Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6yiF9E1GyN3JtC0hk-N6DI0fpiM.roa
File: 6yiF9E1GyN3JtC0hk-N6DI0fpiM.roa (raw, json)
Hash identifier: x2BfELn6+SakbaN0PMFmolNNkOW6CrAJVWrQWIucf+o=
Subject key identifier: EB:28:85:F4:4D:46:C8:DD:C9:B4:2D:21:93:E3:7A:0C:8D:1F:A6:23
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 099C
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6yiF9E1GyN3JtC0hk-N6DI0fpiM.roa
Signing time: Wed 29 Sep 2021 02:36:51 +0000
ROA not before: Wed 29 Sep 2021 02:36:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 61.65.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460 (0x99c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 29 02:36:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EB2885F44D46C8DDC9B42D2193E37A0C8D1FA623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:ef:32:c8:28:f1:9b:74:72:c4:35:10:21:
f4:e5:a4:76:47:47:d6:88:41:c4:c1:92:e0:8f:aa:
9a:97:d5:2f:78:71:70:ee:1c:7c:04:0b:63:15:60:
ae:cc:09:cf:c8:31:76:57:67:ab:bf:13:29:f7:ba:
3d:59:5e:40:70:53:46:f1:98:6d:57:9c:a7:2b:10:
b7:c8:85:7f:04:82:8c:0c:3d:a1:45:16:23:b6:23:
18:55:07:2f:ad:af:42:ac:50:05:de:62:8f:27:a2:
d5:0d:28:e9:4c:3e:82:1a:b5:ef:d5:ee:75:09:59:
25:70:62:7c:83:be:77:91:00:29:0a:1e:45:39:07:
77:f0:fb:01:c6:f5:25:a2:91:d4:af:cc:b6:5e:7a:
44:91:76:c6:7d:b7:bf:36:62:ed:c9:b6:e4:f7:06:
9a:60:f6:a9:65:15:9e:03:09:fb:b7:24:ce:3e:ca:
05:75:86:00:3d:22:43:27:4b:f1:06:bc:f3:08:c4:
7f:72:ab:e4:ab:00:dc:8a:fd:80:49:2a:b0:b6:87:
e7:40:7b:34:be:29:62:45:b2:e5:ab:f4:10:3a:b6:
e4:9e:84:19:3e:07:7e:ea:a7:5b:15:56:1c:62:dd:
61:75:7a:8f:a5:8b:2a:ea:78:65:0b:84:0d:4d:5c:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:85:F4:4D:46:C8:DD:C9:B4:2D:21:93:E3:7A:0C:8D:1F:A6:23
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6yiF9E1GyN3JtC0hk-N6DI0fpiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:38:cf:9f:28:19:2e:39:f1:83:3d:f8:47:a1:1a:3d:df:41:
a9:5e:72:81:14:87:c5:0c:ad:63:a2:cf:98:fb:f7:44:dd:8a:
e2:56:82:f5:38:56:f0:3f:db:a9:8f:53:90:6e:4a:8a:6a:ed:
b2:42:f3:49:b0:ed:f8:c5:cd:cb:a2:e3:b2:14:d0:42:89:a7:
50:8c:73:db:01:16:42:69:68:a2:25:d7:cf:31:ea:02:ba:47:
9a:69:86:fd:95:23:56:1a:1f:e6:62:fc:e2:54:ca:a8:17:1b:
20:e7:90:b3:83:61:9d:60:1b:a3:5e:ef:c6:ac:60:f3:d8:84:
9c:e3:24:5f:82:43:8a:a2:da:9b:01:d7:0c:3a:99:f4:a9:21:
9b:00:e2:16:16:a2:8a:51:e8:1b:1a:62:15:f9:36:92:3e:0a:
5e:c8:ac:e1:fd:f4:6a:4e:97:ff:ff:68:f8:3f:c1:a5:a5:c2:
7d:62:80:20:db:29:73:0d:ab:e7:b9:04:0b:a3:79:39:fa:56:
8c:e8:70:82:26:c6:e4:f1:3c:f1:b7:2e:7a:18:c6:29:0b:e3:
d3:32:94:b1:15:31:1a:e0:36:e1:da:ea:3d:74:31:fb:f8:1a:
75:95:4c:75:66:6b:e4:53:88:72:f0:9f:f8:05:ad:a8:ff:38:
eb:f5:99:f4
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3
ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yMTA5Mjkw
MjM2NTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVCMjg4NUY0NEQ0NkM4
RERDOUI0MkQyMTkzRTM3QTBDOEQxRkE2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcFe8yyCjxm3RyxDUQIfTlpHZHR9aIQcTBkuCPqpqX1S94cXDu
HHwEC2MVYK7MCc/IMXZXZ6u/Eyn3uj1ZXkBwU0bxmG1XnKcrELfIhX8EgowMPaFF
FiO2IxhVBy+tr0KsUAXeYo8notUNKOlMPoIate/V7nUJWSVwYnyDvneRACkKHkU5
B3fw+wHG9SWikdSvzLZeekSRdsZ9t782Yu3JtuT3Bppg9qllFZ4DCfu3JM4+ygV1
hgA9IkMnS/EGvPMIxH9yq+SrANyK/YBJKrC2h+dAezS+KWJFsuWr9BA6tuSehBk+
B37qp1sVVhxi3WF1eo+liyrqeGULhA1NXFOTAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU6yiF9E1GyN3JtC0hk+N6DI0fpiMwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x
k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP
TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy82eWlGOUUxR3lOM0p0
QzBoay1ONkRJMGZwaU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFPUHgMA0GCSqGSIb3DQEBCwUAA4IBAQAPOM+fKBkuOfGDPfhHoRo930GpXnKB
FIfFDK1jos+Y+/dE3YriVoL1OFbwP9upj1OQbkqKau2yQvNJsO34xc3LouOyFNBC
iadQjHPbARZCaWiiJdfPMeoCukeaaYb9lSNWGh/mYvziVMqoFxsg55Czg2GdYBuj
Xu/GrGDz2ISc4yRfgkOKotqbAdcMOpn0qSGbAOIWFqKKUegbGmIV+TaSPgpeyKzh
/fRqTpf//2j4P8GlpcJ9YoAg2ylzDavnuQQLo3k5+laM6HCCJsbk8Tzxty56GMYp
C+PTMpSxFTEa4Dbh2uo9dDH7+Bp1lUx1ZmvkU4hy8J/4Ba2o/zjr9Zn0
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org