Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/ffOj1-uMss8ajQTbIrdOeLfiyPU.roa
File: ffOj1-uMss8ajQTbIrdOeLfiyPU.roa (raw, json)
Hash identifier: Yxmn+KfSjyvxPcfaHD87nVFCcVFfqWtSxYYi6+qYZTU=
Subject key identifier: 7D:F3:A3:D7:EB:8C:B2:CF:1A:8D:04:DB:22:B7:4E:78:B7:E2:C8:F5
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 08E9
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/ffOj1-uMss8ajQTbIrdOeLfiyPU.roa
Signing time: Sun 07 Feb 2021 12:40:30 +0000
ROA not before: Sun 07 Feb 2021 12:40:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 116.50.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 7 12:40:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7DF3A3D7EB8CB2CF1A8D04DB22B74E78B7E2C8F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:c1:82:eb:3c:39:e7:4b:cf:02:b8:a0:1f:
41:c3:fb:65:9b:c4:c5:4b:9a:6b:cd:dc:81:e7:af:
b5:9a:3e:89:d8:d6:e3:6d:24:03:b1:79:d0:ec:ed:
28:75:0d:44:b9:81:3c:26:21:b5:c6:29:f4:36:cf:
23:45:62:05:23:0e:3a:fe:e8:29:64:7f:04:ee:bc:
09:fd:c0:76:9c:4e:bb:29:4d:1c:ba:66:4c:60:42:
a4:6b:60:10:54:2b:c2:02:7f:f0:fe:f2:76:10:10:
3c:4e:fa:77:3d:b0:d4:da:f1:2b:1f:d4:22:34:8d:
ec:d8:b7:82:f8:d7:f4:db:94:2b:25:10:d8:8a:e1:
bb:3d:e4:1b:55:13:0b:50:31:3b:bf:1c:27:2c:3b:
5e:5f:a4:31:8e:e6:41:20:9d:b1:a5:8c:c5:90:3b:
a4:c4:25:d8:4f:db:e8:a7:40:35:bd:d6:d5:9f:85:
85:4b:2c:c8:22:1a:80:10:cf:ad:c7:0b:3c:86:70:
ce:91:bd:87:6b:c0:1e:14:e6:8d:51:cc:f9:9b:c3:
29:5c:13:07:d3:7a:56:01:9a:a7:7a:14:97:91:c9:
bd:1c:82:b9:9e:1c:65:b2:9e:bb:5f:08:d8:83:08:
08:5d:0f:6f:86:5f:ec:86:b2:f9:b6:29:ef:bd:08:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:A3:D7:EB:8C:B2:CF:1A:8D:04:DB:22:B7:4E:78:B7:E2:C8:F5
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/ffOj1-uMss8ajQTbIrdOeLfiyPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.50.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:5f:2c:9e:50:63:c7:ec:77:8d:66:c8:b4:ac:0b:ec:aa:71:
07:59:5d:ff:05:00:ec:12:f7:aa:ca:53:9b:0c:2a:90:7c:30:
a7:53:27:1b:88:7d:52:f7:b0:82:92:e1:05:de:c2:77:fe:69:
e0:e4:6b:55:2f:1f:e0:35:0e:7c:7f:1b:e7:9d:88:6a:93:68:
6d:7d:e2:a3:b6:98:a1:c2:ed:de:d8:6f:6d:3a:d1:f6:bb:ec:
2a:ca:9d:5f:fd:db:5f:21:d5:b9:97:9b:0c:ca:3a:92:eb:09:
01:03:ce:8d:14:a4:bb:f4:c6:7a:d8:da:28:a0:a6:c3:6f:3a:
58:fe:2a:33:c9:86:4f:98:14:88:d7:e1:f4:57:c0:60:7c:8e:
d5:23:02:b3:e8:bb:4a:c2:1c:2c:08:ea:79:3e:97:9b:22:48:
84:71:20:29:16:c8:59:d5:0b:13:f9:11:bd:ba:59:eb:e3:19:
de:31:d7:a7:08:0a:3c:8c:07:9d:a5:95:05:8f:47:06:5e:ad:
1f:a6:c1:c9:0f:0b:0c:4b:63:04:cc:89:ab:8f:5c:e8:45:09:
9e:de:ab:7e:2d:60:5d:bc:b3:c4:a7:8a:62:15:c0:d4:f6:47:
dc:f2:2f:9f:a7:69:12:bc:8d:1d:74:7f:c4:0f:e7:1b:e6:70:
ca:85:fb:3f
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3
ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yMTAyMDcx
MjQwMzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdERjNBM0Q3RUI4Q0Iy
Q0YxQThEMDREQjIyQjc0RTc4QjdFMkM4RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC02cGC6zw550vPArigH0HD+2WbxMVLmmvN3IHnr7WaPonY1uNt
JAOxedDs7Sh1DUS5gTwmIbXGKfQ2zyNFYgUjDjr+6ClkfwTuvAn9wHacTrspTRy6
ZkxgQqRrYBBUK8ICf/D+8nYQEDxO+nc9sNTa8Ssf1CI0jezYt4L41/TblCslENiK
4bs95BtVEwtQMTu/HCcsO15fpDGO5kEgnbGljMWQO6TEJdhP2+inQDW91tWfhYVL
LMgiGoAQz63HCzyGcM6RvYdrwB4U5o1RzPmbwylcEwfTelYBmqd6FJeRyb0cgrme
HGWynrtfCNiDCAhdD2+GX+yGsvm2Ke+9CNVZAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUffOj1+uMss8ajQTbIrdOeLfiyPUwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x
k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP
TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9mZk9qMS11TXNzOGFq
UVRiSXJkT2VMZml5UFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQEdDIgMA0GCSqGSIb3DQEBCwUAA4IBAQCdXyyeUGPH7HeNZsi0rAvsqnEHWV3/
BQDsEveqylObDCqQfDCnUycbiH1S97CCkuEF3sJ3/mng5GtVLx/gNQ58fxvnnYhq
k2htfeKjtpihwu3e2G9tOtH2u+wqyp1f/dtfIdW5l5sMyjqS6wkBA86NFKS79MZ6
2NoooKbDbzpY/iozyYZPmBSI1+H0V8BgfI7VIwKz6LtKwhwsCOp5PpebIkiEcSAp
FshZ1QsT+RG9ulnr4xneMdenCAo8jAedpZUFj0cGXq0fpsHJDwsMS2MEzImrj1zo
RQme3qt+LWBdvLPEp4piFcDU9kfc8i+fp2kSvI0ddH/ED+cb5nDKhfs/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org