Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/6b8oudbbsgN2XHUb_QEyCOQXwKY.roa
File: 6b8oudbbsgN2XHUb_QEyCOQXwKY.roa (raw, json)
Hash identifier: 4RmyCFnfCTAaIttHIMae43QRb5vFRcpVTEExRyqcWgw=
Subject key identifier: E9:BF:28:B9:D6:DB:B2:03:76:5C:75:1B:FD:01:32:08:E4:17:C0:A6
Certificate issuer: /CN=DBA793D0FFE611AC397F197570E19785046EE739
Certificate serial: 08AC
Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/6b8oudbbsgN2XHUb_QEyCOQXwKY.roa
Signing time: Sun 07 Feb 2021 11:52:37 +0000
ROA not before: Sun 07 Feb 2021 11:52:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18413
IP address blocks: 61.67.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739
Validity
Not Before: Feb 7 11:52:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E9BF28B9D6DBB203765C751BFD013208E417C0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:a2:34:8f:e3:a0:3a:d7:87:8b:2f:18:2a:
e5:11:9f:61:47:04:b2:a5:2c:33:22:06:df:04:4e:
07:67:98:04:7c:da:ea:c5:e1:fc:b9:93:75:18:6f:
c5:bf:33:23:4c:13:78:bb:31:f6:bd:7f:96:ef:1d:
ff:0a:cf:be:be:e5:c8:db:d3:c8:77:3e:86:c8:52:
3a:09:09:90:19:f4:ed:88:87:09:c5:c1:e6:35:db:
d8:37:3d:bf:64:06:4d:db:87:30:ab:69:98:95:db:
32:d8:a6:0d:7d:49:d5:59:37:d0:72:94:72:75:88:
8e:f2:d5:15:e8:78:f5:ae:0a:6e:fe:69:cb:7f:11:
4f:32:9d:3e:47:82:89:a4:d3:cc:69:a5:e3:67:55:
63:9c:6f:a8:52:3d:12:4c:90:26:1f:1a:68:1f:83:
34:54:65:0c:74:8b:1b:4e:1d:fb:78:29:ff:22:06:
dd:e8:0b:d0:47:82:6c:e0:2e:e1:47:bc:0e:a1:2c:
8f:4d:89:eb:a4:8c:42:d0:c8:e6:b4:e5:a2:d7:84:
c9:a7:c4:b2:51:08:60:df:fb:e9:83:0a:0a:09:d1:
31:b6:bf:a0:54:9d:0e:71:41:53:7e:8e:5c:0a:f5:
05:9e:06:28:95:5b:f5:2e:bd:6c:c1:29:14:2f:93:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:28:B9:D6:DB:B2:03:76:5C:75:1B:FD:01:32:08:E4:17:C0:A6
X509v3 Authority Key Identifier:
keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/6b8oudbbsgN2XHUb_QEyCOQXwKY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:51:e4:61:bd:e4:a8:5f:1e:61:79:a9:09:8a:f3:e3:a3:39:
75:3c:66:73:52:f0:46:69:8d:a0:a3:3c:51:88:c6:70:95:30:
ef:21:29:ba:88:34:7f:b7:8b:51:e1:5d:b2:44:61:23:59:80:
47:b1:54:a8:a2:21:58:83:a2:6c:5d:d8:51:e5:c2:81:cc:38:
5a:bd:76:bf:a7:b3:b1:8a:11:36:bd:d5:11:f7:94:ec:a9:0a:
9c:0e:ff:1e:9d:47:de:fc:9b:a6:5f:57:ec:65:86:63:fe:02:
39:7f:dc:44:5f:50:0f:43:13:d0:7e:70:04:cd:ea:24:11:c3:
4c:c6:a0:72:72:be:ca:e9:ad:57:30:16:15:70:16:18:47:70:
69:0d:f5:51:27:86:ee:a5:a0:37:d5:d9:41:e1:2e:71:f4:ec:
7f:34:4e:50:68:ee:fc:84:aa:97:65:fc:e9:6e:8e:94:af:d2:
26:c3:fc:3b:91:05:93:7b:8c:1d:44:53:ca:6f:1e:8e:54:c1:
a4:f8:85:32:02:23:da:61:44:79:9d:46:85:8e:21:e1:43:15:
3b:f6:1f:69:04:47:9c:33:01:a7:f2:cf:e9:5b:fe:76:bb:24:
e0:80:72:47:aa:e1:76:c3:a7:0f:14:58:c9:f2:7f:ed:0b:81:
5d:6d:b7:db
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJB
NzkzRDBGRkU2MTFBQzM5N0YxOTc1NzBFMTk3ODUwNDZFRTczOTAeFw0yMTAyMDcx
MTUyMzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU5QkYyOEI5RDZEQkIy
MDM3NjVDNzUxQkZEMDEzMjA4RTQxN0MwQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5mqI0j+OgOteHiy8YKuURn2FHBLKlLDMiBt8ETgdnmAR82urF
4fy5k3UYb8W/MyNME3i7Mfa9f5bvHf8Kz76+5cjb08h3PobIUjoJCZAZ9O2IhwnF
weY129g3Pb9kBk3bhzCraZiV2zLYpg19SdVZN9BylHJ1iI7y1RXoePWuCm7+act/
EU8ynT5Hgomk08xppeNnVWOcb6hSPRJMkCYfGmgfgzRUZQx0ixtOHft4Kf8iBt3o
C9BHgmzgLuFHvA6hLI9NieukjELQyOa05aLXhMmnxLJRCGDf++mDCgoJ0TG2v6BU
nQ5xQVN+jlwK9QWeBiiVW/UuvWzBKRQvkw13AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6b8oudbbsgN2XHUb/QEyCOQXwKYwHwYDVR0jBBgwFoAU26eT0P/mEaw5fxl1
cOGXhQRu5zkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1RCQy8y
NmVUMFBfbUVhdzVmeGwxY09HWGhRUnU1emsuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzI2ZVQwUF9tRWF3NWZ4bDFjT0dYaFFSdTV6ay5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0dUQkMvNmI4b3VkYmJzZ04yWEhVYl9RRXlD
T1FYd0tZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1DADAN
BgkqhkiG9w0BAQsFAAOCAQEAalHkYb3kqF8eYXmpCYrz46M5dTxmc1LwRmmNoKM8
UYjGcJUw7yEpuog0f7eLUeFdskRhI1mAR7FUqKIhWIOibF3YUeXCgcw4Wr12v6ez
sYoRNr3VEfeU7KkKnA7/Hp1H3vybpl9X7GWGY/4COX/cRF9QD0MT0H5wBM3qJBHD
TMagcnK+yumtVzAWFXAWGEdwaQ31USeG7qWgN9XZQeEucfTsfzROUGju/ISql2X8
6W6OlK/SJsP8O5EFk3uMHURTym8ejlTBpPiFMgIj2mFEeZ1GhY4h4UMVO/YfaQRH
nDMBp/LP6Vv+drsk4IByR6rhdsOnDxRYyfJ/7QuBXW232w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org