Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/YVeKT6THWSn748RzaModNm1coLE.roa
File: YVeKT6THWSn748RzaModNm1coLE.roa (raw, json)
Hash identifier: DxbqdfDt6P8wcQXIYd7wW+PZDH+cp1t2Trh387OJsOo=
Subject key identifier: 61:57:8A:4F:A4:C7:59:29:FB:E3:C4:73:68:CA:1D:36:6D:5C:A0:B1
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0B7B
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/YVeKT6THWSn748RzaModNm1coLE.roa
Signing time: Thu 13 Apr 2023 09:09:24 +0000
ROA not before: Thu 13 Apr 2023 09:09:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 61.61.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2939 (0xb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Apr 13 09:09:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61578A4FA4C75929FBE3C47368CA1D366D5CA0B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:06:e7:6c:e8:ff:62:fc:77:7b:9c:c4:b1:
81:6b:2d:28:06:35:ce:89:99:2b:81:02:dd:5f:f5:
a0:45:d4:39:35:48:dc:58:30:98:b1:ba:61:19:76:
38:55:6c:3c:21:8e:15:f0:d9:08:7f:d4:14:e6:df:
34:08:a5:7b:b1:7e:39:d9:e0:cb:f2:0f:fc:ca:3d:
8f:4f:ae:7a:5d:6a:43:85:9a:6d:ee:9e:63:c6:ae:
35:30:e2:d7:d1:6a:f9:10:6b:66:c5:da:91:e8:ce:
ec:ed:e4:8d:48:5f:85:0f:98:e4:48:47:c2:f0:69:
25:ff:d4:14:63:5a:5d:d9:4e:fd:87:89:1b:92:97:
7b:23:65:aa:f2:07:f7:bd:22:41:5f:02:0a:e7:78:
41:0a:52:05:27:31:e7:91:84:ca:19:75:d0:22:2d:
67:aa:fa:1b:6d:c0:64:d2:b9:b4:59:e5:30:ee:1c:
b5:db:ec:41:9b:f6:6b:8c:89:b6:2c:c0:de:c3:56:
84:34:4a:07:fc:72:de:04:a8:8a:01:e4:6b:91:3f:
74:84:70:0b:e2:52:e4:5d:35:dc:17:fe:d3:5f:50:
e6:e3:e2:38:4f:d3:28:5c:98:f6:f1:a4:14:85:f7:
cc:fb:6f:d4:c5:81:37:46:b1:33:f7:cf:69:17:6d:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:57:8A:4F:A4:C7:59:29:FB:E3:C4:73:68:CA:1D:36:6D:5C:A0:B1
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/YVeKT6THWSn748RzaModNm1coLE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.152.0/22
Signature Algorithm: sha256WithRSAEncryption
48:1a:a3:43:a7:8d:70:98:06:d0:a1:f4:c6:e3:8c:c3:07:d5:
a3:0e:8d:97:98:20:f9:6a:bc:52:3c:c3:72:bd:b8:75:64:65:
99:7a:bf:fb:91:12:a0:a3:f4:2b:62:5f:3f:d8:8e:ae:5f:ce:
f3:37:a0:95:9e:39:92:ef:e5:b0:b3:75:ad:8f:f0:9d:03:cc:
3c:09:7b:f2:5e:3a:e5:96:4c:49:ad:ec:ec:17:4b:11:de:41:
03:bc:6e:83:00:dc:6c:4d:88:61:43:9b:c2:95:a8:1a:f1:8b:
e2:c2:88:6b:f0:9b:5d:8d:7b:60:3f:aa:8f:19:a0:3f:b6:27:
4f:07:41:d0:0b:c0:47:6a:88:b5:1c:99:7f:44:9c:ee:57:a8:
43:3c:12:11:3f:63:bd:d6:04:1e:52:8c:00:40:22:6c:6a:fa:
32:ec:3d:87:02:42:8c:ab:d9:df:fd:51:5c:cd:0e:ea:42:3a:
8f:8a:b7:29:47:e2:e5:82:d1:cf:c2:b0:9e:d5:46:e0:ad:27:
b1:ac:90:78:af:ca:2b:48:62:06:60:00:fb:1e:6a:88:02:70:
d3:6f:06:21:b0:43:35:ac:3c:62:9d:ad:9d:50:ca:a5:a5:94:
e6:f0:85:57:ca:89:0b:ba:29:06:1f:98:15:b1:a9:4e:0f:a0:
63:e0:96:c8
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA0MTMw
OTA5MjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYxNTc4QTRGQTRDNzU5
MjlGQkUzQzQ3MzY4Q0ExRDM2NkQ1Q0EwQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDawbnbOj/Yvx3e5zEsYFrLSgGNc6JmSuBAt1f9aBF1Dk1SNxY
MJixumEZdjhVbDwhjhXw2Qh/1BTm3zQIpXuxfjnZ4MvyD/zKPY9PrnpdakOFmm3u
nmPGrjUw4tfRavkQa2bF2pHozuzt5I1IX4UPmORIR8LwaSX/1BRjWl3ZTv2HiRuS
l3sjZaryB/e9IkFfAgrneEEKUgUnMeeRhMoZddAiLWeq+httwGTSubRZ5TDuHLXb
7EGb9muMibYswN7DVoQ0Sgf8ct4EqIoB5GuRP3SEcAviUuRdNdwX/tNfUObj4jhP
0yhcmPbxpBSF98z7b9TFgTdGsTP3z2kXbfZDAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUYVeKT6THWSn748RzaModNm1coLEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1lWZUtUNlRIV1NuNzQ4UnphTW9kTm0x
Y29MRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PZgwDQYJ
KoZIhvcNAQELBQADggEBAEgao0OnjXCYBtCh9MbjjMMH1aMOjZeYIPlqvFI8w3K9
uHVkZZl6v/uREqCj9CtiXz/Yjq5fzvM3oJWeOZLv5bCzda2P8J0DzDwJe/JeOuWW
TEmt7OwXSxHeQQO8boMA3GxNiGFDm8KVqBrxi+LCiGvwm12Ne2A/qo8ZoD+2J08H
QdALwEdqiLUcmX9EnO5XqEM8EhE/Y73WBB5SjABAImxq+jLsPYcCQoyr2d/9UVzN
DupCOo+KtylH4uWC0c/CsJ7VRuCtJ7GskHivyitIYgZgAPseaogCcNNvBiGwQzWs
PGKdrZ1QyqWllObwhVfKiQu6KQYfmBWxqU4PoGPglsg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org