Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/eG3itFGfS5sjtIb9EOFm8LWeE_w.roa
File: eG3itFGfS5sjtIb9EOFm8LWeE_w.roa (raw, json)
Hash identifier: ws4jQzBtWzSxX+TBVCbpI7eyu/5VaX0IzegO9KWI8m0=
Subject key identifier: 78:6D:E2:B4:51:9F:4B:9B:23:B4:86:FD:10:E1:66:F0:B5:9E:13:FC
Certificate issuer: /CN=DBA793D0FFE611AC397F197570E19785046EE739
Certificate serial: 094A
Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/eG3itFGfS5sjtIb9EOFm8LWeE_w.roa
Signing time: Wed 29 Sep 2021 02:45:17 +0000
ROA not before: Wed 29 Sep 2021 02:45:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18413
IP address blocks: 61.67.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739
Validity
Not Before: Sep 29 02:45:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=786DE2B4519F4B9B23B486FD10E166F0B59E13FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:dc:2f:15:8d:e8:3b:49:e8:a8:81:57:0b:
c4:44:f9:25:67:4c:e5:89:4f:17:37:a5:d6:ab:d7:
aa:06:f4:7a:06:4d:46:df:df:57:c2:fa:5e:0b:44:
6b:24:81:96:37:3c:32:90:ce:34:fa:fa:fe:62:e1:
78:41:9e:3e:1a:70:df:f2:d9:17:bc:cd:42:78:db:
23:15:94:90:d2:6c:aa:2c:79:b6:38:34:9e:f7:63:
84:a0:3b:b6:79:ec:70:44:5d:78:51:50:a9:b4:35:
c7:c3:ac:b5:48:37:ba:2f:2e:5f:e9:a9:f7:be:25:
02:4a:61:cf:84:c7:b6:e8:af:e4:e3:c4:e4:78:17:
98:21:6b:e4:5b:15:31:3f:9f:30:85:ed:bc:22:54:
e7:1d:65:b5:e3:bb:0e:7b:bb:82:80:9b:98:98:54:
f3:28:97:4c:a1:b4:08:c9:4f:a9:48:b1:c5:d2:c1:
38:c9:f0:22:3a:82:e1:44:69:f2:d4:63:a3:01:e3:
06:25:25:fb:fe:ff:6f:bb:00:ef:58:55:ab:98:60:
1c:a0:de:03:6b:9f:22:a8:44:a2:0d:b7:fb:9f:c9:
88:8a:74:82:70:75:2e:f3:29:9b:fe:54:a9:02:3b:
9e:d6:79:63:39:95:c4:14:b6:88:72:d9:cb:46:f9:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:E2:B4:51:9F:4B:9B:23:B4:86:FD:10:E1:66:F0:B5:9E:13:FC
X509v3 Authority Key Identifier:
keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/eG3itFGfS5sjtIb9EOFm8LWeE_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.0.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:4d:10:03:2d:dd:4f:68:2f:dd:2b:e9:1f:70:64:07:ca:00:
b5:ca:cc:68:bf:7d:10:4d:34:37:ff:e4:36:63:a3:6d:67:bd:
f9:c5:e9:b2:ab:63:89:3c:e2:0d:b4:34:36:8b:b2:b7:95:63:
25:ca:37:c3:6f:ae:93:54:8c:b3:a3:51:7a:2f:ba:cf:8d:61:
2d:0d:97:98:61:56:5c:a4:a5:90:ab:8a:af:a4:51:bf:8d:b0:
cd:66:9f:64:3e:4f:66:c1:4a:ac:15:4b:a5:1e:0e:49:63:3b:
97:cc:68:b5:39:45:c1:6e:15:b7:2a:bf:84:b0:8f:24:9c:f4:
2c:5a:6f:cb:d9:fb:c4:fa:64:0c:d5:1f:86:ea:99:22:12:62:
4e:4b:f0:5a:0a:52:76:0c:87:6c:5f:9d:f7:3a:f8:86:ae:e0:
80:2d:68:82:8a:41:f2:31:9d:58:c1:db:61:e0:19:e6:dd:06:
cb:a0:76:c7:69:43:92:56:7e:84:55:a6:87:0f:e1:72:37:6d:
82:a2:18:fb:8d:b6:a8:e2:d1:bd:9d:b9:ae:60:96:7a:d5:10:
04:46:7c:53:82:d3:50:b4:e3:2e:83:15:59:e3:b3:56:46:21:
85:e3:ea:da:07:ad:b3:de:c0:b9:3f:e7:c8:ad:24:01:ab:1f:
b5:ca:db:93
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJB
NzkzRDBGRkU2MTFBQzM5N0YxOTc1NzBFMTk3ODUwNDZFRTczOTAeFw0yMTA5Mjkw
MjQ1MTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc4NkRFMkI0NTE5RjRC
OUIyM0I0ODZGRDEwRTE2NkYwQjU5RTEzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7YdwvFY3oO0noqIFXC8RE+SVnTOWJTxc3pdar16oG9HoGTUbf
31fC+l4LRGskgZY3PDKQzjT6+v5i4XhBnj4acN/y2Re8zUJ42yMVlJDSbKosebY4
NJ73Y4SgO7Z57HBEXXhRUKm0NcfDrLVIN7ovLl/pqfe+JQJKYc+Ex7bor+TjxOR4
F5gha+RbFTE/nzCF7bwiVOcdZbXjuw57u4KAm5iYVPMol0yhtAjJT6lIscXSwTjJ
8CI6guFEafLUY6MB4wYlJfv+/2+7AO9YVauYYByg3gNrnyKoRKINt/ufyYiKdIJw
dS7zKZv+VKkCO57WeWM5lcQUtohy2ctG+XM1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUeG3itFGfS5sjtIb9EOFm8LWeE/wwHwYDVR0jBBgwFoAU26eT0P/mEaw5fxl1
cOGXhQRu5zkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1RCQy8y
NmVUMFBfbUVhdzVmeGwxY09HWGhRUnU1emsuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzI2ZVQwUF9tRWF3NWZ4bDFjT0dYaFFSdTV6ay5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0dUQkMvZUczaXRGR2ZTNXNqdEliOUVPRm04
TFdlRV93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1DADAN
BgkqhkiG9w0BAQsFAAOCAQEArE0QAy3dT2gv3SvpH3BkB8oAtcrMaL99EE00N//k
NmOjbWe9+cXpsqtjiTziDbQ0Nouyt5VjJco3w2+uk1SMs6NRei+6z41hLQ2XmGFW
XKSlkKuKr6RRv42wzWafZD5PZsFKrBVLpR4OSWM7l8xotTlFwW4Vtyq/hLCPJJz0
LFpvy9n7xPpkDNUfhuqZIhJiTkvwWgpSdgyHbF+d9zr4hq7ggC1ogopB8jGdWMHb
YeAZ5t0Gy6B2x2lDklZ+hFWmhw/hcjdtgqIY+422qOLRvZ25rmCWetUQBEZ8U4LT
ULTjLoMVWeOzVkYhhePq2gets97AuT/nyK0kAasftcrbkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org