Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa
File: GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa (raw, json)
Hash identifier: LNtVl5bFX+xGXGV64sdEj8WB1H+qMj9Ae8fdGKBCgY0=
Subject key identifier: 18:90:63:E0:1B:1D:67:58:4D:3F:C5:D4:BD:F6:49:DF:6D:20:7E:E9
Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Certificate serial: 0895
Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa
Signing time: Sun 07 Feb 2021 13:15:46 +0000
ROA not before: Sun 07 Feb 2021 13:15:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.197.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Validity
Not Before: Feb 7 13:15:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=189063E01B1D67584D3FC5D4BDF649DF6D207EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:d9:cb:53:33:44:1a:e7:67:ba:ed:09:87:
7d:3c:c6:57:0a:2b:61:fd:7e:41:f6:99:58:63:5b:
f8:97:23:fe:6b:b0:fc:d1:d2:fe:2f:b1:8d:cd:75:
2f:b7:b6:4b:c5:d7:78:2f:ab:57:a7:8c:5a:32:19:
a7:51:a5:9c:1e:6e:f5:3d:c5:d5:9b:b9:39:ce:88:
99:af:27:be:a7:82:87:62:ae:00:56:03:24:66:1c:
70:d9:76:61:84:b7:3b:a9:7e:74:0d:e0:e5:0c:fc:
02:c6:f6:f4:43:cd:89:01:01:56:5d:79:d0:ef:92:
11:bc:25:62:0f:70:d1:f2:8d:53:56:05:c2:3e:20:
25:94:1f:0e:8e:03:74:d4:f4:8b:04:19:03:bc:1b:
83:88:6c:5f:bf:57:6e:0c:24:2a:71:6e:04:2c:5a:
a9:28:fc:6c:ca:e1:e7:63:c0:9d:9a:ef:57:d3:8a:
36:57:8e:d6:15:58:f1:c2:04:cc:e4:e0:1d:72:cc:
77:b6:48:1b:bf:40:7d:af:a8:0d:12:70:0e:08:bb:
19:41:12:b0:32:dc:b0:29:1c:17:6d:47:29:f7:5c:
ae:32:83:33:cf:04:05:58:49:9f:f6:f4:c1:1a:fd:
c7:03:ae:88:b0:10:83:5d:c7:da:02:f9:73:35:47:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:63:E0:1B:1D:67:58:4D:3F:C5:D4:BD:F6:49:DF:6D:20:7E:E9
X509v3 Authority Key Identifier:
keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.172.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d3:b9:c8:f5:53:f3:b7:e1:4b:60:e8:e5:ca:0d:ef:d2:ac:
f6:e5:bc:dd:02:f2:ba:ea:fc:d4:3f:d1:b5:15:55:bf:61:8c:
d1:c5:4d:7f:0f:97:c2:6d:bd:2d:cc:ce:d5:25:da:05:ee:76:
c6:80:c0:c3:11:60:86:f0:b2:ea:98:9d:44:e2:78:f3:33:5e:
e4:67:ef:51:27:5b:76:3b:da:0a:b0:a4:14:08:8a:ed:16:5a:
7a:61:21:be:23:c0:ab:3e:f1:cd:ba:1f:5c:b8:2f:2c:1a:7d:
18:75:62:dd:48:20:03:98:82:18:ec:88:00:50:d5:53:89:8c:
cb:47:37:98:2e:ce:d0:19:db:7e:bb:f3:f9:a1:3f:2a:bc:f4:
38:24:aa:d4:29:1c:70:11:a2:83:00:6f:a6:c3:b9:5b:3d:3d:
c8:be:27:46:b4:28:94:b6:22:4f:1f:a0:38:05:df:5d:cd:2a:
bd:10:85:1a:72:40:3d:c3:fe:48:a8:3c:b5:5d:36:59:b4:27:
b8:d1:be:03:44:2c:5f:1e:f9:ed:f2:c9:1b:2b:c6:ef:6e:80:
c4:46:54:33:0b:2d:cb:62:0f:ba:c9:67:39:4e:6f:c8:95:11:
96:ee:64:cd:17:be:ab:42:9f:01:18:dc:b6:6a:1b:b1:ff:cd:
04:3a:78:4b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0
QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yMTAyMDcx
MzE1NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE4OTA2M0UwMUIxRDY3
NTg0RDNGQzVENEJERjY0OURGNkQyMDdFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4ddnLUzNEGudnuu0Jh308xlcKK2H9fkH2mVhjW/iXI/5rsPzR
0v4vsY3NdS+3tkvF13gvq1enjFoyGadRpZwebvU9xdWbuTnOiJmvJ76ngodirgBW
AyRmHHDZdmGEtzupfnQN4OUM/ALG9vRDzYkBAVZdedDvkhG8JWIPcNHyjVNWBcI+
ICWUHw6OA3TU9IsEGQO8G4OIbF+/V24MJCpxbgQsWqko/GzK4edjwJ2a71fTijZX
jtYVWPHCBMzk4B1yzHe2SBu/QH2vqA0ScA4IuxlBErAy3LApHBdtRyn3XK4ygzPP
BAVYSZ/29MEa/ccDroiwEINdx9oC+XM1R54dAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUGJBj4BsdZ1hNP8XUvfZJ320gfukwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs
hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB
WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvR0pCajRCc2RaMWhOUDhY
VXZmWkozMjBnZnVrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWfFrDANBgkqhkiG9w0BAQsFAAOCAQEAS9O5yPVT87fhS2Do5coN79Ks9uW83QLy
uur81D/RtRVVv2GM0cVNfw+Xwm29LczO1SXaBe52xoDAwxFghvCy6pidROJ48zNe
5GfvUSdbdjvaCrCkFAiK7RZaemEhviPAqz7xzbofXLgvLBp9GHVi3UggA5iCGOyI
AFDVU4mMy0c3mC7O0Bnbfrvz+aE/Krz0OCSq1CkccBGigwBvpsO5Wz09yL4nRrQo
lLYiTx+gOAXfXc0qvRCFGnJAPcP+SKg8tV02WbQnuNG+A0QsXx757fLJGyvG726A
xEZUMwsty2IPuslnOU5vyJURlu5kzRe+q0KfARjctmobsf/NBDp4Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org