Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/oYiDUaDFPrzc9pmgawOMCKqldQY.roa
File: oYiDUaDFPrzc9pmgawOMCKqldQY.roa (raw, json)
Hash identifier: RP/5Zk7vO3CSoMDxI2ArdTu+/dYJZVVqhFrRKc48Trc=
Subject key identifier: A1:88:83:51:A0:C5:3E:BC:DC:F6:99:A0:6B:03:8C:08:AA:A5:75:06
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 08B7
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/oYiDUaDFPrzc9pmgawOMCKqldQY.roa
Signing time: Fri 11 Dec 2020 02:11:15 +0000
ROA not before: Fri 11 Dec 2020 02:11:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 150.107.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Dec 11 02:11:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A1888351A0C53EBCDCF699A06B038C08AAA57506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:40:9d:b0:24:d3:c4:ea:52:9f:6e:67:0d:
8b:6c:50:e7:c8:e7:f9:99:d6:14:84:3d:c7:75:09:
99:fa:49:a0:25:94:cf:f8:e4:cc:40:2b:ca:68:ce:
d6:7a:5a:9a:b9:62:cb:62:00:8a:08:0b:b4:e1:33:
da:5b:86:d7:27:ef:af:d4:60:8a:4f:a2:11:40:cb:
77:c6:43:0b:c0:35:3a:58:76:9a:66:32:63:2d:69:
74:3e:64:11:5f:81:42:b8:6a:70:b2:79:97:6e:de:
79:4f:31:18:7a:8e:2d:fa:6b:aa:2d:e6:02:85:f2:
8c:24:42:fc:e2:ec:da:79:a3:b7:f5:47:47:ec:e8:
26:66:1f:ca:ab:1f:e6:b3:e3:62:85:e5:6d:d6:0b:
b1:49:d3:36:f1:21:bd:66:b0:40:14:8d:6f:c0:33:
6b:3d:c7:29:08:e3:6f:0e:c7:28:94:64:b3:fd:48:
b3:5f:1d:09:b3:5b:33:30:28:65:bb:2f:cf:d9:46:
e9:c0:8e:f6:c4:65:79:e1:3a:88:ee:b5:01:ba:89:
7d:d1:4a:86:ed:0e:6b:6b:86:2b:db:a1:82:f4:14:
ef:0f:ed:24:4e:ba:07:1f:9c:7b:aa:a7:98:02:4c:
b1:51:39:c1:fe:35:f0:b9:f7:30:8d:e9:16:1d:88:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:83:51:A0:C5:3E:BC:DC:F6:99:A0:6B:03:8C:08:AA:A5:75:06
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/oYiDUaDFPrzc9pmgawOMCKqldQY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:a1:4d:54:ab:cc:7f:9f:0e:70:e3:ae:7f:df:2d:80:30:34:
2e:42:c8:5b:04:1b:43:f5:19:ed:eb:dd:2d:c9:62:11:f3:ec:
6f:4b:23:33:a0:b4:8d:98:10:7b:a3:12:b8:91:14:8f:03:60:
0b:c4:fb:84:be:cf:54:c8:24:c6:0f:65:6c:46:cf:c4:13:d5:
7c:43:19:21:ab:94:f0:c1:2a:b1:13:c2:00:ed:d8:a4:c7:69:
da:41:0d:c7:2c:91:0f:74:2a:7e:f3:9d:9e:41:b2:f4:00:83:
30:3f:8e:09:ef:a8:a8:6e:c5:0d:be:56:51:51:cc:e0:ed:10:
8a:da:2d:15:51:5c:a2:39:cf:fe:74:92:77:a7:d1:d4:79:af:
7f:02:fe:47:7c:29:5a:f8:5b:d5:6b:95:e2:fd:a0:98:83:1e:
7d:6d:f8:07:53:ab:78:19:73:1a:91:5e:1a:78:f7:c3:da:91:
5d:bd:1a:93:c6:ad:0a:23:a1:47:f0:e9:b1:47:ac:b9:3d:cc:
9c:29:4d:2b:80:91:14:a7:36:3d:b8:35:03:01:e1:8d:78:24:
fd:c9:8a:70:6e:97:0a:c3:66:26:9f:a5:05:02:75:ba:8a:8a:
aa:5b:36:2f:00:0b:a2:5c:3a:27:65:e9:9c:5a:85:f9:5e:e4:
87:ee:d7:c7
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3
ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yMDEyMTEw
MjExMTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEExODg4MzUxQTBDNTNF
QkNEQ0Y2OTlBMDZCMDM4QzA4QUFBNTc1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHO0CdsCTTxOpSn25nDYtsUOfI5/mZ1hSEPcd1CZn6SaAllM/4
5MxAK8poztZ6Wpq5YstiAIoIC7ThM9pbhtcn76/UYIpPohFAy3fGQwvANTpYdppm
MmMtaXQ+ZBFfgUK4anCyeZdu3nlPMRh6ji36a6ot5gKF8owkQvzi7Np5o7f1R0fs
6CZmH8qrH+az42KF5W3WC7FJ0zbxIb1msEAUjW/AM2s9xykI428OxyiUZLP9SLNf
HQmzWzMwKGW7L8/ZRunAjvbEZXnhOojutQG6iX3RSobtDmtrhivboYL0FO8P7SRO
ugcfnHuqp5gCTLFROcH+NfC59zCN6RYdiNepAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUoYiDUaDFPrzc9pmgawOMCKqldQYwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x
k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP
TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9vWWlEVWFERlByemM5
cG1nYXdPTUNLcWxkUVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQClms4MA0GCSqGSIb3DQEBCwUAA4IBAQC0oU1Uq8x/nw5w465/3y2AMDQuQshb
BBtD9Rnt690tyWIR8+xvSyMzoLSNmBB7oxK4kRSPA2ALxPuEvs9UyCTGD2VsRs/E
E9V8Qxkhq5TwwSqxE8IA7dikx2naQQ3HLJEPdCp+852eQbL0AIMwP44J76iobsUN
vlZRUczg7RCK2i0VUVyiOc/+dJJ3p9HUea9/Av5HfCla+FvVa5Xi/aCYgx59bfgH
U6t4GXMakV4aePfD2pFdvRqTxq0KI6FH8OmxR6y5PcycKU0rgJEUpzY9uDUDAeGN
eCT9yYpwbpcKw2Ymn6UFAnW6ioqqWzYvAAuiXDonZemcWoX5XuSH7tfH
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org