Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IGyiegwPVi1g4jQHKHVEjmk4alM.roa
File: IGyiegwPVi1g4jQHKHVEjmk4alM.roa (raw, json)
Hash identifier: xearJigNXoOSUqaVHuHYP+3IP8bNnhvE62qh7OZ9iDw=
Subject key identifier: 20:6C:A2:7A:0C:0F:56:2D:60:E2:34:07:28:75:44:8E:69:38:6A:53
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0A51
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IGyiegwPVi1g4jQHKHVEjmk4alM.roa
Signing time: Thu 15 Sep 2022 02:50:17 +0000
ROA not before: Thu 15 Sep 2022 02:50:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.58.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Sep 15 02:50:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=206CA27A0C0F562D60E234072875448E69386A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:7d:2d:78:87:0b:fd:e3:c4:ff:45:f1:d8:
ef:61:52:27:d0:1d:ba:72:87:08:ba:0e:bd:b3:b3:
48:fb:2c:ca:cf:7f:91:c1:c0:ff:0d:76:13:40:b8:
c2:a0:c6:60:5e:a9:e2:40:73:cf:1f:d6:1a:20:12:
5c:bc:cb:80:29:7f:b1:45:ac:45:fe:9f:61:5a:7c:
2f:7b:14:e9:19:7a:fc:a8:cb:31:8c:b6:f0:df:89:
0f:5a:a9:d4:44:78:30:aa:e0:c5:e1:50:1d:df:5a:
66:52:ef:ff:25:53:e3:22:73:ff:a8:c8:a1:1a:52:
ad:32:d7:a8:b7:df:f6:22:82:2a:96:72:b0:7d:7f:
1c:f2:3d:58:99:d4:b1:df:e3:de:78:b4:5a:1c:ff:
a0:83:f5:cb:21:b0:7d:4f:3b:dd:78:2e:a6:2a:fb:
87:82:16:a9:76:0c:f1:b7:1f:1d:f5:52:93:d6:09:
79:a6:26:7a:1a:d1:07:94:ff:4c:80:ac:4d:59:08:
d5:d4:26:d1:ab:2b:33:f2:6e:3d:8e:cb:73:68:1d:
c9:21:27:ad:63:e8:45:58:90:40:81:59:66:02:f5:
88:ab:63:5f:44:e6:9d:be:bc:c8:a8:e3:58:63:72:
02:ba:25:ed:ac:52:58:07:be:17:70:ed:26:cb:28:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:A2:7A:0C:0F:56:2D:60:E2:34:07:28:75:44:8E:69:38:6A:53
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IGyiegwPVi1g4jQHKHVEjmk4alM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:de:aa:fe:75:71:ef:9a:7b:d1:ab:7d:ee:b8:e0:5d:e5:53:
6f:26:3b:5c:58:02:b4:a6:65:b3:b9:29:61:97:6b:a4:17:a4:
d9:fc:dd:0e:c3:58:e1:3e:6e:cd:90:f3:08:9e:58:0b:a7:f1:
fa:e9:f2:b7:42:74:5e:e0:6a:e0:30:9a:4f:27:37:39:05:9f:
5f:e7:00:08:32:8a:09:8d:29:ce:94:6e:3b:73:39:10:4f:22:
50:30:3a:d7:c4:37:c8:20:de:37:b0:9e:4d:53:50:a8:bc:18:
6d:d8:2c:96:fc:19:a6:74:5a:2e:6c:0d:91:c3:54:0a:95:0a:
02:41:e2:9f:44:4e:7e:a6:81:8a:63:ae:af:34:c2:3a:ea:81:
75:a0:d6:e1:ec:15:76:a6:58:f6:c3:27:1f:a5:03:6e:c2:f0:
04:40:81:88:ac:1d:70:60:fd:74:ad:41:da:01:a8:89:49:ff:
68:08:30:ee:e4:25:54:83:bc:cf:76:59:97:69:f0:f0:bc:53:
43:43:fc:9a:6e:7d:61:fc:1a:c9:b9:50:06:f7:ba:af:28:e4:
5c:5e:35:49:10:a7:31:a7:95:a4:0d:8d:8a:76:bc:67:98:e2:
97:bb:b9:15:5b:ec:9f:34:a7:57:5f:7f:1b:b4:49:49:a1:e9:
7a:85:6e:63
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMjA5MTUw
MjUwMTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIwNkNBMjdBMEMwRjU2
MkQ2MEUyMzQwNzI4NzU0NDhFNjkzODZBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwVn0teIcL/ePE/0Xx2O9hUifQHbpyhwi6Dr2zs0j7LMrPf5HB
wP8NdhNAuMKgxmBeqeJAc88f1hogEly8y4Apf7FFrEX+n2FafC97FOkZevyoyzGM
tvDfiQ9aqdREeDCq4MXhUB3fWmZS7/8lU+Mic/+oyKEaUq0y16i33/YigiqWcrB9
fxzyPViZ1LHf4954tFoc/6CD9cshsH1PO914LqYq+4eCFql2DPG3Hx31UpPWCXmm
Jnoa0QeU/0yArE1ZCNXUJtGrKzPybj2Oy3NoHckhJ61j6EVYkECBWWYC9YirY19E
5p2+vMio41hjcgK6Je2sUlgHvhdw7SbLKOP9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUIGyiegwPVi1g4jQHKHVEjmk4alMwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvSUd5aWVnd1BWaTFnNGpR
SEtIVkVqbWs0YWxNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD06MDANBgkqhkiG9w0BAQsFAAOCAQEAyt6q/nVx75p70at97rjgXeVTbyY7XFgC
tKZls7kpYZdrpBek2fzdDsNY4T5uzZDzCJ5YC6fx+unyt0J0XuBq4DCaTyc3OQWf
X+cACDKKCY0pzpRuO3M5EE8iUDA618Q3yCDeN7CeTVNQqLwYbdgslvwZpnRaLmwN
kcNUCpUKAkHin0ROfqaBimOurzTCOuqBdaDW4ewVdqZY9sMnH6UDbsLwBECBiKwd
cGD9dK1B2gGoiUn/aAgw7uQlVIO8z3ZZl2nw8LxTQ0P8mm59YfwayblQBve6ryjk
XF41SRCnMaeVpA2Nina8Z5jil7u5FVvsnzSnV19/G7RJSaHpeoVuYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org