Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/ALpJvwsoOIrid0d1lASC6GYb7PY.roa
File: ALpJvwsoOIrid0d1lASC6GYb7PY.roa (raw, json)
Hash identifier: JjKcHrO4TnmMwtjiTOfjuy14DrtCNjFmlgyKPAw6Cuk=
Subject key identifier: 00:BA:49:BF:0B:28:38:8A:E2:77:47:75:94:04:82:E8:66:1B:EC:F6
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 08E0
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/ALpJvwsoOIrid0d1lASC6GYb7PY.roa
Signing time: Sun 07 Feb 2021 11:53:33 +0000
ROA not before: Sun 07 Feb 2021 11:53:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 124.199.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Feb 7 11:53:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=00BA49BF0B28388AE2774775940482E8661BECF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:db:0d:cf:78:0a:29:08:c7:d5:f1:22:0c:
0c:23:d8:0a:0d:e4:55:90:59:27:e4:12:95:ff:b1:
06:bd:c6:9e:7a:a4:0f:54:fd:86:f9:b0:19:27:70:
93:33:76:d6:c0:1b:ec:2d:ee:28:ec:c5:15:5c:d5:
65:97:92:2f:2c:a1:59:b7:17:2a:e8:02:5f:cf:4d:
b0:c8:46:3f:53:6e:77:06:38:f0:1b:0a:b4:f3:c0:
96:b4:c2:8a:d7:f0:67:23:08:8f:21:84:39:18:42:
57:f7:89:e1:4b:ab:cc:ea:6d:8e:29:2e:fa:30:30:
4d:af:b1:e1:48:40:ba:54:01:d4:4d:42:ef:46:60:
09:68:83:58:be:d0:07:47:02:4d:72:65:60:87:bb:
ae:c3:a9:f8:be:2f:23:ea:fd:9a:e3:48:63:65:99:
27:77:08:d3:c9:d2:aa:bf:a9:7f:27:28:2c:36:21:
bc:42:b5:ef:bf:77:82:2b:9a:1f:fc:54:7d:f9:99:
7e:ef:66:6c:8c:50:11:46:60:11:f8:54:f2:6a:e3:
79:1e:27:03:96:a7:7d:31:a0:f1:48:4c:9c:e1:66:
b5:9a:6f:e7:6e:ca:15:92:c2:8d:67:d6:66:26:48:
e1:9d:ee:57:35:03:0e:a3:a4:55:e7:2b:47:ee:1f:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:49:BF:0B:28:38:8A:E2:77:47:75:94:04:82:E8:66:1B:EC:F6
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/ALpJvwsoOIrid0d1lASC6GYb7PY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.199.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:2d:75:00:1a:2d:81:1b:a1:7d:41:af:c8:ca:64:ae:d8:2a:
d5:79:12:96:66:41:80:be:aa:8e:2b:4f:df:b6:08:20:0b:04:
e7:7c:43:b9:29:25:60:c9:24:cf:79:7d:58:02:57:a0:33:99:
60:83:16:a0:6a:47:2b:5d:31:13:7d:d4:d6:12:56:b0:62:15:
7a:d1:dc:cf:a0:77:55:83:19:7d:57:0c:4c:8f:d2:ae:8a:eb:
35:7b:b1:ff:43:79:e3:78:3d:05:ad:e3:fe:a2:7c:69:a4:f3:
2c:4e:08:48:9e:cd:a7:97:08:37:b5:bb:5e:7f:9c:5c:ac:0c:
b2:e5:73:25:03:fb:d9:5f:6c:37:8a:dc:de:21:44:1d:16:9b:
f3:24:e3:c4:5b:45:44:4a:a3:b7:a1:09:e3:f9:a9:2a:95:60:
93:60:dd:ad:6d:7b:cc:58:29:54:37:ff:95:46:eb:86:83:4a:
fe:7b:b2:ae:40:b5:88:da:af:c2:8b:95:fc:e9:da:b8:73:6b:
f0:56:bb:a5:1c:61:dd:2b:7f:2f:b3:01:dd:ea:9b:b5:b4:17:
d3:58:3c:60:5b:42:6e:e8:b9:1d:eb:3b:7b:b5:1c:a1:83:53:
44:55:0f:1a:01:4a:c3:81:3b:64:d4:a2:2d:9f:b2:1c:48:a4:
f7:ab:94:20
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yMTAyMDcx
MTUzMzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAwQkE0OUJGMEIyODM4
OEFFMjc3NDc3NTk0MDQ4MkU4NjYxQkVDRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGc9sNz3gKKQjH1fEiDAwj2AoN5FWQWSfkEpX/sQa9xp56pA9U
/Yb5sBkncJMzdtbAG+wt7ijsxRVc1WWXki8soVm3FyroAl/PTbDIRj9TbncGOPAb
CrTzwJa0worX8GcjCI8hhDkYQlf3ieFLq8zqbY4pLvowME2vseFIQLpUAdRNQu9G
YAlog1i+0AdHAk1yZWCHu67Dqfi+LyPq/ZrjSGNlmSd3CNPJ0qq/qX8nKCw2IbxC
te+/d4Irmh/8VH35mX7vZmyMUBFGYBH4VPJq43keJwOWp30xoPFITJzhZrWab+du
yhWSwo1n1mYmSOGd7lc1Aw6jpFXnK0fuH+ztAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUALpJvwsoOIrid0d1lASC6GYb7PYwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL0FMcEp2d3NvT0lyaWQwZDFsQVNDNkdZ
YjdQWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR8x2AwDQYJ
KoZIhvcNAQELBQADggEBAH0tdQAaLYEboX1Br8jKZK7YKtV5EpZmQYC+qo4rT9+2
CCALBOd8Q7kpJWDJJM95fVgCV6AzmWCDFqBqRytdMRN91NYSVrBiFXrR3M+gd1WD
GX1XDEyP0q6K6zV7sf9DeeN4PQWt4/6ifGmk8yxOCEiezaeXCDe1u15/nFysDLLl
cyUD+9lfbDeK3N4hRB0Wm/Mk48RbRURKo7ehCeP5qSqVYJNg3a1te8xYKVQ3/5VG
64aDSv57sq5AtYjar8KLlfzp2rhza/BWu6UcYd0rfy+zAd3qm7W0F9NYPGBbQm7o
uR3rO3u1HKGDU0RVDxoBSsOBO2TUoi2fshxIpPerlCA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org