Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/_7GnjSD-cIkCfsmjgucCyugo3cw.roa
File: _7GnjSD-cIkCfsmjgucCyugo3cw.roa (raw, json)
Hash identifier: +VZuDD1vCJhARcezG7h6S4N+Urdt2M8owQEKlWHhru4=
Subject key identifier: FF:B1:A7:8D:20:FE:70:89:02:7E:C9:A3:82:E7:02:CA:E8:28:DD:CC
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0920
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/_7GnjSD-cIkCfsmjgucCyugo3cw.roa
Signing time: Wed 29 Sep 2021 02:52:27 +0000
ROA not before: Wed 29 Sep 2021 02:52:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131629
IP address blocks: 103.119.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 29 02:52:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FFB1A78D20FE7089027EC9A382E702CAE828DDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:e0:f2:05:e1:ad:c5:4b:bf:60:15:a8:3a:
ee:0f:c3:35:f6:3d:09:b9:b2:bd:fb:c0:89:88:ef:
a3:02:13:7d:be:d1:bd:a9:ea:08:7e:3c:c8:2f:05:
a2:31:3d:ac:0e:5f:48:a1:17:5b:9e:7f:7e:0a:b4:
2c:26:8e:f3:6f:81:cd:e8:e3:99:00:0d:8d:32:87:
4e:8b:3f:78:d3:a8:1f:8a:b4:e8:dd:c7:c4:24:46:
5c:dd:f8:79:9c:66:1b:ac:bb:26:5a:54:c2:7d:eb:
c5:56:38:bd:d1:a9:21:63:ed:0f:7b:8d:03:68:40:
18:ff:66:96:74:a3:5e:56:2f:e0:d3:96:e2:d4:78:
71:3e:b3:c4:9f:25:07:16:9f:81:f7:8f:ff:61:a4:
52:34:dd:3a:f6:91:23:21:a3:4d:1d:58:e6:12:56:
74:ab:95:e2:e3:12:35:04:51:90:f4:45:8b:fd:b2:
e5:38:2e:f1:d9:a0:2d:23:83:60:68:3d:19:b4:1b:
67:22:fd:80:40:24:8f:8b:98:83:7b:38:d7:96:f5:
94:a1:db:2b:d7:2a:44:d0:71:33:34:61:ba:d3:dc:
f5:b1:db:59:cb:f2:9f:5c:7a:c6:79:aa:ac:59:02:
de:7e:89:a2:f2:52:76:a0:61:61:e1:ab:a4:57:ff:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B1:A7:8D:20:FE:70:89:02:7E:C9:A3:82:E7:02:CA:E8:28:DD:CC
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/_7GnjSD-cIkCfsmjgucCyugo3cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:1b:0e:e5:ae:65:05:c1:7a:82:95:dd:47:2f:c8:ec:3a:41:
07:7a:4d:5b:15:81:1d:2f:d8:8f:0e:63:4f:e6:94:5c:9a:ee:
35:06:e0:10:05:4c:e6:ce:9e:51:9d:45:a2:79:0d:bc:e4:e4:
b9:fc:81:9b:d9:4b:b0:b6:7d:71:09:35:ba:db:ab:6a:30:ba:
70:5f:7e:b3:08:3a:9a:17:9b:97:cc:76:64:dd:e3:13:db:f8:
c5:1a:7f:45:0e:48:1d:06:2e:9f:0f:4b:28:d6:72:1d:02:ce:
ad:12:51:3b:6f:c9:85:6e:61:da:13:2c:04:e7:64:f5:a0:c2:
d5:a5:9d:6f:9f:7d:6e:72:c5:d6:06:2a:c0:60:02:cb:29:6c:
83:17:14:91:11:2c:00:78:4c:50:f5:a8:02:f2:61:d9:86:aa:
a9:55:9e:5b:d2:00:e3:e2:f9:4b:73:7a:6b:af:08:92:21:67:
0c:3b:ab:a3:52:dd:cb:b4:36:6d:fb:ea:aa:88:3d:bf:a3:f6:
8f:e3:8a:51:9b:46:a5:70:d5:61:a6:8b:2e:d7:c2:67:48:93:
40:39:96:11:0e:f4:2d:08:47:be:75:e6:c8:82:f5:55:cc:4d:
d1:6f:c7:93:fa:28:e5:97:71:d0:14:94:b3:88:42:bd:0a:b7:
04:c3:b9:3b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE
MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yMTA5Mjkw
MjUyMjdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZGQjFBNzhEMjBGRTcw
ODkwMjdFQzlBMzgyRTcwMkNBRTgyOEREQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+cODyBeGtxUu/YBWoOu4PwzX2PQm5sr37wImI76MCE32+0b2p
6gh+PMgvBaIxPawOX0ihF1uef34KtCwmjvNvgc3o45kADY0yh06LP3jTqB+KtOjd
x8QkRlzd+HmcZhusuyZaVMJ968VWOL3RqSFj7Q97jQNoQBj/ZpZ0o15WL+DTluLU
eHE+s8SfJQcWn4H3j/9hpFI03Tr2kSMho00dWOYSVnSrleLjEjUEUZD0RYv9suU4
LvHZoC0jg2BoPRm0G2ci/YBAJI+LmIN7ONeW9ZSh2yvXKkTQcTM0YbrT3PWx21nL
8p9cesZ5qqxZAt5+iaLyUnagYWHhq6RX/+R9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/7GnjSD+cIkCfsmjgucCyugo3cwwHwYDVR0jBBgwFoAUXNEK1bakd108UE1m
EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF
Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvXzdHbmpTRC1jSWtDZnNt
amd1Y0N5dWdvM2N3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Amd31DANBgkqhkiG9w0BAQsFAAOCAQEACxsO5a5lBcF6gpXdRy/I7DpBB3pNWxWB
HS/Yjw5jT+aUXJruNQbgEAVM5s6eUZ1FonkNvOTkufyBm9lLsLZ9cQk1uturajC6
cF9+swg6mhebl8x2ZN3jE9v4xRp/RQ5IHQYunw9LKNZyHQLOrRJRO2/JhW5h2hMs
BOdk9aDC1aWdb599bnLF1gYqwGACyylsgxcUkREsAHhMUPWoAvJh2YaqqVWeW9IA
4+L5S3N6a68IkiFnDDuro1Ldy7Q2bfvqqog9v6P2j+OKUZtGpXDVYaaLLtfCZ0iT
QDmWEQ70LQhHvnXmyIL1VcxN0W/Hk/oo5Zdx0BSUs4hCvQq3BMO5Ow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org