Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/rbFcrPZJ_fi-4Aus1uIejMAbASA.roa
File: rbFcrPZJ_fi-4Aus1uIejMAbASA.roa (raw, json)
Hash identifier: pDi8DPWIrChQTR7FiR8MZRPgNW3tVe1DTav0EPE2Qks=
Subject key identifier: AD:B1:5C:AC:F6:49:FD:F8:BE:E0:0B:AC:D6:E2:1E:8C:C0:1B:01:20
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0960
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/rbFcrPZJ_fi-4Aus1uIejMAbASA.roa
Signing time: Wed 29 Sep 2021 02:52:37 +0000
ROA not before: Wed 29 Sep 2021 02:52:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 103.117.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Sep 29 02:52:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=ADB15CACF649FDF8BEE00BACD6E21E8CC01B0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:a3:12:44:ac:0b:1b:81:b3:fc:9a:78:c4:
38:c7:a1:fc:42:1b:22:2b:3f:0d:81:f4:d2:eb:e8:
3d:ea:08:26:59:30:ee:93:57:cb:77:10:cb:2f:f6:
d6:5d:c8:18:1e:07:f7:88:67:1d:82:2e:68:88:0b:
17:ea:15:a3:9c:66:ea:e7:d4:db:1f:f2:4c:e4:88:
fb:72:4e:5e:9b:d7:ca:4b:a9:0b:21:0f:02:cc:c0:
97:99:67:09:0a:45:46:19:51:86:9a:75:aa:98:3d:
ce:21:e0:d4:0e:4d:75:80:c7:f8:74:89:dc:55:20:
d2:00:db:e1:41:70:06:7d:a8:d3:a7:bc:b6:c1:fc:
b6:2a:5c:83:c3:85:26:51:8e:92:40:cd:06:ca:85:
84:1b:03:93:2e:58:5e:df:83:bf:12:67:8c:49:b9:
ce:7d:93:20:e7:05:97:e3:0e:33:9d:ce:09:7c:c6:
f7:a6:97:b9:65:8e:77:72:d6:2f:37:2d:70:c9:d4:
55:4d:6e:49:b9:70:38:9f:92:31:5a:73:dc:4e:ef:
80:ef:5d:67:61:17:78:1d:33:7d:ab:fe:6e:9f:88:
bb:3a:a6:e6:5e:aa:87:82:66:7d:c7:23:aa:d0:73:
60:da:1b:64:eb:bf:44:3d:4c:c0:a0:54:5b:a5:f3:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:5C:AC:F6:49:FD:F8:BE:E0:0B:AC:D6:E2:1E:8C:C0:1B:01:20
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/rbFcrPZJ_fi-4Aus1uIejMAbASA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:34:99:11:ac:e7:50:59:9e:1c:ff:04:ba:f4:d1:d8:8d:3f:
33:dd:52:76:10:af:d3:32:be:63:9d:a9:b8:52:45:d0:ec:ae:
62:56:52:d9:6f:7e:ec:b1:8d:53:96:87:10:1c:46:71:59:dc:
e3:90:a7:54:46:4c:7a:22:84:32:33:89:44:ee:86:7c:cc:86:
03:99:17:cd:1c:b2:bd:a9:a9:49:9b:95:27:38:18:3b:61:7d:
a6:5c:9e:47:0b:d7:c8:cd:5c:cf:86:aa:e4:9f:b8:56:45:3b:
11:24:d4:6b:e4:89:11:53:22:af:b5:f1:88:2a:32:c1:ce:07:
1e:ab:1a:69:0e:b2:27:eb:3e:72:e2:d1:89:2e:98:31:47:5f:
9f:bb:6b:82:fa:99:ab:90:e4:d3:8c:4f:3b:ec:31:af:ae:de:
9a:c8:ce:ce:7b:f9:a4:0c:a7:62:ce:16:69:09:96:45:09:9f:
87:93:da:bd:ef:8d:dd:65:b6:69:45:ef:68:4c:20:ba:18:80:
43:e6:cb:17:3e:89:f5:5f:b2:4c:70:a2:39:00:c6:72:1c:d2:
a0:03:52:af:09:53:bd:30:5b:08:c4:90:a1:12:d8:cc:67:33:
04:9e:87:d1:e1:4d:68:17:11:47:8c:3f:c4:cf:76:fd:59:27:
7e:9a:dc:1d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMTA5Mjkw
MjUyMzdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEFEQjE1Q0FDRjY0OUZE
RjhCRUUwMEJBQ0Q2RTIxRThDQzAxQjAxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdgaMSRKwLG4Gz/Jp4xDjHofxCGyIrPw2B9NLr6D3qCCZZMO6T
V8t3EMsv9tZdyBgeB/eIZx2CLmiICxfqFaOcZurn1Nsf8kzkiPtyTl6b18pLqQsh
DwLMwJeZZwkKRUYZUYaadaqYPc4h4NQOTXWAx/h0idxVINIA2+FBcAZ9qNOnvLbB
/LYqXIPDhSZRjpJAzQbKhYQbA5MuWF7fg78SZ4xJuc59kyDnBZfjDjOdzgl8xvem
l7lljndy1i83LXDJ1FVNbkm5cDifkjFac9xO74DvXWdhF3gdM32r/m6fiLs6puZe
qoeCZn3HI6rQc2DaG2Trv0Q9TMCgVFul88p9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUrbFcrPZJ/fi+4Aus1uIejMAbASAwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvcmJGY3JQWkpfZmktNEF1
czF1SWVqTUFiQVNBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Amd1cDANBgkqhkiG9w0BAQsFAAOCAQEAojSZEaznUFmeHP8EuvTR2I0/M91SdhCv
0zK+Y52puFJF0OyuYlZS2W9+7LGNU5aHEBxGcVnc45CnVEZMeiKEMjOJRO6GfMyG
A5kXzRyyvampSZuVJzgYO2F9plyeRwvXyM1cz4aq5J+4VkU7ESTUa+SJEVMir7Xx
iCoywc4HHqsaaQ6yJ+s+cuLRiS6YMUdfn7trgvqZq5Dk04xPO+wxr67emsjOznv5
pAynYs4WaQmWRQmfh5Pave+N3WW2aUXvaEwguhiAQ+bLFz6J9V+yTHCiOQDGchzS
oANSrwlTvTBbCMSQoRLYzGczBJ6H0eFNaBcRR4w/xM92/VknfprcHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org