Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/85ZeiAkbAV86VX51l0K-FqogL9w.roa
File: 85ZeiAkbAV86VX51l0K-FqogL9w.roa (raw, json)
Hash identifier: UlJTP7o7XHaOBzZyg/qDJ5RQd5+kiA41grUxG+d/kng=
Subject key identifier: F3:96:5E:88:09:1B:01:5F:3A:55:7E:75:97:42:BE:16:AA:20:2F:DC
Certificate issuer: /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial: 018A
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/85ZeiAkbAV86VX51l0K-FqogL9w.roa
Signing time: Sun 07 Feb 2021 13:04:15 +0000
ROA not before: Sun 07 Feb 2021 13:04:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131677
IP address blocks: 103.152.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Validity
Not Before: Feb 7 13:04:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F3965E88091B015F3A557E759742BE16AA202FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:87:bc:92:fe:da:7e:99:be:b9:cb:1e:05:
a1:8c:76:d1:9a:69:67:f0:0c:10:1d:ee:21:0d:43:
59:cf:cd:27:e3:dd:6e:d8:77:3b:b8:20:ea:93:b1:
7a:97:e2:e9:d3:7c:07:a5:d9:22:95:f8:c4:64:45:
fe:b2:64:dc:7f:c7:66:97:1a:c9:ca:65:a6:a0:c0:
76:31:99:dd:49:16:b5:8a:17:f7:68:ef:91:de:d4:
6f:bb:8f:05:0b:67:96:ec:1e:b0:8a:37:ac:e6:34:
73:3a:d3:f4:8a:59:7a:08:63:27:c9:af:14:eb:31:
a8:01:16:5d:01:9b:d3:ad:84:48:b5:5b:b4:df:b0:
14:80:72:44:b2:de:f5:11:3f:8e:a1:ab:61:7e:fc:
f5:bc:87:1a:bb:ea:d8:76:c9:08:5f:e4:e8:81:4d:
2b:45:17:95:df:3e:ce:3e:6c:12:00:4b:17:0c:ac:
b3:22:ad:94:19:bc:47:11:0c:a9:d0:ed:ae:c9:3f:
55:18:a8:8e:f2:6a:84:d0:8f:7d:a6:da:b4:ea:ad:
a3:6c:aa:82:9d:11:6a:d6:e9:18:ac:12:c0:7a:3d:
a4:f5:01:76:29:c4:d4:a6:1e:08:a7:dd:7b:f6:b6:
cd:38:d1:e0:53:ee:a4:2c:f3:38:e6:49:d8:54:38:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:5E:88:09:1B:01:5F:3A:55:7E:75:97:42:BE:16:AA:20:2F:DC
X509v3 Authority Key Identifier:
keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/85ZeiAkbAV86VX51l0K-FqogL9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.252.0/23
Signature Algorithm: sha256WithRSAEncryption
56:be:e4:5b:0c:72:b6:32:7d:68:39:5e:3d:c0:1a:68:33:77:
5a:47:ca:fb:37:92:dc:23:5f:8a:a8:db:e7:e3:af:ba:82:3b:
50:cd:80:c3:cb:2c:88:e2:92:6b:df:49:31:61:d2:7d:7e:0c:
d9:91:7d:1e:fd:34:bf:4a:2a:83:91:bb:55:4a:43:20:d1:2e:
7c:73:44:12:f3:7e:88:0e:82:36:ac:4b:26:99:67:3e:73:4b:
67:43:70:52:21:5c:f2:dc:e0:65:4f:df:75:57:c5:51:a7:3c:
57:3d:10:27:1f:11:3f:5a:96:5b:a2:d3:95:8c:94:36:2a:f8:
c9:bf:f8:6c:16:80:9e:ac:9b:18:aa:e3:ac:43:84:90:4c:ef:
57:c2:f3:7a:b1:22:16:6c:3b:8d:71:e4:4d:7c:b9:b3:17:46:
c3:06:9f:01:36:57:22:be:05:b0:03:d8:7a:20:43:fe:a0:4e:
fe:cb:05:e7:5f:71:93:80:fc:3c:29:a2:82:e6:87:8b:56:40:
43:38:c6:b2:fd:81:d1:96:bd:07:25:76:ed:4d:c0:d7:4b:4c:
f5:13:e0:03:90:01:f4:be:de:6f:ac:3f:e6:e6:0e:7f:ab:28:
b1:3b:a2:8c:48:35:8b:c6:90:0f:85:db:a6:c9:39:6d:f7:fe:
0b:37:27:b4
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTE5
N0U5NzlBRkJCMUJFQzJFRkMyNjQ3MjA3NTYwNTYxQkU5MDBCNjAeFw0yMTAyMDcx
MzA0MTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYzOTY1RTg4MDkxQjAx
NUYzQTU1N0U3NTk3NDJCRTE2QUEyMDJGREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfFIe8kv7afpm+ucseBaGMdtGaaWfwDBAd7iENQ1nPzSfj3W7Y
dzu4IOqTsXqX4unTfAel2SKV+MRkRf6yZNx/x2aXGsnKZaagwHYxmd1JFrWKF/do
75He1G+7jwULZ5bsHrCKN6zmNHM60/SKWXoIYyfJrxTrMagBFl0Bm9OthEi1W7Tf
sBSAckSy3vURP46hq2F+/PW8hxq76th2yQhf5OiBTStFF5XfPs4+bBIASxcMrLMi
rZQZvEcRDKnQ7a7JP1UYqI7yaoTQj32m2rTqraNsqoKdEWrW6RisEsB6PaT1AXYp
xNSmHgin3Xv2ts040eBT7qQs8zjmSdhUOFB/AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU85ZeiAkbAV86VX51l0K+FqogL9wwHwYDVR0jBBgwFoAUkZfpea+7G+wu/CZH
IHVgVhvpALYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5GT1JJ
Q0gva1pmcGVhLTdHLXd1X0NaSElIVmdWaHZwQUxZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9rWmZwZWEtN0ctd3VfQ1pISUhWZ1ZodnBBTFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTkZPUklDSC84NVplaUFrYkFWODZW
WDUxbDBLLUZxb2dMOXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ5j8MA0GCSqGSIb3DQEBCwUAA4IBAQBWvuRbDHK2Mn1oOV49wBpoM3daR8r7
N5LcI1+KqNvn46+6gjtQzYDDyyyI4pJr30kxYdJ9fgzZkX0e/TS/SiqDkbtVSkMg
0S58c0QS836IDoI2rEsmmWc+c0tnQ3BSIVzy3OBlT991V8VRpzxXPRAnHxE/WpZb
otOVjJQ2KvjJv/hsFoCerJsYquOsQ4SQTO9XwvN6sSIWbDuNceRNfLmzF0bDBp8B
NlcivgWwA9h6IEP+oE7+ywXnX3GTgPw8KaKC5oeLVkBDOMay/YHRlr0HJXbtTcDX
S0z1E+ADkAH0vt5vrD/m5g5/qyixO6KMSDWLxpAPhdumyTlt9/4LNye0
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org