Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dDK0E9ZvGBHhQmO7P-yt_Imapjo.roa
File: dDK0E9ZvGBHhQmO7P-yt_Imapjo.roa (raw, json)
Hash identifier: kcg0JVqpUVwFFt/FClP93eOXv2WjXXx+Ccwe4XPWSvU=
Subject key identifier: 74:32:B4:13:D6:6F:18:11:E1:42:63:BB:3F:EC:AD:FC:89:9A:A6:3A
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0884
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dDK0E9ZvGBHhQmO7P-yt_Imapjo.roa
Signing time: Tue 29 Sep 2020 10:02:33 +0000
ROA not before: Tue 29 Sep 2020 10:02:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 113.21.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7432B413D66F1811E14263BB3FECADFC899AA63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:be:95:ef:5f:94:12:82:63:84:58:9a:71:
b8:4a:ea:bb:9d:23:ef:e0:48:30:22:c4:b8:76:d2:
cb:4c:d2:0a:23:3a:95:6c:85:01:17:06:a8:41:03:
24:d6:0f:0b:ec:f6:91:e2:34:18:31:c4:f8:ed:83:
75:f7:d9:b2:8d:a2:8e:6d:f8:27:60:b1:4f:7c:a3:
5a:e0:c2:51:ca:3f:6f:c2:44:22:7d:6e:24:4e:0e:
55:bd:fd:8c:e5:d6:a4:2b:01:55:78:40:a1:66:b2:
95:ce:b4:d1:b2:11:c1:8a:a8:d9:95:fe:f7:e6:96:
50:8e:85:1a:eb:38:04:c7:0a:d1:39:ae:b3:4b:7c:
44:08:30:a5:5d:70:d5:78:f1:a5:8f:1b:4a:f4:b2:
89:bd:fa:ac:fe:c6:cc:ca:9b:21:c6:94:0d:74:d5:
b8:ce:4c:67:19:aa:27:e6:b2:9a:2d:20:c1:ab:cd:
88:b4:c4:e8:7e:6a:e1:06:ac:17:37:7a:1f:70:fb:
aa:f2:3b:f3:9d:fb:75:2a:2b:1f:bb:ff:46:2b:4a:
c4:9a:d4:b1:a1:45:92:7e:cb:8a:93:5b:f5:a6:ac:
e8:f2:f7:28:8a:c5:c8:15:0d:f2:8f:bb:03:00:8f:
46:85:4b:b7:03:56:f1:50:c6:a2:05:dd:2f:5e:5d:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:B4:13:D6:6F:18:11:E1:42:63:BB:3F:EC:AD:FC:89:9A:A6:3A
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dDK0E9ZvGBHhQmO7P-yt_Imapjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.88.0/21
Signature Algorithm: sha256WithRSAEncryption
38:0d:33:bc:2b:75:43:7a:c2:47:a7:b1:98:1b:d5:7a:96:57:
a1:d2:44:40:6e:e4:be:c9:88:26:1f:86:d3:ab:87:87:fa:19:
12:8b:c9:be:10:2c:d4:7b:5a:d4:ec:90:f3:fd:0e:9c:68:0d:
e1:f0:3a:01:0d:e4:1e:f6:c1:6d:c9:59:2b:22:3c:91:97:a0:
ae:61:ee:b9:41:fe:ba:42:6e:a7:81:2c:49:a1:ae:16:4a:bd:
e2:33:db:a5:f5:6e:66:70:95:2f:9e:0c:35:d3:af:b3:52:ab:
f3:a6:ea:f1:fe:fa:78:37:9d:f0:56:a5:c1:74:8b:1b:08:38:
8d:9f:27:63:34:a9:07:f3:4b:d2:75:82:6c:fe:c8:bf:36:0b:
4e:c5:b7:40:dd:9a:4e:d5:07:8a:0e:47:16:fb:fa:e4:83:46:
34:ca:61:ab:86:20:b7:a3:76:cf:ff:ee:ad:fc:e5:fa:02:57:
ee:3c:47:55:cf:1d:b6:8a:e4:a5:b0:22:bb:79:b3:38:8c:61:
54:8d:6b:8b:c4:50:45:80:d6:05:fe:67:e8:c2:d9:8c:5c:44:
85:35:a9:12:2d:59:6c:0e:cf:eb:bc:56:cd:2e:8c:f2:bc:71:
35:0c:54:9c:32:9f:2b:db:7f:42:01:7b:13:ff:85:05:35:b6:
d9:cd:ad:84
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc0MzJCNDEzRDY2RjE4
MTFFMTQyNjNCQjNGRUNBREZDODk5QUE2M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCmL6V71+UEoJjhFiacbhK6rudI+/gSDAixLh20stM0gojOpVs
hQEXBqhBAyTWDwvs9pHiNBgxxPjtg3X32bKNoo5t+CdgsU98o1rgwlHKP2/CRCJ9
biRODlW9/Yzl1qQrAVV4QKFmspXOtNGyEcGKqNmV/vfmllCOhRrrOATHCtE5rrNL
fEQIMKVdcNV48aWPG0r0som9+qz+xszKmyHGlA101bjOTGcZqifmspotIMGrzYi0
xOh+auEGrBc3eh9w+6ryO/Od+3UqKx+7/0YrSsSa1LGhRZJ+y4qTW/WmrOjy9yiK
xcgVDfKPuwMAj0aFS7cDVvFQxqIF3S9eXTcHAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUdDK0E9ZvGBHhQmO7P+yt/ImapjowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9kREswRTladkdCSGhR
bU83UC15dF9JbWFwam8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDcRVYMA0GCSqGSIb3DQEBCwUAA4IBAQA4DTO8K3VDesJHp7GYG9V6lleh0kRA
buS+yYgmH4bTq4eH+hkSi8m+ECzUe1rU7JDz/Q6caA3h8DoBDeQe9sFtyVkrIjyR
l6CuYe65Qf66Qm6ngSxJoa4WSr3iM9ul9W5mcJUvngw106+zUqvzpurx/vp4N53w
VqXBdIsbCDiNnydjNKkH80vSdYJs/si/NgtOxbdA3ZpO1QeKDkcW+/rkg0Y0ymGr
hiC3o3bP/+6t/OX6AlfuPEdVzx22iuSlsCK7ebM4jGFUjWuLxFBFgNYF/mfowtmM
XESFNakSLVlsDs/rvFbNLozyvHE1DFScMp8r239CAXsT/4UFNbbZza2E
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org