Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/VpxbMxQCRBnJZswAkW3pK2uMXpc.roa
File: VpxbMxQCRBnJZswAkW3pK2uMXpc.roa (raw, json)
Hash identifier: Svrt9LvwqiKguH15wp2Pw+2DwH5+sjlyZrKxCfJPvS8=
Subject key identifier: 56:9C:5B:33:14:02:44:19:C9:66:CC:00:91:6D:E9:2B:6B:8C:5E:97
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 08BB
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/VpxbMxQCRBnJZswAkW3pK2uMXpc.roa
Signing time: Sun 07 Feb 2021 12:35:01 +0000
ROA not before: Sun 07 Feb 2021 12:35:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17416
IP address blocks: 112.213.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Feb 7 12:35:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=569C5B3314024419C966CC00916DE92B6B8C5E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:8a:02:ec:f0:eb:b5:32:a3:65:63:59:74:
11:10:12:01:77:49:90:df:7d:a7:56:16:4c:3c:cf:
23:00:7d:a4:7e:16:a7:8b:f2:77:de:93:4c:22:ab:
a0:da:9a:7b:39:79:3d:26:02:e3:c7:52:68:c6:e2:
a2:3c:21:0c:8e:57:b4:03:19:c3:1f:f6:e4:21:15:
9d:30:40:03:55:e0:cf:07:d4:91:07:e6:ba:01:43:
d2:5e:fb:a3:da:6b:18:f6:c2:66:9b:a8:cf:1a:b1:
13:df:76:2a:bf:74:67:aa:56:4b:73:b9:6f:e6:ed:
44:a4:c7:0f:bb:bc:7c:0e:e6:51:a8:97:f5:f2:e3:
ae:f4:67:de:7b:dc:5d:36:c4:f4:b2:76:b6:ad:92:
c1:4d:13:10:fb:a4:29:97:02:08:1e:3e:98:df:1b:
1f:d7:11:40:14:f1:e5:31:19:d1:34:45:a7:7f:4a:
eb:40:3f:d3:b0:e7:eb:69:bb:f8:af:ac:11:e2:66:
1f:f2:a7:03:fb:b6:54:20:71:c7:46:e6:51:0b:2e:
e8:ec:6c:91:c9:a9:a5:52:fa:2f:dc:9e:6c:5c:31:
be:4c:35:cb:b0:b6:02:41:05:f8:15:a2:3a:44:c2:
c0:43:99:46:d2:e0:63:eb:5b:f4:d3:2b:c7:27:6e:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9C:5B:33:14:02:44:19:C9:66:CC:00:91:6D:E9:2B:6B:8C:5E:97
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/VpxbMxQCRBnJZswAkW3pK2uMXpc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.213.48.0/20
Signature Algorithm: sha256WithRSAEncryption
31:1d:48:89:74:f0:38:47:c1:23:12:c9:8c:48:17:3c:14:ae:
03:e3:9a:a2:70:09:4e:db:d6:7d:39:74:54:06:e3:f2:31:33:
3b:7b:62:5f:fe:e2:13:69:89:ec:61:2e:eb:6d:87:27:24:22:
46:58:d2:36:f5:03:a4:64:f5:d8:ba:21:f6:56:1e:1a:f6:90:
6a:58:27:c3:76:05:87:60:35:bd:12:f1:5e:63:9a:f8:be:09:
b2:06:00:aa:28:ef:48:a1:c1:59:50:10:8c:9a:39:ae:0d:de:
81:cd:42:95:65:03:db:ca:ce:1c:2b:95:ff:dc:92:ed:49:be:
a9:da:e7:f4:9b:d2:fe:fc:cf:29:84:9f:2d:24:c8:6a:d3:f9:
fb:83:ef:be:aa:b6:90:c1:1e:74:db:3e:a7:ab:d2:b1:47:7a:
4e:f7:8b:9b:cd:ed:19:d4:4c:af:8b:5a:53:e1:59:3c:d5:ab:
66:c2:e0:cc:4f:00:3f:b1:1c:ac:be:e3:56:5c:06:e2:1a:36:
e7:3a:a3:81:90:1b:af:22:cb:23:c6:c9:c9:5b:62:90:f0:da:
f1:f0:8e:a3:24:c2:30:1e:95:e6:5d:02:e2:56:51:8a:4f:e9:
3a:6f:a5:31:ad:36:4a:e6:73:8b:92:34:da:b0:05:a4:21:be:
fa:23:e9:a1
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMTAyMDcx
MjM1MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU2OUM1QjMzMTQwMjQ0
MTlDOTY2Q0MwMDkxNkRFOTJCNkI4QzVFOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZeIoC7PDrtTKjZWNZdBEQEgF3SZDffadWFkw8zyMAfaR+FqeL
8nfek0wiq6Damns5eT0mAuPHUmjG4qI8IQyOV7QDGcMf9uQhFZ0wQANV4M8H1JEH
5roBQ9Je+6Paaxj2wmabqM8asRPfdiq/dGeqVktzuW/m7USkxw+7vHwO5lGol/Xy
4670Z9573F02xPSydratksFNExD7pCmXAggePpjfGx/XEUAU8eUxGdE0Rad/SutA
P9Ow5+tpu/ivrBHiZh/ypwP7tlQgccdG5lELLujsbJHJqaVS+i/cnmxcMb5MNcuw
tgJBBfgVojpEwsBDmUbS4GPrW/TTK8cnbh5jAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUVpxbMxQCRBnJZswAkW3pK2uMXpcwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU
gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv
WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9WcHhiTXhRQ1JCbkpac3dBa1cz
cEsydU1YcGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEcNUw
MA0GCSqGSIb3DQEBCwUAA4IBAQAxHUiJdPA4R8EjEsmMSBc8FK4D45qicAlO29Z9
OXRUBuPyMTM7e2Jf/uITaYnsYS7rbYcnJCJGWNI29QOkZPXYuiH2Vh4a9pBqWCfD
dgWHYDW9EvFeY5r4vgmyBgCqKO9IocFZUBCMmjmuDd6BzUKVZQPbys4cK5X/3JLt
Sb6p2uf0m9L+/M8phJ8tJMhq0/n7g+++qraQwR502z6nq9KxR3pO94ubze0Z1Eyv
i1pT4Vk81atmwuDMTwA/sRysvuNWXAbiGjbnOqOBkBuvIssjxsnJW2KQ8Nrx8I6j
JMIwHpXmXQLiVlGKT+k6b6UxrTZK5nOLkjTasAWkIb76I+mh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-fra.rpki-client.org