Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/P_rpIU5buTrdZX7snDKIL21ZKBY.roa
File: P_rpIU5buTrdZX7snDKIL21ZKBY.roa (raw, json)
Hash identifier: +zWUdkzGTaPWkjEmnrIbHScU5mAxVnVByygToUDDu2c=
Subject key identifier: 3F:FA:E9:21:4E:5B:B9:3A:DD:65:7E:EC:9C:32:88:2F:6D:59:28:16
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 08E8
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/P_rpIU5buTrdZX7snDKIL21ZKBY.roa
Signing time: Sun 07 Feb 2021 11:53:38 +0000
ROA not before: Sun 07 Feb 2021 11:53:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 211.79.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Feb 7 11:53:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3FFAE9214E5BB93ADD657EEC9C32882F6D592816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:6c:8c:c3:c0:56:6b:c5:b2:c2:6d:c0:b3:
23:9c:1b:9c:1d:c5:bf:ff:4e:13:f5:ea:4e:44:c7:
8d:60:0e:eb:4a:cf:ba:bb:7b:4a:d0:17:a6:0d:70:
06:1f:f9:9e:f3:b8:5e:51:ff:1e:2c:23:01:5f:7d:
8b:2a:79:32:68:71:d3:e3:3b:43:ca:2d:ed:5e:9a:
8e:21:7b:f9:60:88:1f:9c:85:4f:c6:92:2d:e0:ae:
42:62:1e:40:45:2a:36:2e:ea:cc:fe:36:81:db:99:
55:af:d9:63:00:85:d8:9d:87:27:a5:69:3d:f9:c6:
02:20:df:60:98:36:57:a0:84:27:51:f1:61:cd:f6:
e5:22:d2:22:c4:ca:ec:3f:de:e1:bd:e6:30:69:3f:
04:01:2d:24:77:98:2c:32:33:d1:c0:7c:d0:77:46:
c0:55:5e:a8:e4:41:0a:8b:f8:3f:8c:41:4b:ef:28:
e0:cd:a3:e0:12:db:0d:58:da:95:f3:92:86:7a:53:
e8:cd:b3:7e:56:08:ee:64:d4:48:6d:c7:18:f6:bb:
1f:ef:77:0d:0d:ae:31:06:1d:59:bc:5a:21:34:01:
cd:aa:5f:6a:99:4b:16:2b:c5:4d:c7:ef:5c:d8:47:
97:e8:2a:db:12:c7:a3:de:d9:1c:55:60:d8:8b:3f:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:E9:21:4E:5B:B9:3A:DD:65:7E:EC:9C:32:88:2F:6D:59:28:16
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/P_rpIU5buTrdZX7snDKIL21ZKBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.160.0/19
Signature Algorithm: sha256WithRSAEncryption
59:0b:81:bb:d5:a2:1d:ed:92:e3:ed:43:0d:6d:e7:02:d9:09:
e4:b3:bf:b1:e4:3c:7d:e8:49:41:e1:a0:04:a3:50:ea:93:b1:
8a:c0:6c:8b:ee:1d:bc:0b:cd:1a:89:45:b5:ee:f2:4e:e8:ab:
11:27:96:7b:68:75:7a:7e:dd:e7:e0:b7:72:c8:f1:4f:e9:91:
17:63:fd:2b:14:b4:e6:a0:5d:77:a5:e1:5a:71:07:45:bf:b9:
78:1a:7f:de:d3:00:c0:33:1c:29:9f:5c:14:d8:5c:01:5f:11:
c0:d5:f4:8c:7a:5f:ec:16:59:b1:48:c8:2f:3a:18:a5:16:97:
55:87:b0:3f:5a:ee:1f:ca:50:04:b2:11:8d:a8:d5:a3:cb:1e:
f3:d3:5f:6e:f1:fc:d6:07:08:c0:c6:6c:8d:c1:0e:8d:6f:23:
0e:fc:12:7c:f4:a1:a8:e2:b8:a8:f0:22:db:e9:b6:4f:8a:6b:
6b:4b:30:43:16:c6:a0:be:e0:6c:74:a5:37:d1:18:47:b6:49:
60:15:33:7a:c8:78:8d:40:72:30:e8:c6:94:33:dc:4c:14:97:
b1:58:ce:ef:64:77:65:fa:92:e6:3a:14:6f:64:cb:8e:f4:9f:
f3:d7:40:e1:47:b6:4a:56:a6:a8:be:1c:77:e5:a3:f5:eb:91:
cb:82:ab:65
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yMTAyMDcx
MTUzMzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNGRkFFOTIxNEU1QkI5
M0FERDY1N0VFQzlDMzI4ODJGNkQ1OTI4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9XWyMw8BWa8Wywm3AsyOcG5wdxb//ThP16k5Ex41gDutKz7q7
e0rQF6YNcAYf+Z7zuF5R/x4sIwFffYsqeTJocdPjO0PKLe1emo4he/lgiB+chU/G
ki3grkJiHkBFKjYu6sz+NoHbmVWv2WMAhdidhyelaT35xgIg32CYNleghCdR8WHN
9uUi0iLEyuw/3uG95jBpPwQBLSR3mCwyM9HAfNB3RsBVXqjkQQqL+D+MQUvvKODN
o+AS2w1Y2pXzkoZ6U+jNs35WCO5k1Ehtxxj2ux/vdw0NrjEGHVm8WiE0Ac2qX2qZ
SxYrxU3H71zYR5foKtsSx6Pe2RxVYNiLP8nvAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUP/rpIU5buTrdZX7snDKIL21ZKBYwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL1BfcnBJVTVidVRyZFpYN3NuREtJTDIx
WktCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTT6AwDQYJ
KoZIhvcNAQELBQADggEBAFkLgbvVoh3tkuPtQw1t5wLZCeSzv7HkPH3oSUHhoASj
UOqTsYrAbIvuHbwLzRqJRbXu8k7oqxEnlntodXp+3efgt3LI8U/pkRdj/SsUtOag
XXel4VpxB0W/uXgaf97TAMAzHCmfXBTYXAFfEcDV9Ix6X+wWWbFIyC86GKUWl1WH
sD9a7h/KUASyEY2o1aPLHvPTX27x/NYHCMDGbI3BDo1vIw78Enz0oajiuKjwItvp
tk+Ka2tLMEMWxqC+4Gx0pTfRGEe2SWAVM3rIeI1AcjDoxpQz3EwUl7FYzu9kd2X6
kuY6FG9ky470n/PXQOFHtkpWpqi+HHflo/XrkcuCq2U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org