Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/AvVeeZqGL3fY5eahRtWqJdifXQY.roa
File: AvVeeZqGL3fY5eahRtWqJdifXQY.roa (raw, json)
Hash identifier: Zh0RkK+iOOx8X7XeZD2tiXMKFI+GqdeDVyvHf4vlukY=
Subject key identifier: 02:F5:5E:79:9A:86:2F:77:D8:E5:E6:A1:46:D5:AA:25:D8:9F:5D:06
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 09E8
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AvVeeZqGL3fY5eahRtWqJdifXQY.roa
Signing time: Thu 30 Sep 2021 14:12:18 +0000
ROA not before: Thu 30 Sep 2021 14:12:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 103.224.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 30 14:12:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=02F55E799A862F77D8E5E6A146D5AA25D89F5D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:2b:ed:85:e6:80:5d:c6:73:9e:b3:a6:a5:
44:3e:e8:90:a8:7e:fc:85:1e:0e:17:92:67:ab:31:
54:1e:5a:14:86:ca:a1:e7:f1:f5:09:d5:a3:04:b1:
9e:7b:a3:0e:ce:64:03:d4:a1:7a:53:52:2d:51:9c:
ad:21:ab:6b:6d:93:b0:69:d8:92:e2:31:af:ed:a3:
28:7f:5c:ec:86:84:50:27:a1:a9:a1:3d:f6:59:d5:
28:db:7f:c2:e0:ef:9c:b0:6c:64:ef:fd:40:05:2a:
b7:4b:3e:ae:a8:69:0e:e5:d8:ca:77:bd:c7:d2:94:
d6:75:70:b2:2e:19:94:dc:6a:dc:ed:18:1b:f1:d6:
69:7c:64:25:64:75:fd:a6:a5:34:ca:e9:b2:db:b8:
dd:ab:22:16:df:4d:f3:61:76:d1:06:6f:06:e7:a9:
45:2d:d0:d4:af:9d:fc:43:5e:11:e8:1f:54:e6:08:
84:02:cf:15:53:83:c6:0c:fd:d1:9f:6a:b8:01:ea:
75:d2:05:df:0f:01:fd:cf:17:a4:c1:93:29:b4:be:
cc:39:c5:62:c9:c2:7b:e2:ca:1b:fa:4b:4f:b4:e4:
39:51:e1:d7:4c:e9:1e:43:c2:8e:a3:cd:db:36:a2:
4a:68:fc:8a:f7:e4:c4:7c:bc:a5:da:7e:44:d0:f3:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F5:5E:79:9A:86:2F:77:D8:E5:E6:A1:46:D5:AA:25:D8:9F:5D:06
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AvVeeZqGL3fY5eahRtWqJdifXQY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:48:c4:04:e7:24:de:a4:4b:49:9e:1d:06:1c:a8:fb:50:eb:
af:40:25:9a:09:16:d9:e5:86:56:30:69:a3:68:33:97:6e:fe:
34:c3:a3:74:4d:a5:97:9a:9a:69:b4:df:14:8e:4c:31:89:3a:
41:21:8f:d1:eb:d1:02:25:ec:1a:d7:a2:7c:6a:f7:0a:73:61:
aa:36:7d:fb:28:b1:16:0e:84:54:7e:88:ee:8d:b1:ed:55:1b:
c9:42:00:a3:e4:a8:d1:3b:9a:c2:25:78:ca:c4:d0:8e:ea:df:
ac:8f:42:d1:2a:13:e2:85:22:c2:26:35:af:85:5f:30:37:84:
08:f0:a1:b0:59:10:f5:2d:63:59:3a:a8:3a:97:76:10:7b:1e:
5f:a4:e4:80:a2:5c:bb:8c:17:ba:4f:a3:a1:5b:e6:9c:03:57:
42:42:bc:51:c2:28:2f:4d:23:21:ea:c9:c2:85:ad:ef:8b:2b:
75:f9:81:76:c3:9b:83:99:5e:ed:74:d5:f4:29:0f:bc:53:8a:
2f:02:d7:e3:08:5a:ee:fe:30:4a:14:00:47:00:81:4e:65:b7:
01:94:e1:c0:9d:96:51:b2:de:54:ce:f1:26:cc:71:87:50:1d:
dd:73:0c:96:91:a4:1e:c3:4b:2d:12:6f:1f:57:37:cd:e9:52:
ae:86:f6:ad
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMTA5MzAx
NDEyMThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDAyRjU1RTc5OUE4NjJG
NzdEOEU1RTZBMTQ2RDVBQTI1RDg5RjVEMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMLCvtheaAXcZznrOmpUQ+6JCofvyFHg4XkmerMVQeWhSGyqHn
8fUJ1aMEsZ57ow7OZAPUoXpTUi1RnK0hq2ttk7Bp2JLiMa/toyh/XOyGhFAnoamh
PfZZ1Sjbf8Lg75ywbGTv/UAFKrdLPq6oaQ7l2Mp3vcfSlNZ1cLIuGZTcatztGBvx
1ml8ZCVkdf2mpTTK6bLbuN2rIhbfTfNhdtEGbwbnqUUt0NSvnfxDXhHoH1TmCIQC
zxVTg8YM/dGfargB6nXSBd8PAf3PF6TBkym0vsw5xWLJwnviyhv6S0+05DlR4ddM
6R5Dwo6jzds2okpo/Ir35MR8vKXafkTQ80WdAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUAvVeeZqGL3fY5eahRtWqJdifXQYwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9BdlZlZVpxR0wzZlk1ZWFoUnRX
cUpkaWZYUVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+DI
MA0GCSqGSIb3DQEBCwUAA4IBAQB7SMQE5yTepEtJnh0GHKj7UOuvQCWaCRbZ5YZW
MGmjaDOXbv40w6N0TaWXmppptN8UjkwxiTpBIY/R69ECJewa16J8avcKc2GqNn37
KLEWDoRUfojujbHtVRvJQgCj5KjRO5rCJXjKxNCO6t+sj0LRKhPihSLCJjWvhV8w
N4QI8KGwWRD1LWNZOqg6l3YQex5fpOSAoly7jBe6T6OhW+acA1dCQrxRwigvTSMh
6snCha3viyt1+YF2w5uDmV7tdNX0KQ+8U4ovAtfjCFru/jBKFABHAIFOZbcBlOHA
nZZRst5UzvEmzHGHUB3dcwyWkaQew0stEm8fVzfN6VKuhvat
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org