Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/v8EC4zNyrSdZPke3zAl9Z8LHOR0.roa
File: v8EC4zNyrSdZPke3zAl9Z8LHOR0.roa (raw, json)
Hash identifier: YmZHS8cubCEZeGuRZBFzicCezMw6x0e+OEvBTbpthDc=
Subject key identifier: BF:C1:02:E3:33:72:AD:27:59:3E:47:B7:CC:09:7D:67:C2:C7:39:1D
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0927
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/v8EC4zNyrSdZPke3zAl9Z8LHOR0.roa
Signing time: Sun 07 Feb 2021 13:08:13 +0000
ROA not before: Sun 07 Feb 2021 13:08:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18429
IP address blocks: 61.57.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 7 13:08:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BFC102E33372AD27593E47B7CC097D67C2C7391D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:b5:da:18:3a:3d:fa:6f:32:4b:7b:55:6e:
43:0e:39:17:d2:93:d2:b7:d1:49:2c:dc:54:38:b5:
fc:45:8b:0a:7d:fb:67:be:b1:80:44:16:77:ee:97:
ca:c7:4d:b7:ec:9b:46:d3:09:0c:2a:28:d5:c4:cb:
bd:71:2c:74:b7:04:88:cb:83:a0:02:cc:06:30:42:
bd:63:64:d4:94:62:26:ba:62:b5:f2:53:ba:36:9d:
1d:d7:11:1c:95:a8:49:5c:b4:81:1f:d5:26:31:4e:
57:ad:02:96:6c:c1:31:e3:72:18:97:74:1c:1f:4a:
35:bf:f5:14:d3:d8:ab:f3:f3:be:3e:61:28:dd:13:
db:c7:bb:0e:35:3f:cc:aa:54:34:0c:5d:10:a7:b4:
b1:1e:18:9d:e4:2e:cb:8b:f2:18:46:56:de:eb:43:
b0:1e:8d:42:0f:60:da:61:48:e5:b7:56:3e:e8:92:
47:b8:cd:3a:b2:dc:88:ec:02:cd:db:7b:2a:d5:c4:
44:5b:af:37:eb:8e:a2:e9:4e:52:56:3a:6e:42:4d:
dc:9b:88:d7:7f:ff:3d:a0:d6:24:c4:db:cd:b9:7a:
15:44:62:d2:f8:ab:fb:b5:a4:88:be:35:c2:4a:cd:
e8:bb:d2:30:7d:b0:92:9b:89:83:55:26:f0:7f:8b:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:02:E3:33:72:AD:27:59:3E:47:B7:CC:09:7D:67:C2:C7:39:1D
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/v8EC4zNyrSdZPke3zAl9Z8LHOR0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:32:74:32:b5:a1:0c:2d:7e:88:eb:66:ff:60:da:89:41:82:
1d:b2:34:64:ff:1a:2e:27:3e:8f:eb:0b:47:40:c9:1f:be:30:
85:51:83:f6:68:23:f5:d0:fc:35:08:6e:25:b3:9c:7d:ef:68:
1a:31:e0:64:17:a9:10:27:da:21:07:70:a3:8a:eb:bb:da:0b:
25:f9:9b:8a:84:12:af:7f:bc:b9:a8:66:7f:d7:2f:6e:1e:06:
ff:e6:62:a2:61:4c:b5:18:9d:39:30:01:92:f0:2a:62:64:74:
22:63:33:1b:36:7c:76:ea:d6:d6:fe:52:d6:32:35:1f:01:03:
ce:ac:9a:ae:9a:3f:a0:29:61:f4:6b:cb:18:7e:ea:64:05:9d:
d4:b3:90:53:f1:98:fc:91:a0:6c:37:19:a2:45:d3:f7:d6:6e:
59:cd:b3:cc:ab:70:0d:59:ee:7a:91:3e:de:16:68:4e:6b:f1:
9c:96:b5:4d:08:ca:ba:df:c4:51:29:ce:cc:15:d3:8e:29:60:
89:90:08:8b:94:1e:b1:4a:77:16:fe:0c:f5:f9:d3:76:63:9d:
d2:f1:6e:3f:74:0f:d1:ec:d4:85:29:a4:29:ef:d8:1d:3d:11:
96:59:40:b9:86:16:7e:6b:3a:c5:9c:7e:04:3e:7d:e5:1c:97:
07:d5:46:96
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMTAyMDcx
MzA4MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJGQzEwMkUzMzM3MkFE
Mjc1OTNFNDdCN0NDMDk3RDY3QzJDNzM5MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDs37XaGDo9+m8yS3tVbkMOORfSk9K30Uks3FQ4tfxFiwp9+2e+
sYBEFnful8rHTbfsm0bTCQwqKNXEy71xLHS3BIjLg6ACzAYwQr1jZNSUYia6YrXy
U7o2nR3XERyVqElctIEf1SYxTletApZswTHjchiXdBwfSjW/9RTT2Kvz874+YSjd
E9vHuw41P8yqVDQMXRCntLEeGJ3kLsuL8hhGVt7rQ7AejUIPYNphSOW3Vj7okke4
zTqy3IjsAs3beyrVxERbrzfrjqLpTlJWOm5CTdybiNd//z2g1iTE2825ehVEYtL4
q/u1pIi+NcJKzei70jB9sJKbiYNVJvB/i2nrAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUv8EC4zNyrSdZPke3zAl9Z8LHOR0wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC92OEVDNHpOeXJTZFpQa2UzekFs
OVo4TEhPUjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPTmQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBsMnQytaEMLX6I62b/YNqJQYIdsjRk/xouJz6P
6wtHQMkfvjCFUYP2aCP10Pw1CG4ls5x972gaMeBkF6kQJ9ohB3Cjiuu72gsl+ZuK
hBKvf7y5qGZ/1y9uHgb/5mKiYUy1GJ05MAGS8CpiZHQiYzMbNnx26tbW/lLWMjUf
AQPOrJqumj+gKWH0a8sYfupkBZ3Us5BT8Zj8kaBsNxmiRdP31m5ZzbPMq3ANWe56
kT7eFmhOa/GclrVNCMq638RRKc7MFdOOKWCJkAiLlB6xSncW/gz1+dN2Y53S8W4/
dA/R7NSFKaQp79gdPRGWWUC5hhZ+azrFnH4EPn3lHJcH1UaW
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org