f:ea:32:b3:30:bd:a6:79:62:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:69:80:C3:2F:1B:0E:28:B7:E2:E3:CB:C3:E5:82:BF:13:7B:3B:00
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/kmmAwy8bDii34uPLw-WCvxN7OwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
02:94:3f:db:06:65:2e:da:61:0a:b9:55:0b:07:08:f5:6e:cc:
8c:23:86:a5:1b:d0:ca:4c:60:d0:7e:ce:ec:39:db:8a:55:47:
38:23:0d:b1:1e:c4:29:e2:35:a3:34:02:32:1a:4b:6d:87:70:
e1:a9:fe:cd:7e:31:45:92:6a:90:d9:97:35:d3:aa:6d:34:61:
2f:b0:3d:e8:ac:5e:dd:cc:11:25:ee:df:96:ff:85:39:21:84:
93:c8:5e:3a:c9:f2:90:7d:b6:9d:0b:52:2f:83:07:23:8d:8a:
10:7f:79:26:a5:d0:68:a9:07:55:04:34:ca:90:6d:e0:98:b6:
fc:62:d0:02:a5:0a:b6:03:36:8a:f3:ce:d7:08:d2:b9:27:3a:
8b:e4:1a:0f:9c:78:41:8a:22:ce:56:59:c3:7d:a9:27:ed:91:
dd:dd:b4:27:73:c7:28:27:4f:2a:e1:5c:55:a1:c3:a8:97:11:
df:d3:65:75:93:4e:da:65:fe:f2:28:60:6c:b7:38:28:55:4a:
e4:d3:e5:85:bb:d8:41:88:fa:4e:c7:f4:b9:da:20:e8:23:b4:
72:d1:15:9f:e6:07:50:89:48:e8:f6:b5:72:08:7a:0e:b0:3d:
dd:c8:ec:14:fa:ec:fb:af:a0:fd:fa:9b:55:d4:87:aa:8d:06:
29:e0:56:75
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzg2
NjQ4Rjc5QkI3OUUxRjBCMEZGOTAzOTY5MkY3NEU0RjNDRTFGODAeFw0yMDEyMDcw
MzMzMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDkyNjk4MEMzMkYxQjBF
MjhCN0UyRTNDQkMzRTU4MkJGMTM3QjNCMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCWh5DJWTL+LYx+Mana9zlkLwRhuwMdVim4TFj9w4+E8fxopwG
YmzeHR+OZoVUy44PXfNoYNKNhaCqVFzM42HoZAoEBKIFNWwT0psVqW3UJ23iDuye
jeR2GvIFqExJJ6GdrPVj3jjtAACdUYCkZD25T4mdlGG9cU3HRjlOmjKLfmucN3M/
rmyjlrC4NJPih3KadfgRMX6bbMZokM2WJZwkcsNA4BtmK2DN+9l5shvzoTq8vTn7
rMS9nX2nG2pgIrVdTd+u3EVReYghSYczeH055EBhTt8QL6cXpKS2KHFsziaPrUVq
HsysqBtaCDYPKmp3luKmvZ/qMrMwvaZ5Yr7JAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUkmmAwy8bDii34uPLw+WCvxN7OwAwHwYDVR0jBBgwFoAUeGZI95u3nh8LD/kD
lpL3Tk884fgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNVUy9l
R1pJOTV1M25oOExEX2tEbHBMM1RrODg0ZmcuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2VHWkk5NXUzbmg4TERfa0RscEwzVGs4ODRmZy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FTVVMva21tQXd5OGJEaWkzNHVQTHctV0N2
eE43T3dBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcKBDAN
BgkqhkiG9w0BAQsFAAOCAQEAApQ/2wZlLtphCrlVCwcI9W7MjCOGpRvQykxg0H7O
7DnbilVHOCMNsR7EKeI1ozQCMhpLbYdw4an+zX4xRZJqkNmXNdOqbTRhL7A96Kxe
3cwRJe7flv+FOSGEk8heOsnykH22nQtSL4MHI42KEH95JqXQaKkHVQQ0ypBt4Ji2
/GLQAqUKtgM2ivPO1wjSuSc6i+QaD5x4QYoizlZZw32pJ+2R3d20J3PHKCdPKuFc
VaHDqJcR39NldZNO2mX+8ihgbLc4KFVK5NPlhbvYQYj6Tsf0udog6CO0ctEVn+YH
UIlI6Pa1cgh6DrA93cjsFPrs+6+g/fqbVdSHqo0GKeBWdQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org