Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6JnctTMwpCkMo6ayK7c17WpRCfs.roa
File: 6JnctTMwpCkMo6ayK7c17WpRCfs.roa (raw, json)
Hash identifier: +kpT6litIiv16CwRC6sQ923UDBaAVhqrLjVBrFhiic8=
Subject key identifier: E8:99:DC:B5:33:30:A4:29:0C:A3:A6:B2:2B:B7:35:ED:6A:51:09:FB
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0B6E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6JnctTMwpCkMo6ayK7c17WpRCfs.roa
Signing time: Tue 01 Aug 2023 08:01:51 +0000
ROA not before: Tue 01 Aug 2023 08:01:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18412
IP address blocks: 39.12.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2926 (0xb6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 1 08:01:51 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E899DCB53330A4290CA3A6B22BB735ED6A5109FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:85:db:b9:ff:12:eb:f3:76:e5:a9:77:d5:
47:80:5d:3d:f5:31:95:84:a3:e5:0d:5c:e4:22:61:
e7:51:cd:b5:85:40:56:7a:86:10:88:8b:23:75:50:
01:d9:2a:5e:11:61:21:51:3a:b3:76:e9:94:77:d0:
54:fb:a7:c9:16:e8:49:a7:b6:36:43:81:87:40:ba:
dc:e2:a0:e3:50:5f:f7:1f:ce:5f:48:52:5f:35:5f:
30:68:e1:e2:05:9b:c5:26:1f:a6:9e:b7:c1:55:91:
68:d0:f5:e4:df:04:c2:9c:70:5f:58:6d:a0:aa:1c:
44:b6:9a:8e:18:fd:4a:ce:26:f9:5c:81:9f:09:44:
d0:6d:d9:6b:98:8e:77:14:bc:c9:6c:92:75:24:66:
59:1f:80:d4:01:65:6b:0c:b9:9a:93:97:1e:62:65:
d4:51:d3:b3:d4:fc:08:52:e4:fe:e6:5d:d0:f4:4d:
d4:21:4d:8f:cc:77:b4:e8:ef:92:94:12:81:10:7f:
aa:16:ed:7a:a4:bd:ad:c8:64:50:e0:67:35:3e:70:
33:4c:6b:77:83:f1:2c:cc:83:2e:da:0f:52:1a:94:
2c:03:b9:9a:4a:e9:aa:6a:9c:83:6e:ea:3f:be:66:
93:a8:2e:51:f2:f1:0a:1c:c6:bb:00:95:29:10:f4:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:DC:B5:33:30:A4:29:0C:A3:A6:B2:2B:B7:35:ED:6A:51:09:FB
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6JnctTMwpCkMo6ayK7c17WpRCfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.12.0.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:88:6e:52:d0:75:e3:03:10:d7:b2:55:43:14:32:4e:eb:82:
8d:13:86:35:b4:36:4d:21:5c:7a:74:63:02:a0:a6:23:f1:3e:
0f:cb:95:0a:fe:80:a9:5f:b4:13:59:5b:4f:fd:56:75:39:46:
0f:f5:90:f7:fc:3c:74:f1:ad:13:3d:71:07:e7:80:f8:a4:ca:
7e:a0:3a:c6:75:f8:c0:f0:48:f4:55:b3:fb:45:81:f2:d5:72:
7e:2b:09:6d:51:c6:49:60:7c:2c:8a:1e:8d:b7:d6:77:fc:ee:
5a:8a:79:45:8d:1a:3b:25:2a:41:dd:c2:be:6c:2c:82:ed:ed:
7e:7b:de:60:09:ba:d1:9c:26:b1:8e:f2:8f:a3:08:11:51:15:
4c:61:a4:3e:60:7c:02:c8:72:50:53:77:6a:18:0c:95:1c:f1:
43:62:80:eb:eb:95:4d:f8:82:26:62:6b:90:43:78:9b:6d:ec:
12:28:8d:05:5c:c6:40:5e:f0:b1:66:01:b1:0b:c5:a9:e1:a9:
36:53:8c:ec:e9:06:15:14:0e:67:62:6a:67:3d:d5:c9:d4:cf:
82:ad:28:2c:27:44:d9:c9:33:28:a0:15:12:b2:ab:9a:60:90:
59:f6:29:3c:e1:66:7c:c5:60:65:ae:65:be:a0:de:e3:51:30:
94:b4:ca:65
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yMzA4MDEw
ODAxNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4OTlEQ0I1MzMzMEE0
MjkwQ0EzQTZCMjJCQjczNUVENkE1MTA5RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkc4Xbuf8S6/N25al31UeAXT31MZWEo+UNXOQiYedRzbWFQFZ6
hhCIiyN1UAHZKl4RYSFROrN26ZR30FT7p8kW6EmntjZDgYdAutzioONQX/cfzl9I
Ul81XzBo4eIFm8UmH6aet8FVkWjQ9eTfBMKccF9YbaCqHES2mo4Y/UrOJvlcgZ8J
RNBt2WuYjncUvMlsknUkZlkfgNQBZWsMuZqTlx5iZdRR07PU/AhS5P7mXdD0TdQh
TY/Md7To75KUEoEQf6oW7Xqkva3IZFDgZzU+cDNMa3eD8SzMgy7aD1IalCwDuZpK
6apqnINu6j++ZpOoLlHy8QocxrsAlSkQ9HrFAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU6JnctTMwpCkMo6ayK7c17WpRCfswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZKbmN0VE13cENrTW82YXlLN2MxN1dw
UkNmcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMnDAAwDQYJ
KoZIhvcNAQELBQADggEBAMmIblLQdeMDENeyVUMUMk7rgo0ThjW0Nk0hXHp0YwKg
piPxPg/LlQr+gKlftBNZW0/9VnU5Rg/1kPf8PHTxrRM9cQfngPikyn6gOsZ1+MDw
SPRVs/tFgfLVcn4rCW1RxklgfCyKHo231nf87lqKeUWNGjslKkHdwr5sLILt7X57
3mAJutGcJrGO8o+jCBFRFUxhpD5gfALIclBTd2oYDJUc8UNigOvrlU34giZia5BD
eJtt7BIojQVcxkBe8LFmAbELxanhqTZTjOzpBhUUDmdiamc91cnUz4KtKCwnRNnJ
MyigFRKyq5pgkFn2KTzhZnzFYGWuZb6g3uNRMJS0ymU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org