Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/uE0ZTfOAqL0tdPEf_QfCeik_io8.roa
File: uE0ZTfOAqL0tdPEf_QfCeik_io8.roa (raw, json)
Hash identifier: tiCg8t6eZqWOPJl7fCxduWQVL+kryCyxUQpIgCvRbhg=
Subject key identifier: B8:4D:19:4D:F3:80:A8:BD:2D:74:F1:1F:FD:07:C2:7A:29:3F:8A:8F
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 08B4
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/uE0ZTfOAqL0tdPEf_QfCeik_io8.roa
Signing time: Sun 07 Feb 2021 11:55:33 +0000
ROA not before: Sun 07 Feb 2021 11:55:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18411
IP address blocks: 119.30.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Feb 7 11:55:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B84D194DF380A8BD2D74F11FFD07C27A293F8A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:1a:4b:a2:60:c0:2b:a4:15:30:65:6c:19:
14:1d:c7:54:de:14:06:40:13:c4:14:5f:84:5f:9a:
10:dc:bb:5c:94:e9:32:a1:f2:86:68:68:fd:1f:fc:
ef:58:b8:ac:17:95:e1:a1:bd:5c:54:32:52:57:35:
6e:a8:a4:08:ad:1a:e3:4b:bf:bf:c0:71:28:0e:44:
d8:2c:76:8a:ca:58:54:94:af:c8:29:17:48:4c:3d:
b0:8e:47:3d:25:2a:53:7c:5d:6a:8b:95:77:d6:33:
b4:62:98:0e:2a:90:3f:28:83:bb:73:ab:5c:2f:4d:
0d:a2:43:60:d7:1f:10:1b:50:64:b3:ee:7d:9d:f7:
14:c8:d1:57:30:ef:1e:6a:f2:b8:ab:50:26:34:fe:
64:dd:50:4e:61:a7:be:66:0d:1d:3a:d5:e9:17:9a:
e9:89:8f:bc:f9:fe:ca:b0:a3:39:a1:c1:27:1e:f5:
22:25:79:a6:1b:d7:5a:e7:c0:25:94:cb:59:95:f2:
8b:47:a0:89:78:ed:ba:4b:e8:8f:c6:3b:fa:b1:17:
df:df:96:2f:68:5a:49:50:80:a9:65:49:3d:80:36:
c7:05:2d:39:ed:76:6e:ac:85:a1:2a:0c:90:53:a3:
7f:a7:aa:05:8b:f8:f2:ac:10:aa:1b:f2:39:05:71:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:19:4D:F3:80:A8:BD:2D:74:F1:1F:FD:07:C2:7A:29:3F:8A:8F
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/uE0ZTfOAqL0tdPEf_QfCeik_io8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.30.16.0/20
Signature Algorithm: sha256WithRSAEncryption
72:fe:24:0d:8b:3e:d3:40:a6:a3:0e:c1:ec:9b:06:84:f7:fe:
de:98:f4:68:2c:aa:45:61:12:1e:c4:65:d9:db:66:93:1d:a6:
96:8a:72:ef:35:10:89:d1:86:d2:eb:e0:ef:8b:cd:d2:cd:8a:
1d:14:90:8b:72:b7:d2:ab:fb:f9:7e:c2:c7:45:7c:69:e5:f8:
3d:4c:0a:96:f2:29:0b:7c:a7:14:6a:bc:67:20:d3:cb:a1:b6:
b7:62:b6:f4:fb:06:c6:99:01:1a:b7:e4:15:bb:f0:64:c2:cf:
2b:64:a4:74:8c:26:da:26:5c:b3:cf:d4:fa:ab:3e:86:13:d4:
60:8b:f7:00:6f:5b:41:cc:81:bd:e5:2d:6d:64:6d:d9:89:2e:
a3:29:ab:88:99:f2:9e:cc:53:29:cb:f8:bb:d8:fc:fa:54:b3:
5a:2a:38:6a:80:3c:56:bc:4c:d8:de:06:2a:43:42:c8:e2:0c:
f0:73:15:54:e8:e2:27:e6:86:e2:5f:53:6a:83:21:7b:1b:69:
4e:1c:be:74:66:7d:b5:1e:a9:15:a5:f1:96:7d:ef:2b:e8:b5:
0c:f5:6d:0f:6c:88:93:12:6b:f7:fb:90:6a:ee:d8:ae:3b:09:
4d:a4:de:06:ec:8e:9c:a8:d5:84:39:bb:10:a8:da:12:0c:06:
39:2d:22:46
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD
NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yMTAyMDcx
MTU1MzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI4NEQxOTRERjM4MEE4
QkQyRDc0RjExRkZEMDdDMjdBMjkzRjhBOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG0xpLomDAK6QVMGVsGRQdx1TeFAZAE8QUX4RfmhDcu1yU6TKh
8oZoaP0f/O9YuKwXleGhvVxUMlJXNW6opAitGuNLv7/AcSgORNgsdorKWFSUr8gp
F0hMPbCORz0lKlN8XWqLlXfWM7RimA4qkD8og7tzq1wvTQ2iQ2DXHxAbUGSz7n2d
9xTI0Vcw7x5q8rirUCY0/mTdUE5hp75mDR061ekXmumJj7z5/sqwozmhwSce9SIl
eaYb11rnwCWUy1mV8otHoIl47bpL6I/GO/qxF9/fli9oWklQgKllST2ANscFLTnt
dm6shaEqDJBTo3+nqgWL+PKsEKob8jkFcZ1PAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUuE0ZTfOAqL0tdPEf/QfCeik/io8wHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ
pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv
bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy91RTBaVGZPQXFMMHRkUEVmX1Fm
Q2Vpa19pbzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEdx4Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBy/iQNiz7TQKajDsHsmwaE9/7emPRoLKpFYRIe
xGXZ22aTHaaWinLvNRCJ0YbS6+Dvi83SzYodFJCLcrfSq/v5fsLHRXxp5fg9TAqW
8ikLfKcUarxnINPLoba3Yrb0+wbGmQEat+QVu/Bkws8rZKR0jCbaJlyzz9T6qz6G
E9Rgi/cAb1tBzIG95S1tZG3ZiS6jKauImfKezFMpy/i72Pz6VLNaKjhqgDxWvEzY
3gYqQ0LI4gzwcxVU6OIn5obiX1NqgyF7G2lOHL50Zn21HqkVpfGWfe8r6LUM9W0P
bIiTEmv3+5Bq7tiuOwlNpN4G7I6cqNWEObsQqNoSDAY5LSJG
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org