Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/6QD-kJgFOP_B6at5jvV6qNwkGbo.roa
File: 6QD-kJgFOP_B6at5jvV6qNwkGbo.roa (raw, json)
Hash identifier: tXTKkc/6IlVKC2hT/KBtUE1N2clwHo1byqPbd0uDi1Q=
Subject key identifier: E9:00:FE:90:98:05:38:FF:C1:E9:AB:79:8E:F5:7A:A8:DC:24:19:BA
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0B8A
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/6QD-kJgFOP_B6at5jvV6qNwkGbo.roa
Signing time: Fri 01 Sep 2023 08:54:47 +0000
ROA not before: Fri 01 Sep 2023 08:54:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 210.69.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 1 08:54:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E900FE90980538FFC1E9AB798EF57AA8DC2419BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:30:a9:4a:93:a6:3b:01:24:77:c9:05:ce:
3d:e7:28:7f:25:a8:e5:2d:6f:dd:f8:89:2b:74:02:
05:8e:a7:9f:50:8b:7f:d3:6f:bb:fb:f4:f2:1d:82:
8a:b8:fa:6a:b5:52:d4:71:8f:08:ff:73:90:a9:23:
9e:d5:ae:f7:7d:65:e6:bc:72:d2:87:4c:a9:f0:f1:
c6:9d:ba:c3:48:f4:00:db:8a:ca:ba:db:00:7c:ad:
88:ab:3f:78:41:f5:45:df:01:d8:75:2e:61:78:2e:
9a:e9:1c:4c:07:b4:65:bb:c0:cf:b6:e0:4c:73:95:
28:71:e9:5d:90:c8:ce:06:17:7b:f7:04:f2:85:9c:
97:84:d3:2c:3a:ed:84:09:c6:49:9a:61:48:89:e3:
71:fe:8e:8a:a7:7d:e5:b6:02:c3:31:d6:80:e4:ea:
0d:31:ad:be:a0:b1:d3:8c:8a:66:af:3a:36:8b:ab:
57:5d:3f:06:73:da:08:46:ac:b2:e6:5f:fa:15:3a:
c9:52:9f:7e:c7:a9:d1:29:67:ec:56:b1:48:03:ad:
ac:df:fa:2e:91:21:da:3f:0c:64:1b:f1:e8:fd:a2:
81:4a:31:e8:a6:25:37:c5:69:f6:98:c0:d9:d8:29:
d2:fb:95:2a:74:56:df:13:5b:0e:b2:f3:33:9c:94:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:FE:90:98:05:38:FF:C1:E9:AB:79:8E:F5:7A:A8:DC:24:19:BA
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/6QD-kJgFOP_B6at5jvV6qNwkGbo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:d7:57:04:cb:ae:22:d0:a1:b3:7f:5b:2c:15:e1:0f:0f:25:
5c:67:e9:0c:dc:b9:84:a6:32:5c:74:f0:22:f6:7f:4a:5c:ef:
43:e7:50:52:15:e8:33:74:22:90:44:b7:48:f0:63:76:b5:b4:
94:c7:ec:a8:8e:8a:39:09:17:93:e5:95:33:00:f5:c6:7b:d8:
86:ba:31:5c:fb:7b:58:1e:68:8d:1f:3e:70:9d:b2:44:ac:7b:
5a:9b:9b:0a:96:0c:1c:20:20:07:c8:00:30:70:98:71:78:db:
ab:d4:f0:21:34:c4:b1:53:bf:f7:3f:e0:d8:5b:c0:bf:a0:03:
9b:34:40:28:bd:c6:8c:9a:c5:28:d5:8a:64:7d:b2:4a:d0:67:
fd:bb:db:0f:d8:1d:a4:8e:a1:56:f3:c5:c7:20:bf:2d:5d:d4:
43:98:7f:72:ff:bf:fe:3b:d8:2a:7c:39:94:36:8c:60:e9:ee:
c9:01:4a:fa:78:09:9d:72:7a:35:6c:68:d0:98:4e:ab:7c:47:
31:55:6d:54:c1:1e:dc:5e:3a:b9:ef:ff:e6:d6:81:08:06:48:
f4:23:36:2a:4d:60:87:97:a7:e2:b8:a7:be:61:4e:b7:a4:12:
59:6c:53:2b:4c:18:1f:3a:ba:99:3a:41:9d:18:dd:e0:07:ec:
73:0e:a1:f3
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICC4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yMzA5MDEw
ODU0NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU5MDBGRTkwOTgwNTM4
RkZDMUU5QUI3OThFRjU3QUE4REMyNDE5QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjXTCpSpOmOwEkd8kFzj3nKH8lqOUtb934iSt0AgWOp59Qi3/T
b7v79PIdgoq4+mq1UtRxjwj/c5CpI57Vrvd9Zea8ctKHTKnw8cadusNI9ADbisq6
2wB8rYirP3hB9UXfAdh1LmF4LprpHEwHtGW7wM+24ExzlShx6V2QyM4GF3v3BPKF
nJeE0yw67YQJxkmaYUiJ43H+joqnfeW2AsMx1oDk6g0xrb6gsdOMimavOjaLq1dd
PwZz2ghGrLLmX/oVOslSn37HqdEpZ+xWsUgDrazf+i6RIdo/DGQb8ej9ooFKMeim
JTfFafaYwNnYKdL7lSp0Vt8TWw6y8zOclBYbAgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQU6QD+kJgFOP/B6at5jvV6qNwkGbowHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOLzZRRC1rSmdGT1BfQjZhdDVqdlY2cU53
a0diby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSRTANBgkq
hkiG9w0BAQsFAAOCAQEAatdXBMuuItChs39bLBXhDw8lXGfpDNy5hKYyXHTwIvZ/
SlzvQ+dQUhXoM3QikES3SPBjdrW0lMfsqI6KOQkXk+WVMwD1xnvYhroxXPt7WB5o
jR8+cJ2yRKx7WpubCpYMHCAgB8gAMHCYcXjbq9TwITTEsVO/9z/g2FvAv6ADmzRA
KL3GjJrFKNWKZH2yStBn/bvbD9gdpI6hVvPFxyC/LV3UQ5h/cv+//jvYKnw5lDaM
YOnuyQFK+ngJnXJ6NWxo0JhOq3xHMVVtVMEe3F46ue//5taBCAZI9CM2Kk1gh5en
4rinvmFOt6QSWWxTK0wYHzq6mTpBnRjd4Afscw6h8w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:35 2025 by rpki-client