Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/IA88wP_nz4BEGq9afZiZ3Xigc8s.roa
File: IA88wP_nz4BEGq9afZiZ3Xigc8s.roa (raw, json)
Hash identifier: e530s0xs1ReVie40S7q7O6rEvrTb90EhFY9wSKr5loE=
Subject key identifier: 20:0F:3C:C0:FF:E7:CF:80:44:1A:AF:5A:7D:98:99:DD:78:A0:73:CB
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B72
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/IA88wP_nz4BEGq9afZiZ3Xigc8s.roa
Signing time: Fri 16 Dec 2022 04:19:43 +0000
ROA not before: Fri 16 Dec 2022 04:19:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 61.57.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 16 04:19:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=200F3CC0FFE7CF80441AAF5A7D9899DD78A073CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:dd:a4:3d:2a:dc:5f:e0:07:5d:c1:7f:23:
14:4c:03:9a:e9:3e:81:4b:e9:3f:c6:51:95:d3:f0:
02:13:71:96:ea:02:df:94:31:b3:c1:f1:1e:e8:9f:
1e:e3:33:d6:5d:ba:29:b8:69:ee:84:5e:47:e8:7b:
e4:dc:55:9d:f1:51:37:4a:0e:8c:d1:fe:d4:de:3c:
f4:f7:8d:10:29:d2:20:05:ab:a4:38:36:f5:75:aa:
7a:52:53:82:e0:f7:05:60:d6:90:2a:a9:e1:17:e2:
1f:64:58:9d:91:08:d4:ef:e7:14:2c:a1:12:b9:48:
43:56:4a:d2:f0:b8:d8:af:7e:ca:24:f5:ed:d1:98:
fb:86:cc:3c:e3:7e:a2:92:d8:f9:c6:ab:82:6c:24:
f6:99:30:ab:c0:ed:0d:b4:83:b6:5e:54:ca:85:36:
74:ac:5a:b6:58:b1:8f:1d:f7:50:46:54:1d:bc:ca:
44:9b:19:e7:c3:c5:42:40:bf:4a:0a:05:45:d3:8b:
9f:a1:8f:88:c7:7a:82:a2:6f:c5:8a:54:d4:85:92:
2a:69:d4:5f:fc:64:c9:20:94:15:b8:24:1f:e6:12:
5f:47:52:9e:66:b5:85:76:ee:eb:83:30:fc:c3:9a:
d0:86:4a:f9:12:85:b5:1f:3e:33:db:27:a5:f3:44:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0F:3C:C0:FF:E7:CF:80:44:1A:AF:5A:7D:98:99:DD:78:A0:73:CB
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/IA88wP_nz4BEGq9afZiZ3Xigc8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:31:1a:7f:f3:f9:6e:c4:52:1e:9e:6a:3c:03:b0:d5:7e:c4:
1c:7f:c0:3a:5c:1e:c6:f3:74:09:f5:7c:0d:62:6b:e6:d2:9f:
f9:02:f2:f9:47:e2:e1:b5:8e:c3:8c:2b:2a:19:b1:6c:ed:2e:
a4:c2:9d:5b:91:1f:5b:c7:23:99:91:06:26:b4:84:30:d9:28:
c4:d8:89:b9:c2:00:4a:fe:a4:d0:0a:58:40:4f:08:8f:01:84:
4e:67:25:d0:e6:93:f0:1b:61:f2:d5:92:85:5f:30:a0:32:92:
f3:27:65:49:cf:7e:bf:84:33:9e:b5:c0:5a:42:38:ac:07:05:
75:76:fa:c3:f6:1f:04:8e:25:29:bf:e3:b6:a5:69:56:c3:fe:
aa:b6:81:e0:52:b8:55:8f:73:f9:a0:ea:79:38:b1:78:d8:d2:
6b:8a:15:3c:e1:df:e9:1d:fe:55:eb:ff:bf:5c:13:7f:1a:86:
df:dd:31:3a:68:d8:59:f9:e5:b3:2c:ca:0d:ec:1d:0f:3f:a7:
74:4d:e2:b1:dc:09:c5:3d:96:4b:8a:7c:66:d3:6e:07:22:a6:
38:c2:70:e1:1d:fc:9e:47:f1:d1:d4:a7:c0:5f:96:55:7b:de:
d3:37:41:25:a6:b0:c6:cd:6c:b8:21:52:bf:16:3e:b2:b9:0f:
6c:72:35:7b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjEyMTYw
NDE5NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIwMEYzQ0MwRkZFN0NG
ODA0NDFBQUY1QTdEOTg5OURENzhBMDczQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCTid2kPSrcX+AHXcF/IxRMA5rpPoFL6T/GUZXT8AITcZbqAt+U
MbPB8R7onx7jM9Zduim4ae6EXkfoe+TcVZ3xUTdKDozR/tTePPT3jRAp0iAFq6Q4
NvV1qnpSU4Lg9wVg1pAqqeEX4h9kWJ2RCNTv5xQsoRK5SENWStLwuNivfsok9e3R
mPuGzDzjfqKS2PnGq4JsJPaZMKvA7Q20g7ZeVMqFNnSsWrZYsY8d91BGVB28ykSb
GefDxUJAv0oKBUXTi5+hj4jHeoKib8WKVNSFkipp1F/8ZMkglBW4JB/mEl9HUp5m
tYV27uuDMPzDmtCGSvkShbUfPjPbJ6XzRGlFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUIA88wP/nz4BEGq9afZiZ3Xigc8swHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9JQTg4d1Bfbno0QkVHcTlhZlpp
WjNYaWdjOHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTmA
MA0GCSqGSIb3DQEBCwUAA4IBAQA+MRp/8/luxFIenmo8A7DVfsQcf8A6XB7G83QJ
9XwNYmvm0p/5AvL5R+LhtY7DjCsqGbFs7S6kwp1bkR9bxyOZkQYmtIQw2SjE2Im5
wgBK/qTQClhATwiPAYROZyXQ5pPwG2Hy1ZKFXzCgMpLzJ2VJz36/hDOetcBaQjis
BwV1dvrD9h8EjiUpv+O2pWlWw/6qtoHgUrhVj3P5oOp5OLF42NJrihU84d/pHf5V
6/+/XBN/Gobf3TE6aNhZ+eWzLMoN7B0PP6d0TeKx3AnFPZZLinxm024HIqY4wnDh
HfyeR/HR1KfAX5ZVe97TN0ElprDGzWy4IVK/Fj6yuQ9scjV7
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org