Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/XjqjOPp1zPMIQZoQmNSRZhl1mMo.roa
File: XjqjOPp1zPMIQZoQmNSRZhl1mMo.roa (raw, json)
Hash identifier: nmueEs2RR7H/3xu1mGuNbQ7Q4/ia4pap16Bc2wXLGcE=
Subject key identifier: 5E:3A:A3:38:FA:75:CC:F3:08:41:9A:10:98:D4:91:66:19:75:98:CA
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 09D1
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/XjqjOPp1zPMIQZoQmNSRZhl1mMo.roa
Signing time: Wed 29 Sep 2021 02:52:15 +0000
ROA not before: Wed 29 Sep 2021 02:52:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 61.61.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 29 02:52:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5E3AA338FA75CCF308419A1098D49166197598CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:ba:d5:23:73:3c:2d:45:36:56:80:34:8c:
41:4a:75:ea:e8:a7:f6:76:20:87:0b:d4:6f:55:2a:
9f:44:33:63:5a:13:03:82:52:71:c7:ce:fa:38:53:
37:b4:b6:2c:d9:7e:91:5f:69:b0:1c:c8:29:ce:3a:
e4:dc:c0:2b:0c:67:2f:68:c9:b9:48:94:ed:9e:f7:
2c:91:a4:72:c6:e9:53:b3:c3:0d:fe:ba:73:e1:d4:
50:85:e8:2b:fc:31:7f:78:9f:93:5b:bd:d8:72:ee:
9e:ba:db:3f:fd:cd:48:11:a5:95:96:48:33:81:6f:
34:17:81:fe:78:a7:7a:0f:77:51:8e:1b:1b:52:6a:
b0:5b:ef:89:fe:85:3c:48:ee:83:26:94:01:35:8a:
e6:72:4e:0f:6b:cf:42:0c:81:f4:8d:fb:ad:54:92:
97:80:a9:7b:80:6f:1d:a5:e1:d1:0a:b1:8a:2f:94:
2b:ab:dc:9c:a6:a2:81:0a:76:cf:88:d4:ec:78:99:
1f:61:ee:ea:71:67:34:ce:f2:d5:69:2b:e9:d5:16:
da:7a:01:9a:af:8e:b4:66:52:9d:b0:4f:d0:e3:de:
09:fb:9a:63:08:eb:52:95:a9:27:f5:11:ad:f2:34:
f2:71:59:25:f9:72:1d:de:01:4c:70:18:a1:68:55:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3A:A3:38:FA:75:CC:F3:08:41:9A:10:98:D4:91:66:19:75:98:CA
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/XjqjOPp1zPMIQZoQmNSRZhl1mMo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.168.0/21
Signature Algorithm: sha256WithRSAEncryption
94:13:e9:56:d8:c4:b7:d9:20:0f:3f:e5:cf:34:c7:80:1f:fe:
c3:b7:75:df:40:38:ac:55:f3:bb:23:7c:c0:54:8e:d9:03:d6:
c0:76:8e:41:01:e2:3e:b6:d6:f4:15:1c:96:d9:98:33:8d:96:
0f:69:78:50:08:b3:2a:d5:a2:31:c4:a4:f4:64:79:84:50:92:
f5:75:c0:45:e1:cb:70:6b:86:42:79:c6:c7:3c:66:a6:49:a4:
c2:87:72:f4:8f:ad:e8:c0:95:97:ef:a0:9d:30:38:20:dc:30:
d6:b7:b1:a3:cb:95:a9:9d:95:2d:23:c1:5e:a0:55:31:3f:ba:
6e:2f:5a:ed:d8:f5:1d:5e:26:b2:9d:ef:7f:27:02:4a:a8:8b:
ba:bf:bf:b1:80:32:04:33:73:72:10:d2:53:ed:eb:79:bc:27:
6f:d8:f6:d8:01:cd:89:0a:25:3d:d9:ed:b6:6d:4c:c2:9f:02:
cb:df:d3:1c:a5:67:3c:e5:cc:1f:b4:dd:c5:bb:3c:1c:49:0f:
cb:d6:08:d0:97:47:b2:0c:c4:90:95:ac:5f:2b:8d:ee:f8:7e:
7c:0b:47:b6:6f:4e:f7:bd:ce:f5:a1:2b:8b:fb:fd:30:3c:c7:
7b:c8:c7:98:d6:64:8b:07:5e:3b:49:3d:f3:8f:f5:5e:bb:04:
6a:b5:bb:b0
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMTA5Mjkw
MjUyMTVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDVFM0FBMzM4RkE3NUND
RjMwODQxOUExMDk4RDQ5MTY2MTk3NTk4Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClhbrVI3M8LUU2VoA0jEFKderop/Z2IIcL1G9VKp9EM2NaEwOC
UnHHzvo4Uze0tizZfpFfabAcyCnOOuTcwCsMZy9oyblIlO2e9yyRpHLG6VOzww3+
unPh1FCF6Cv8MX94n5Nbvdhy7p662z/9zUgRpZWWSDOBbzQXgf54p3oPd1GOGxtS
arBb74n+hTxI7oMmlAE1iuZyTg9rz0IMgfSN+61UkpeAqXuAbx2l4dEKsYovlCur
3JymooEKds+I1Ox4mR9h7upxZzTO8tVpK+nVFtp6AZqvjrRmUp2wT9Dj3gn7mmMI
61KVqSf1Ea3yNPJxWSX5ch3eAUxwGKFoVVKvAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUXjqjOPp1zPMIQZoQmNSRZhl1mMowHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1hqcWpPUHAxelBNSVFab1FtTlNSWmhs
MW1Nby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9PagwDQYJ
KoZIhvcNAQELBQADggEBAJQT6VbYxLfZIA8/5c80x4Af/sO3dd9AOKxV87sjfMBU
jtkD1sB2jkEB4j621vQVHJbZmDONlg9peFAIsyrVojHEpPRkeYRQkvV1wEXhy3Br
hkJ5xsc8ZqZJpMKHcvSPrejAlZfvoJ0wOCDcMNa3saPLlamdlS0jwV6gVTE/um4v
Wu3Y9R1eJrKd738nAkqoi7q/v7GAMgQzc3IQ0lPt63m8J2/Y9tgBzYkKJT3Z7bZt
TMKfAsvf0xylZzzlzB+03cW7PBxJD8vWCNCXR7IMxJCVrF8rje74fnwLR7ZvTve9
zvWhK4v7/TA8x3vIx5jWZIsHXjtJPfOP9V67BGq1u7A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org