Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa
File: sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa (raw, json)
Hash identifier: vlArNZs/OChaINPoEjPcmX35kzzCUWvJzgNxCePfLuc=
Subject key identifier: B0:1D:18:F1:A4:6D:56:8E:A6:12:24:C5:1C:B9:A0:E8:88:E3:74:D4
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 061B
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa
Signing time: Tue 19 Jan 2021 02:30:59 +0000
ROA not before: Tue 19 Jan 2021 02:30:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Jan 19 02:30:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B01D18F1A46D568EA61224C51CB9A0E888E374D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:0e:46:42:bc:69:0a:ea:6d:af:68:21:5e:
ac:a6:15:6e:57:84:e9:ed:db:db:d3:20:34:fc:1f:
ca:db:bd:3b:f7:5c:09:ce:b5:11:4e:49:aa:91:e3:
c3:a7:ad:ab:aa:3c:ef:8b:be:03:4e:42:28:d9:d0:
4d:8d:38:e3:28:a6:99:76:bd:87:8c:5b:09:26:7c:
ca:57:0a:90:c6:da:5d:d1:5f:44:49:75:fc:6e:6b:
a0:80:51:dc:c7:63:d0:3c:a2:1d:c7:e9:4e:f5:d1:
ff:69:f0:6f:63:99:9d:0a:bc:b5:c8:42:72:e0:2a:
d6:0b:98:9e:56:84:94:bf:9a:41:dc:ae:b6:42:9a:
29:bf:aa:99:df:24:af:99:a3:2e:da:50:f5:4c:79:
7f:f3:4c:fa:37:75:77:70:4c:f8:f9:da:80:4f:92:
4d:5e:41:6d:da:69:29:69:f9:bd:6b:65:c7:01:9a:
79:45:93:19:67:66:2d:88:eb:98:d4:9d:d7:71:e2:
d5:76:50:27:4e:0c:1e:9a:d0:6d:09:78:69:2f:9c:
7a:a5:00:6c:2c:6b:60:53:77:de:58:22:dd:cb:3e:
f1:24:8c:11:83:9e:d7:04:31:09:6a:45:1c:a8:6c:
92:32:c8:2d:01:a1:b0:39:e7:50:a3:e2:a0:70:43:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:18:F1:A4:6D:56:8E:A6:12:24:C5:1C:B9:A0:E8:88:E3:74:D4
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4e:7a:6a:5c:83:f3:fd:20:c0:1c:46:19:9b:55:a3:a8:8e:
1b:ae:ee:e0:27:fa:14:04:98:13:b2:a6:80:d1:bb:3d:81:e2:
f9:bb:c9:9e:12:d6:f6:ad:7b:ec:13:69:9f:49:ca:14:3d:9f:
51:b4:60:86:6d:f1:a0:9e:da:fa:72:7d:9b:5f:8b:c9:ce:1c:
55:2b:3d:0b:04:87:82:06:53:c6:2d:2d:8d:0b:a1:39:c4:74:
53:1e:88:05:d3:7e:b3:f7:b7:5a:d3:f5:9e:e7:a8:df:bb:f6:
7c:78:83:b2:98:5a:62:6c:81:e4:1d:d7:0e:91:61:41:f2:0e:
04:20:40:ee:57:30:1c:fc:f9:01:9b:d1:ca:89:11:d0:88:73:
2c:37:4c:4f:94:0b:ea:98:54:37:e3:12:5e:66:fd:7d:5a:82:
70:c1:66:4a:cc:a1:85:6e:f4:14:81:ec:ac:4d:24:e3:9a:80:
fc:3f:56:16:92:7c:65:ea:56:75:5d:33:4c:0f:17:73:38:24:
c3:eb:f5:69:43:98:f5:a4:15:1b:9e:4d:6a:62:cb:25:30:d7:
c2:39:c4:9e:74:49:a7:83:0f:7b:f5:ad:fa:30:a4:98:55:d9:
15:fd:91:6b:53:46:64:b3:be:33:5e:94:c4:2e:a1:e1:0a:20:
c2:1d:e5:b5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yMTAxMTkw
MjMwNTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIwMUQxOEYxQTQ2RDU2
OEVBNjEyMjRDNTFDQjlBMEU4ODhFMzc0RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHQg5GQrxpCuptr2ghXqymFW5XhOnt29vTIDT8H8rbvTv3XAnO
tRFOSaqR48OnrauqPO+LvgNOQijZ0E2NOOMoppl2vYeMWwkmfMpXCpDG2l3RX0RJ
dfxua6CAUdzHY9A8oh3H6U710f9p8G9jmZ0KvLXIQnLgKtYLmJ5WhJS/mkHcrrZC
mim/qpnfJK+Zoy7aUPVMeX/zTPo3dXdwTPj52oBPkk1eQW3aaSlp+b1rZccBmnlF
kxlnZi2I65jUnddx4tV2UCdODB6a0G0JeGkvnHqlAGwsa2BTd95YIt3LPvEkjBGD
ntcEMQlqRRyobJIyyC0BobA551Cj4qBwQ7flAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUsB0Y8aRtVo6mEiTFHLmg6IjjdNQwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvc0IwWThhUnRWbzZtRWlU
RkhMbWc2SWpqZE5RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGeS1TANBgkqhkiG9w0BAQsFAAOCAQEAkk56alyD8/0gwBxGGZtVo6iOG67u4Cf6
FASYE7KmgNG7PYHi+bvJnhLW9q177BNpn0nKFD2fUbRghm3xoJ7a+nJ9m1+Lyc4c
VSs9CwSHggZTxi0tjQuhOcR0Ux6IBdN+s/e3WtP1nueo37v2fHiDsphaYmyB5B3X
DpFhQfIOBCBA7lcwHPz5AZvRyokR0IhzLDdMT5QL6phUN+MSXmb9fVqCcMFmSsyh
hW70FIHsrE0k45qA/D9WFpJ8ZepWdV0zTA8Xczgkw+v1aUOY9aQVG55NamLLJTDX
wjnEnnRJp4MPe/Wt+jCkmFXZFf2Ra1NGZLO+M16UxC6h4Qogwh3ltQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org