Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/I_KToG6cjCx3n7jLbZNHZ1gn8UI.roa
File: I_KToG6cjCx3n7jLbZNHZ1gn8UI.roa (raw, json)
Hash identifier: OEbdOm0c4soQ9LVubnmbo38QYTlgDHzCkDByj21aulY=
Subject key identifier: 23:F2:93:A0:6E:9C:8C:2C:77:9F:B8:CB:6D:93:47:67:58:27:F1:42
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 077F
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/I_KToG6cjCx3n7jLbZNHZ1gn8UI.roa
Signing time: Tue 29 Sep 2020 10:02:54 +0000
ROA not before: Tue 29 Sep 2020 10:02:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131662
IP address blocks: 103.123.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Sep 29 10:02:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=23F293A06E9C8C2C779FB8CB6D9347675827F142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:6e:72:19:72:ca:8f:0b:1c:49:0c:ed:18:
30:10:74:bb:16:3e:32:46:c2:9f:ce:f6:58:25:3e:
d9:c4:1a:df:bb:81:87:86:3b:e3:6b:98:0e:bd:26:
d9:16:67:c9:b0:48:85:c9:e8:dd:2e:d3:f4:11:58:
0a:c1:96:44:d3:b6:2a:43:19:19:80:13:85:af:cf:
d5:1d:e4:54:9a:6b:4f:20:c8:c2:ac:2e:10:01:61:
6e:72:21:d8:8d:49:9e:80:e1:9d:dd:23:ba:26:94:
e8:11:8e:9a:1c:65:80:3a:90:32:c2:e0:d4:d5:92:
da:3a:18:c5:e2:5f:36:c5:97:19:ac:b0:e9:45:54:
c3:50:13:23:b1:9f:9d:cc:45:9e:92:0c:51:3e:b5:
14:31:29:71:e0:8e:1b:d6:a6:83:4f:84:08:ea:f7:
ad:7f:f1:af:47:6a:1d:29:17:a7:67:9d:a1:65:4e:
1e:d1:4a:87:e3:6e:ae:ae:ab:c5:b9:43:98:13:fd:
7e:a5:37:9d:ff:05:66:57:a6:b7:0b:b2:6a:b4:ee:
a1:44:b9:47:64:d0:df:96:df:77:e4:0f:f4:f5:c4:
2d:ae:89:78:fa:18:ca:1f:dc:82:30:fd:52:33:0b:
c3:ff:fd:dc:d0:bb:5d:b0:50:1f:d7:50:18:0c:a2:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:93:A0:6E:9C:8C:2C:77:9F:B8:CB:6D:93:47:67:58:27:F1:42
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/I_KToG6cjCx3n7jLbZNHZ1gn8UI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
Signature Algorithm: sha256WithRSAEncryption
28:f1:74:7e:8a:70:74:4f:7d:e0:68:6e:b5:20:47:b7:35:7b:
41:28:ff:7a:b8:72:ad:33:bc:74:92:18:51:80:f9:63:e3:03:
f0:e2:7d:33:35:18:a5:cb:0f:6d:1a:76:ac:46:2e:8e:a6:4b:
45:30:39:3d:4c:6d:6a:18:4b:40:42:e8:be:5e:21:11:0a:e3:
d0:70:67:db:9e:50:75:d0:c9:aa:3d:b5:e7:93:82:30:24:2f:
ae:e4:3c:9e:65:76:11:c2:08:04:d0:79:6a:86:a3:0b:e7:93:
89:e5:d0:cf:7e:cf:7b:20:86:d6:cc:82:92:92:1d:64:d3:cc:
2e:1e:7c:0f:f5:5d:ad:2f:22:d0:ca:4c:8e:7b:8e:5f:87:07:
33:c4:b2:c7:5b:69:ec:9b:e1:d2:4e:27:43:68:33:34:4e:3d:
fe:16:34:ad:40:01:e8:e6:a4:bb:8f:6f:36:ed:96:f8:5c:38:
04:d6:6a:66:28:01:10:12:58:ef:4f:a6:f6:ab:6b:74:56:61:
16:cd:e8:ac:7e:03:52:8e:f7:25:ee:d5:ee:69:88:e5:a5:51:
ed:75:85:ad:6f:81:26:e0:9f:6d:ec:e9:f3:25:38:17:c9:8c:
53:39:67:c5:69:89:9c:a0:ff:26:f5:99:f1:cc:4c:b6:12:d5:
a8:a2:93:72
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF
RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yMDA5Mjkx
MDAyNTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDIzRjI5M0EwNkU5QzhD
MkM3NzlGQjhDQjZEOTM0NzY3NTgyN0YxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtVW5yGXLKjwscSQztGDAQdLsWPjJGwp/O9lglPtnEGt+7gYeG
O+NrmA69JtkWZ8mwSIXJ6N0u0/QRWArBlkTTtipDGRmAE4Wvz9Ud5FSaa08gyMKs
LhABYW5yIdiNSZ6A4Z3dI7omlOgRjpocZYA6kDLC4NTVkto6GMXiXzbFlxmssOlF
VMNQEyOxn53MRZ6SDFE+tRQxKXHgjhvWpoNPhAjq961/8a9Hah0pF6dnnaFlTh7R
Sofjbq6uq8W5Q5gT/X6lN53/BWZXprcLsmq07qFEuUdk0N+W33fkD/T1xC2uiXj6
GMof3IIw/VIzC8P//dzQu12wUB/XUBgMoiZ3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUI/KToG6cjCx3n7jLbZNHZ1gn8UIwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc
TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ
Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vSV9LVG9HNmNqQ3gzbjdq
TGJaTkhaMWduOFVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Amd7gDANBgkqhkiG9w0BAQsFAAOCAQEAKPF0fopwdE994GhutSBHtzV7QSj/erhy
rTO8dJIYUYD5Y+MD8OJ9MzUYpcsPbRp2rEYujqZLRTA5PUxtahhLQELovl4hEQrj
0HBn255QddDJqj2155OCMCQvruQ8nmV2EcIIBNB5aoajC+eTieXQz37PeyCG1syC
kpIdZNPMLh58D/VdrS8i0MpMjnuOX4cHM8Syx1tp7Jvh0k4nQ2gzNE49/hY0rUAB
6Oaku49vNu2W+Fw4BNZqZigBEBJY70+m9qtrdFZhFs3orH4DUo73Je7V7mmI5aVR
7XWFrW+BJuCfbezp8yU4F8mMUzlnxWmJnKD/JvWZ8cxMthLVqKKTcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org