Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/zv-amXPMoWs6i2xxMBfeZAZw-Ps.roa
File: zv-amXPMoWs6i2xxMBfeZAZw-Ps.roa (raw, json)
Hash identifier: mK/XnWbh6B7V9rZLiTn7B8Bofoxfr6wjuzPC3qg54IE=
Subject key identifier: CE:FF:9A:99:73:CC:A1:6B:3A:8B:6C:71:30:17:DE:64:06:70:F8:FB
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 02A4
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/zv-amXPMoWs6i2xxMBfeZAZw-Ps.roa
Signing time: Thu 17 Dec 2020 07:19:12 +0000
ROA not before: Thu 17 Dec 2020 07:19:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9678
IP address blocks: 103.98.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Dec 17 07:19:12 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CEFF9A9973CCA16B3A8B6C713017DE640670F8FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:5d:42:fe:63:28:d0:00:12:05:06:6f:fb:
d9:40:63:8f:a0:a7:02:93:ab:8f:a6:80:d1:22:74:
a9:1a:97:82:d0:ce:f6:b8:b9:fa:d3:a9:0c:54:f3:
82:01:60:1b:e8:9a:24:a3:f5:a6:b2:07:79:f8:23:
ec:a2:a3:34:32:d1:d0:6f:4c:f7:72:08:97:c0:7b:
51:a5:8a:67:5e:8e:3c:5f:91:74:d9:5d:02:2b:e9:
c1:e9:04:67:15:60:1b:da:ea:02:19:8a:25:23:d4:
ac:72:37:04:4f:fb:44:d8:aa:71:b9:fc:01:16:70:
82:de:06:af:bc:2c:14:5b:d0:6a:81:5e:7e:20:f8:
d4:11:9a:34:c2:a0:d7:81:33:9f:72:bc:0c:c8:f1:
f3:43:e3:bc:12:0d:fd:17:dd:0f:46:11:19:06:da:
e9:6c:33:9b:66:49:19:f4:71:9b:2a:73:3d:cb:38:
ce:3d:96:12:f2:ef:d9:09:2d:4a:0c:92:73:2a:ba:
81:1b:50:fd:84:d7:36:e8:71:27:30:b5:af:ab:d0:
0a:41:45:15:65:12:30:e9:c8:50:6f:2a:0d:51:cc:
a9:66:14:a4:a3:1a:95:dc:38:1e:55:b1:95:83:ce:
da:6e:b9:95:21:0a:1f:78:28:60:3e:32:c7:54:69:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FF:9A:99:73:CC:A1:6B:3A:8B:6C:71:30:17:DE:64:06:70:F8:FB
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/zv-amXPMoWs6i2xxMBfeZAZw-Ps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c8:be:bf:13:af:93:be:52:d3:d0:d8:df:c9:a0:bf:27:f4:
71:b0:d4:fe:c4:5d:46:4a:0a:a3:42:8c:c8:26:c2:77:4d:cb:
db:2e:41:a3:31:9c:d3:38:58:dd:99:45:61:fe:72:43:1a:bc:
47:6c:60:ff:f3:49:f6:ae:56:ba:79:8c:25:f8:48:e1:62:fe:
11:53:d5:cd:0d:10:12:fe:52:25:63:1c:29:6c:85:8b:c0:2f:
2f:45:6f:dc:09:49:23:08:63:00:bc:59:d0:61:8d:6a:53:e0:
1d:74:6e:83:cc:09:f5:a3:f5:f1:20:bc:d7:cf:1f:fb:27:e8:
73:6a:e7:03:35:1e:c7:81:51:15:9d:91:bc:b5:93:1f:b9:2a:
54:50:ed:79:39:b2:35:55:58:16:ca:49:03:35:15:fc:5d:8c:
c3:b4:30:35:85:81:13:8d:27:b9:1d:78:fa:7a:fc:59:1a:94:
1d:58:2e:34:79:d0:88:a7:75:76:8d:9c:6a:cc:2a:07:39:5b:
3b:c4:96:8a:7a:4a:a2:c5:ce:af:15:8d:53:6c:bf:e5:bf:69:
e2:ed:c7:bb:69:d2:e4:14:fd:7f:be:1c:e9:dc:5c:10:95:d8:
ea:84:53:ff:ef:d1:0b:6c:08:cd:a8:58:8d:97:0b:d8:7b:e8:
6c:49:7c:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF
RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yMDEyMTcw
NzE5MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENFRkY5QTk5NzNDQ0Ex
NkIzQThCNkM3MTMwMTdERTY0MDY3MEY4RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiEV1C/mMo0AASBQZv+9lAY4+gpwKTq4+mgNEidKkal4LQzva4
ufrTqQxU84IBYBvomiSj9aayB3n4I+yiozQy0dBvTPdyCJfAe1GlimdejjxfkXTZ
XQIr6cHpBGcVYBva6gIZiiUj1KxyNwRP+0TYqnG5/AEWcILeBq+8LBRb0GqBXn4g
+NQRmjTCoNeBM59yvAzI8fND47wSDf0X3Q9GERkG2ulsM5tmSRn0cZsqcz3LOM49
lhLy79kJLUoMknMquoEbUP2E1zbocScwta+r0ApBRRVlEjDpyFBvKg1RzKlmFKSj
GpXcOB5VsZWDztpuuZUhCh94KGA+MsdUaRc3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzv+amXPMoWs6i2xxMBfeZAZw+PswHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh
VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO
L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL3p2LWFtWFBNb1dzNmkyeHhN
QmZlWkFady1Qcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
YkowDQYJKoZIhvcNAQELBQADggEBAMDIvr8Tr5O+UtPQ2N/JoL8n9HGw1P7EXUZK
CqNCjMgmwndNy9suQaMxnNM4WN2ZRWH+ckMavEdsYP/zSfauVrp5jCX4SOFi/hFT
1c0NEBL+UiVjHClshYvALy9Fb9wJSSMIYwC8WdBhjWpT4B10boPMCfWj9fEgvNfP
H/sn6HNq5wM1HseBURWdkby1kx+5KlRQ7Xk5sjVVWBbKSQM1FfxdjMO0MDWFgRON
J7kdePp6/FkalB1YLjR50IindXaNnGrMKgc5WzvElop6SqLFzq8VjVNsv+W/aeLt
x7tp0uQU/X++HOncXBCV2OqEU//v0QtsCM2oWI2XC9h76GxJfKc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org