Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/kNooh7O0f34CsS6dPVvkt5vO47U.roa
File: kNooh7O0f34CsS6dPVvkt5vO47U.roa (raw, json)
Hash identifier: +96QBMQ96HvsRz/+Gcti/sepkjsGamWsHnO8/dv+KnQ=
Subject key identifier: 90:DA:28:87:B3:B4:7F:7E:02:B1:2E:9D:3D:5B:E4:B7:9B:CE:E3:B5
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 06D2
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/kNooh7O0f34CsS6dPVvkt5vO47U.roa
Signing time: Wed 29 Sep 2021 02:37:56 +0000
ROA not before: Wed 29 Sep 2021 02:37:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Sep 29 02:37:56 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=90DA2887B3B47F7E02B12E9D3D5BE4B79BCEE3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:1b:61:d6:2c:4b:44:f1:78:20:b6:a3:bf:
5d:d0:74:df:e3:4b:cc:93:ce:49:55:a9:e2:51:ea:
2b:ed:69:a4:21:cb:4f:cf:bc:b4:42:23:50:e3:03:
f8:44:7f:30:fa:39:56:0e:b2:17:3a:70:9a:fa:11:
29:ec:37:04:13:75:18:27:57:07:e8:ec:8e:25:79:
5a:3e:55:c4:f5:6e:4e:34:2d:29:c6:1f:fa:c5:16:
36:b7:dd:72:52:64:98:51:2c:da:7e:e1:30:6e:80:
55:98:da:37:75:d4:19:d1:8c:8f:82:c2:c7:f8:93:
92:91:10:bf:20:9c:87:e3:e8:8a:6c:96:66:8a:58:
3f:c0:58:4c:ce:22:d5:f6:55:99:7e:30:fe:a2:f0:
0d:db:85:eb:6d:d9:f4:2b:ef:e8:d9:23:b8:88:23:
22:52:58:e4:5d:4b:31:3f:e6:e5:ac:f3:2c:5f:7f:
d2:51:f6:95:5f:ba:11:ac:97:0e:4b:0f:48:48:f3:
21:15:3b:07:4d:54:f4:49:42:f1:a0:18:cb:51:bd:
6b:3c:69:0f:e9:d7:3d:f1:51:74:1b:08:60:34:9a:
f2:28:32:26:67:9e:7f:21:51:d6:3b:29:db:97:05:
5f:9c:48:0f:c5:95:29:13:bb:88:ea:18:20:0c:56:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:28:87:B3:B4:7F:7E:02:B1:2E:9D:3D:5B:E4:B7:9B:CE:E3:B5
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/kNooh7O0f34CsS6dPVvkt5vO47U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
28:cc:38:32:79:70:93:49:9a:1c:d2:60:a9:90:7b:33:5c:3e:
80:35:d2:4d:85:df:0b:e5:8a:43:e1:36:d7:ab:e6:42:af:97:
92:ff:05:4d:8f:f2:0a:47:a4:86:5e:35:e3:9f:f5:52:92:c7:
87:0a:6e:18:b0:7c:54:e8:73:8f:20:76:02:71:24:00:45:d4:
87:96:88:3e:f7:82:27:d4:44:9a:4e:6a:c5:70:8b:bc:aa:c8:
29:70:53:00:66:9e:1e:ef:02:99:93:de:13:a4:55:05:2d:02:
24:69:4b:c7:0f:3a:f0:22:e2:45:76:0f:27:d9:84:a1:37:c9:
df:4e:3c:e6:09:ed:24:fb:ce:42:70:7d:16:7e:39:9f:05:d9:
92:2c:9d:3a:fb:5d:0f:be:be:6b:22:8d:a2:90:fa:6b:8e:f1:
15:07:e7:8a:0e:16:5e:c3:7a:b7:84:71:ca:89:2e:b2:fb:b7:
c5:ad:33:7c:e4:0d:1c:7a:db:55:29:8b:20:cb:3d:c4:16:33:
b6:ef:16:e8:97:02:4e:a6:b7:6d:0b:ac:fd:b7:0c:b0:24:f2:
da:a5:64:57:0b:93:8b:ea:73:ad:4c:94:ce:44:0e:2d:73:11:
04:df:a5:b1:44:e4:30:12:05:7f:5f:99:64:3a:a2:43:19:67:
c9:81:cc:b7
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yMTA5Mjkw
MjM3NTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDkwREEyODg3QjNCNDdG
N0UwMkIxMkU5RDNENUJFNEI3OUJDRUUzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWMxth1ixLRPF4ILajv13QdN/jS8yTzklVqeJR6ivtaaQhy0/P
vLRCI1DjA/hEfzD6OVYOshc6cJr6ESnsNwQTdRgnVwfo7I4leVo+VcT1bk40LSnG
H/rFFja33XJSZJhRLNp+4TBugFWY2jd11BnRjI+Cwsf4k5KREL8gnIfj6IpslmaK
WD/AWEzOItX2VZl+MP6i8A3bhett2fQr7+jZI7iIIyJSWORdSzE/5uWs8yxff9JR
9pVfuhGslw5LD0hI8yEVOwdNVPRJQvGgGMtRvWs8aQ/p1z3xUXQbCGA0mvIoMiZn
nn8hUdY7KduXBV+cSA/FlSkTu4jqGCAMVhvbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUkNooh7O0f34CsS6dPVvkt5vO47UwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kva05vb2g3TzBmMzRDc1M2
ZFBWdmt0NXZPNDdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGeS1TANBgkqhkiG9w0BAQsFAAOCAQEAKMw4Mnlwk0maHNJgqZB7M1w+gDXSTYXf
C+WKQ+E216vmQq+Xkv8FTY/yCkekhl4145/1UpLHhwpuGLB8VOhzjyB2AnEkAEXU
h5aIPveCJ9REmk5qxXCLvKrIKXBTAGaeHu8CmZPeE6RVBS0CJGlLxw868CLiRXYP
J9mEoTfJ30485gntJPvOQnB9Fn45nwXZkiydOvtdD76+ayKNopD6a47xFQfnig4W
XsN6t4Rxyokusvu3xa0zfOQNHHrbVSmLIMs9xBYztu8W6JcCTqa3bQus/bcMsCTy
2qVkVwuTi+pzrUyUzkQOLXMRBN+lsUTkMBIFf1+ZZDqiQxlnyYHMtw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:14 2025 by rpki-client