Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/8PXq8Yr1gcledbZbe8dLS3JCYdY.roa
File: 8PXq8Yr1gcledbZbe8dLS3JCYdY.roa (raw, json)
Hash identifier: 8D2E+66cfhhVTGbVyLRi8M9M1tYSHgXMpGjiv+OiSN0=
Subject key identifier: F0:F5:EA:F1:8A:F5:81:C9:5E:75:B6:5B:7B:C7:4B:4B:72:42:61:D6
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 062C
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/8PXq8Yr1gcledbZbe8dLS3JCYdY.roa
Signing time: Sun 07 Feb 2021 12:48:00 +0000
ROA not before: Sun 07 Feb 2021 12:48:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131671
IP address blocks: 103.146.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Feb 7 12:48:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F0F5EAF18AF581C95E75B65B7BC74B4B724261D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:d9:52:89:a5:3d:09:9e:e4:1f:1d:d8:61:
5b:a9:b6:b0:05:2c:4b:b3:82:d9:e3:18:04:fe:7f:
06:da:c2:30:68:d5:f1:e2:bd:b5:ba:65:a1:2b:17:
2c:68:9c:8a:ff:e9:19:bb:f9:24:97:8b:56:2e:0e:
df:66:9e:18:5e:96:0e:18:ff:62:d5:3f:e0:32:01:
df:4b:d8:70:4b:f7:d6:93:f6:5a:99:4c:5b:1e:e7:
df:2e:2c:1c:19:f2:16:d1:c6:f2:01:83:b7:bc:d0:
35:07:0d:fe:04:77:0e:73:ed:45:b7:fc:6e:72:76:
95:fd:a8:9f:73:20:7e:34:f1:44:a9:69:57:ad:65:
98:c4:9a:e0:4b:40:3f:6e:df:5a:19:49:85:4a:cc:
07:08:eb:48:24:b6:5a:ce:30:ac:d8:98:a0:91:c9:
64:0c:01:ec:dd:62:e2:89:ae:05:d8:f4:2d:06:1d:
ca:ea:25:51:06:37:28:e2:6c:33:d0:67:46:92:e1:
29:89:d7:78:21:86:99:ed:15:c5:d4:6e:6d:7d:9c:
ce:0a:fa:dc:ef:6e:ea:e1:1c:b6:3e:c0:13:8a:cb:
a0:72:97:cd:c8:d4:a3:8e:90:8c:c5:ab:de:e0:c5:
8b:b2:71:94:15:c8:85:b7:70:e5:20:7e:c9:60:53:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:EA:F1:8A:F5:81:C9:5E:75:B6:5B:7B:C7:4B:4B:72:42:61:D6
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/8PXq8Yr1gcledbZbe8dLS3JCYdY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.212.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:48:19:56:e7:68:91:4a:34:25:e8:2a:d2:b3:43:fa:29:33:
9a:55:75:ff:fc:20:a6:9e:85:54:b9:26:df:8a:ff:dd:90:f7:
85:9e:e7:c9:a0:c8:46:ce:53:92:8b:00:69:6b:72:46:a6:6c:
b0:3e:a6:57:8f:d6:9c:1e:56:66:50:1a:98:8c:24:3d:fe:12:
77:63:f6:cf:33:03:34:88:4b:2a:50:c4:68:4f:47:38:a2:06:
c8:dd:fb:f9:3c:58:89:77:8b:73:32:b3:62:4d:0d:c9:f5:f5:
ac:bb:f3:f7:2f:9a:b4:4b:c7:6f:db:48:ca:f4:36:97:7e:56:
1e:b5:58:b0:f3:0d:07:84:2c:5c:79:53:af:89:8e:97:fb:4d:
f2:8a:fd:24:00:1b:48:e7:de:90:1e:48:0d:27:40:41:a3:16:
dc:c0:13:56:3c:c4:4a:2b:23:8f:3b:01:02:b6:8d:7e:0c:4f:
b3:43:91:de:01:a4:11:b1:b5:3e:96:ce:41:f9:ed:f8:f3:d6:
fc:cd:80:86:a4:98:14:a1:3d:e1:1a:76:3d:ce:cd:bf:58:3c:
40:42:93:bd:ac:ff:fe:df:26:23:ff:a1:d6:4b:81:39:b8:10:
50:97:30:ea:69:3a:3c:d3:b9:bf:08:43:ea:df:0e:ce:97:46:
e0:77:1c:92
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yMTAyMDcx
MjQ4MDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYwRjVFQUYxOEFGNTgx
Qzk1RTc1QjY1QjdCQzc0QjRCNzI0MjYxRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiodlSiaU9CZ7kHx3YYVuptrAFLEuzgtnjGAT+fwbawjBo1fHi
vbW6ZaErFyxonIr/6Rm7+SSXi1YuDt9mnhhelg4Y/2LVP+AyAd9L2HBL99aT9lqZ
TFse598uLBwZ8hbRxvIBg7e80DUHDf4Edw5z7UW3/G5ydpX9qJ9zIH408USpaVet
ZZjEmuBLQD9u31oZSYVKzAcI60gktlrOMKzYmKCRyWQMAezdYuKJrgXY9C0GHcrq
JVEGNyjibDPQZ0aS4SmJ13ghhpntFcXUbm19nM4K+tzvburhHLY+wBOKy6Byl83I
1KOOkIzFq97gxYuycZQVyIW3cOUgfslgU+iFAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8PXq8Yr1gcledbZbe8dLS3JCYdYwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvOFBYcThZcjFnY2xlZGJa
YmU4ZExTM0pDWWRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWeS1DANBgkqhkiG9w0BAQsFAAOCAQEAGkgZVudokUo0Jegq0rND+ikzmlV1//wg
pp6FVLkm34r/3ZD3hZ7nyaDIRs5TkosAaWtyRqZssD6mV4/WnB5WZlAamIwkPf4S
d2P2zzMDNIhLKlDEaE9HOKIGyN37+TxYiXeLczKzYk0NyfX1rLvz9y+atEvHb9tI
yvQ2l35WHrVYsPMNB4QsXHlTr4mOl/tN8or9JAAbSOfekB5IDSdAQaMW3MATVjzE
SisjjzsBAraNfgxPs0OR3gGkEbG1PpbOQfnt+PPW/M2AhqSYFKE94Rp2Pc7Nv1g8
QEKTvaz//t8mI/+h1kuBObgQUJcw6mk6PNO5vwhD6t8OzpdG4Hcckg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org