Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/yz32C-9w73YA_FFjesGAtkjdLC0.roa
File: yz32C-9w73YA_FFjesGAtkjdLC0.roa (raw, json)
Hash identifier: OSmFknAqfsNYyQd3KBKeaZWujhtCAC4ma4bB5OUxR4Y=
Subject key identifier: CB:3D:F6:0B:EF:70:EF:76:00:FC:51:63:7A:C1:80:B6:48:DD:2C:2D
Certificate issuer: /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial: 0B23
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/yz32C-9w73YA_FFjesGAtkjdLC0.roa
Signing time: Fri 01 Sep 2023 09:11:02 +0000
ROA not before: Fri 01 Sep 2023 09:11:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18422
IP address blocks: 61.61.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2851 (0xb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Validity
Not Before: Sep 1 09:11:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CB3DF60BEF70EF7600FC51637AC180B648DD2C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:28:5d:59:7e:03:57:c9:95:88:69:4a:0b:
64:07:76:a0:a2:59:d9:a9:b5:98:4f:8f:a3:03:6e:
9d:6a:9b:05:04:4c:35:ad:f8:73:07:55:72:b8:ed:
60:93:ad:b6:9e:53:67:2d:7b:29:36:fc:6e:4e:5a:
1e:6e:78:ed:44:7d:60:d2:23:d8:71:da:d7:9b:a8:
4f:17:b4:86:aa:d7:9f:c0:b7:3f:ec:17:a6:5d:a9:
f9:06:9f:ab:ee:bf:c7:bd:d9:67:ee:10:8d:8c:30:
23:24:8b:80:3f:e0:5c:3f:a4:1a:ab:d7:0e:7f:9b:
f7:92:f4:08:4a:6c:5f:5b:9f:cb:28:65:b6:62:e8:
61:a3:0a:d9:9d:4a:fb:71:87:32:82:6a:e5:c4:bd:
ad:a3:b0:e6:dc:c0:d2:fc:7e:e8:2f:05:d6:e7:dc:
7c:88:64:c4:31:e9:76:56:5d:85:66:a4:12:d4:35:
60:43:9b:72:32:6d:40:9a:9b:12:f4:52:df:ea:ca:
aa:a3:78:b4:28:7e:5c:1b:74:09:29:c9:b8:ae:c3:
f3:69:10:5e:01:7e:f1:dc:5c:b2:22:c1:96:10:4e:
ef:ec:d0:99:4f:71:e7:fb:8f:29:7e:8b:2f:34:69:
cb:cb:b8:22:bc:1a:f3:6d:e9:98:c7:48:01:64:a4:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:F6:0B:EF:70:EF:76:00:FC:51:63:7A:C1:80:B6:48:DD:2C:2D
X509v3 Authority Key Identifier:
keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/yz32C-9w73YA_FFjesGAtkjdLC0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.240.0/20
Signature Algorithm: sha256WithRSAEncryption
35:56:d1:77:a8:4d:76:66:b5:71:6c:6f:95:37:0b:3c:59:e7:
08:f5:07:50:4a:e0:91:2c:ce:95:c5:30:4f:f8:4c:03:c4:e0:
85:65:64:17:9d:f0:89:84:c8:b3:ec:08:85:b5:7a:5b:a2:5d:
33:21:9e:44:c8:0f:eb:df:34:5f:ef:49:0f:68:f3:4e:34:05:
73:5d:c0:78:84:1b:f8:c9:1a:da:38:88:c5:d5:d2:d7:66:9b:
c4:e0:d9:31:ef:50:9b:16:8c:7b:2b:8e:c2:03:26:b3:38:e3:
ed:15:4f:c8:9d:10:c8:42:39:fd:15:d2:18:ab:86:16:c3:1c:
9b:50:5e:3d:92:ac:43:e0:ec:64:49:48:fc:72:f2:3c:80:65:
7b:94:ec:d2:36:4f:30:9c:86:bd:b3:27:3e:b3:fd:0f:01:14:
81:6e:0a:26:84:e3:a2:04:1d:a9:45:8c:5b:20:1f:8f:78:81:
7f:6b:6a:28:09:a0:44:e9:61:49:3c:75:ab:77:31:f9:15:a8:
e7:7e:7d:97:1b:ed:11:82:46:bf:97:8b:47:11:03:06:94:af:
57:58:1b:66:3e:bd:9c:b3:07:81:85:38:a0:43:63:4f:11:e0:
1f:7f:98:fe:07:3c:e9:c6:f6:b3:84:3d:a1:74:9b:f7:2d:88:
53:c2:05:c1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkY5
QkVDRkZFN0RBMDlDQTA1M0EyRjk2ODE0MTJCMTlGQjAwNEE3NDAeFw0yMzA5MDEw
OTExMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENCM0RGNjBCRUY3MEVG
NzYwMEZDNTE2MzdBQzE4MEI2NDhERDJDMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEGChdWX4DV8mViGlKC2QHdqCiWdmptZhPj6MDbp1qmwUETDWt
+HMHVXK47WCTrbaeU2cteyk2/G5OWh5ueO1EfWDSI9hx2tebqE8XtIaq15/Atz/s
F6ZdqfkGn6vuv8e92WfuEI2MMCMki4A/4Fw/pBqr1w5/m/eS9AhKbF9bn8soZbZi
6GGjCtmdSvtxhzKCauXEva2jsObcwNL8fugvBdbn3HyIZMQx6XZWXYVmpBLUNWBD
m3IybUCamxL0Ut/qyqqjeLQoflwbdAkpybiuw/NpEF4BfvHcXLIiwZYQTu/s0JlP
cef7jyl+iy80acvLuCK8GvNt6ZjHSAFkpPLpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUyz32C+9w73YA/FFjesGAtkjdLC0wHwYDVR0jBBgwFoAUL5vs/+faCcoFOi+W
gUErGfsASnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVRSSU5F
VC9MNXZzXy1mYUNjb0ZPaS1XZ1VFckdmc0FTblEuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0w1dnNfLWZhQ2NvRk9pLVdnVUVyR2ZzQVNuUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lUUklORVQveXozMkMtOXc3M1lBX0ZG
amVzR0F0a2pkTEMwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD098DANBgkqhkiG9w0BAQsFAAOCAQEANVbRd6hNdma1cWxvlTcLPFnnCPUHUErg
kSzOlcUwT/hMA8TghWVkF53wiYTIs+wIhbV6W6JdMyGeRMgP6980X+9JD2jzTjQF
c13AeIQb+Mka2jiIxdXS12abxODZMe9QmxaMeyuOwgMmszjj7RVPyJ0QyEI5/RXS
GKuGFsMcm1BePZKsQ+DsZElI/HLyPIBle5Ts0jZPMJyGvbMnPrP9DwEUgW4KJoTj
ogQdqUWMWyAfj3iBf2tqKAmgROlhSTx1q3cx+RWo5359lxvtEYJGv5eLRxEDBpSv
V1gbZj69nLMHgYU4oENjTxHgH3+Y/gc86cb2s4Q9oXSb9y2IU8IFwQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:42 2025 by rpki-client