Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/JqMuJ2b-JvE6RLWcGQJuAkTBgl8.roa
File: JqMuJ2b-JvE6RLWcGQJuAkTBgl8.roa (raw, json)
Hash identifier: MOApWeUesxMz+4RkVTymC0TJr1SQ8doW+gAHNPHGCUA=
Subject key identifier: 26:A3:2E:27:66:FE:26:F1:3A:44:B5:9C:19:02:6E:02:44:C1:82:5F
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/JqMuJ2b-JvE6RLWcGQJuAkTBgl8.roa
Signing time: Thu 15 Sep 2022 02:49:49 +0000
ROA not before: Thu 15 Sep 2022 02:49:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 61.61.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=26A32E2766FE26F13A44B59C19026E0244C1825F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:42:0f:7a:43:a3:4f:60:64:43:9a:2c:38:
65:e9:ba:72:8c:81:9e:19:88:3c:b0:25:5a:bf:46:
73:12:98:f2:2b:34:68:c3:bb:5f:3b:6c:1d:a1:c7:
0b:b6:a2:50:78:62:7d:ae:52:23:1b:9c:c8:5a:80:
61:23:81:7c:ab:71:31:8f:30:06:27:19:d6:ac:3c:
7a:ab:92:d5:1f:fb:20:4c:3f:6d:3c:ec:bd:68:de:
48:4b:3f:bb:74:24:21:41:a5:7e:02:93:97:bf:89:
e1:2c:fc:04:2e:00:06:c1:97:e0:da:11:9b:4d:52:
15:c8:0c:04:94:8d:99:e2:7e:a9:e1:3d:3f:93:02:
89:57:2b:55:67:e0:6f:8d:90:9e:7c:1d:07:13:7e:
fc:3e:84:01:08:09:1f:fc:ca:91:85:da:94:1b:76:
44:0d:26:8b:dd:4a:50:fa:9b:fd:cd:f0:51:9d:fd:
c2:00:fb:b6:6b:8c:af:ae:c7:12:0a:87:1a:46:04:
d4:aa:9f:1c:f4:f3:8e:0b:ac:bd:68:90:82:e8:7f:
3a:8f:85:37:32:53:ba:6c:c2:83:6b:38:fe:42:63:
fe:8d:6e:ff:30:fb:d2:0d:07:93:1a:97:76:c4:16:
b5:e9:e4:e3:05:03:16:b3:21:55:06:0f:bf:4c:be:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:2E:27:66:FE:26:F1:3A:44:B5:9C:19:02:6E:02:44:C1:82:5F
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/JqMuJ2b-JvE6RLWcGQJuAkTBgl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.8.0/21
Signature Algorithm: sha256WithRSAEncryption
34:9c:f4:37:66:36:3d:ba:87:97:53:03:cb:1a:06:db:ca:7e:
9b:bd:79:04:bf:22:b2:e7:be:cb:b2:1a:15:12:82:f9:9c:fc:
23:b0:f6:df:ab:f8:9e:4e:86:1f:35:7f:e1:93:e1:8b:cd:b9:
59:38:9e:df:2f:e2:ca:8b:f1:de:8b:fb:82:6c:20:1b:20:bd:
d7:99:f1:b3:3c:3a:fc:8e:6c:db:36:97:ea:f6:5c:2e:b5:93:
32:f1:8e:3c:cc:8e:37:28:ff:e4:8d:5a:ad:de:03:4d:75:db:
c6:83:cf:6c:10:53:08:c2:f7:7f:b6:1f:97:83:50:5e:f5:59:
db:0d:7d:61:2b:45:f4:c2:fa:05:f2:e8:04:e4:32:35:64:5f:
6d:a6:22:c2:cf:60:fd:39:d6:93:fc:22:11:bc:df:aa:46:d7:
98:29:2a:99:ff:ee:46:8f:8f:da:34:eb:cd:ad:71:b3:0e:1e:
b7:ff:d9:5b:20:71:2f:4c:39:7c:0c:76:57:1c:1c:9a:9e:1a:
88:5c:7a:2b:51:72:6b:90:84:fc:4f:a3:cd:13:41:f2:58:05:
27:80:03:4e:4f:a5:36:a2:4c:29:5e:96:16:df:13:11:ac:36:
ab:cd:39:5a:3d:9c:b2:ba:1d:a0:7b:73:06:8b:a0:bb:22:5a:
cf:9e:8c:54
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMjA5MTUw
MjQ5NDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI2QTMyRTI3NjZGRTI2
RjEzQTQ0QjU5QzE5MDI2RTAyNDRDMTgyNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQZUIPekOjT2BkQ5osOGXpunKMgZ4ZiDywJVq/RnMSmPIrNGjD
u187bB2hxwu2olB4Yn2uUiMbnMhagGEjgXyrcTGPMAYnGdasPHqrktUf+yBMP208
7L1o3khLP7t0JCFBpX4Ck5e/ieEs/AQuAAbBl+DaEZtNUhXIDASUjZnifqnhPT+T
AolXK1Vn4G+NkJ58HQcTfvw+hAEICR/8ypGF2pQbdkQNJovdSlD6m/3N8FGd/cIA
+7ZrjK+uxxIKhxpGBNSqnxz0844LrL1okILofzqPhTcyU7pswoNrOP5CY/6Nbv8w
+9INB5Mal3bEFrXp5OMFAxazIVUGD79MvjIFAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUJqMuJ2b+JvE6RLWcGQJuAkTBgl8wHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0pxTXVKMmItSnZFNlJMV2NHUUp1QWtU
QmdsOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9PQgwDQYJ
KoZIhvcNAQELBQADggEBADSc9DdmNj26h5dTA8saBtvKfpu9eQS/IrLnvsuyGhUS
gvmc/COw9t+r+J5Ohh81f+GT4YvNuVk4nt8v4sqL8d6L+4JsIBsgvdeZ8bM8OvyO
bNs2l+r2XC61kzLxjjzMjjco/+SNWq3eA01128aDz2wQUwjC93+2H5eDUF71WdsN
fWErRfTC+gXy6ATkMjVkX22mIsLPYP051pP8IhG836pG15gpKpn/7kaPj9o0682t
cbMOHrf/2VsgcS9MOXwMdlccHJqeGohceitRcmuQhPxPo80TQfJYBSeAA05PpTai
TClelhbfExGsNqvNOVo9nLK6HaB7cwaLoLsiWs+ejFQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:40 2025 by rpki-client