Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/p0TOj3EB6dX7P9kKRRlQGIi5gf0.roa
File: p0TOj3EB6dX7P9kKRRlQGIi5gf0.roa (raw, json)
Hash identifier: lbo/1f7QGFPAM+B+K7ZiDkfhedGCREmEuKKiLcrlRZ0=
Subject key identifier: A7:44:CE:8F:71:01:E9:D5:FB:3F:D9:0A:45:19:50:18:88:B9:81:FD
Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Certificate serial: 087D
Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/p0TOj3EB6dX7P9kKRRlQGIi5gf0.roa
Signing time: Tue 29 Sep 2020 10:04:45 +0000
ROA not before: Tue 29 Sep 2020 10:04:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131645
IP address blocks: 103.142.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Validity
Not Before: Sep 29 10:04:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A744CE8F7101E9D5FB3FD90A4519501888B981FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:39:ca:a7:ea:da:d0:97:88:8b:f8:62:a0:
c4:0e:42:64:c3:3a:f4:6e:0d:c4:0c:74:d6:98:be:
b2:c8:eb:e8:27:22:71:06:c1:5a:8b:07:52:c8:45:
47:ae:ca:02:c5:f7:03:31:3c:ae:03:e7:02:34:69:
b0:ce:0f:d9:d3:ec:4c:68:99:36:15:69:eb:a8:87:
ed:29:1c:37:3c:a6:80:75:31:84:6b:0a:c8:37:1c:
f0:e1:86:b6:2c:90:b1:50:f7:95:07:a4:be:6c:2c:
45:80:90:99:76:9f:4f:0a:a7:b1:74:6d:22:e7:19:
71:e0:5e:55:f9:12:88:4a:67:57:b3:e4:96:dc:29:
33:aa:3e:2f:d5:3b:65:7a:76:01:7c:ca:aa:46:54:
d1:bc:ec:f3:1a:a6:62:64:cc:ec:37:ba:93:94:9b:
a3:ad:4c:7c:c6:25:6d:ed:ee:f0:ad:af:1f:ee:d1:
b7:ac:2a:c5:31:44:e5:76:91:b6:6f:10:0e:6d:60:
5a:8e:bc:34:7d:7c:5b:23:ec:dc:cc:c6:65:57:06:
75:c9:38:06:c7:a3:c0:64:6e:d7:d5:21:e3:1d:e8:
1b:89:a8:c1:d0:de:b6:53:c4:8e:aa:21:a1:f8:9a:
a4:83:18:7b:05:01:91:49:88:0d:10:2d:1c:fc:9a:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:CE:8F:71:01:E9:D5:FB:3F:D9:0A:45:19:50:18:88:B9:81:FD
X509v3 Authority Key Identifier:
keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/p0TOj3EB6dX7P9kKRRlQGIi5gf0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:8f:a7:ed:fe:aa:d3:39:03:21:aa:a9:90:36:72:a1:71:94:
c6:f1:c9:f0:6f:c9:17:b4:4c:d1:2e:b3:ea:ba:d4:45:ff:b8:
bd:ba:cf:84:13:fa:4a:7a:1d:50:84:29:54:e0:69:11:2f:86:
65:b4:9b:d9:b6:a2:b2:7a:78:b0:15:7f:6d:0e:74:ea:a2:09:
a4:1c:14:83:2d:81:6b:37:a0:43:c9:37:33:b8:3e:24:d0:10:
5a:bf:e9:a6:0a:ed:c8:96:b0:94:7a:33:12:91:9e:f3:fb:00:
f4:d0:d2:77:b0:a3:4a:56:8a:b9:53:4f:59:ba:c1:23:a2:92:
7e:0f:98:d4:26:90:40:4e:22:0f:98:5d:cc:7e:37:9c:a2:e5:
f6:61:bf:df:90:21:61:21:a0:cb:6e:df:27:1e:8b:46:fb:53:
d1:fa:52:10:f5:99:87:10:32:f0:18:c1:44:27:e8:46:a3:6d:
ca:ca:1e:46:3c:e8:01:2b:fa:5c:f1:99:f2:32:fa:5d:97:9d:
b1:19:dd:8d:89:cb:c9:c1:56:53:74:b5:47:73:a3:e8:29:92:
64:45:09:6a:c9:31:1d:c2:90:6e:76:fc:18:3d:af:88:90:be:
09:73:ef:a8:19:3a:83:6c:8b:c7:00:c9:3f:be:df:57:3a:5d:
16:0c:b5:ab
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD
RkExODgwQUM4NkNFNEZCOTlGOTc0RTk5NTNGMzU5N0RDREUwQTAeFw0yMDA5Mjkx
MDA0NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE3NDRDRThGNzEwMUU5
RDVGQjNGRDkwQTQ1MTk1MDE4ODhCOTgxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxRjnKp+ra0JeIi/hioMQOQmTDOvRuDcQMdNaYvrLI6+gnInEG
wVqLB1LIRUeuygLF9wMxPK4D5wI0abDOD9nT7ExomTYVaeuoh+0pHDc8poB1MYRr
Csg3HPDhhrYskLFQ95UHpL5sLEWAkJl2n08Kp7F0bSLnGXHgXlX5EohKZ1ez5Jbc
KTOqPi/VO2V6dgF8yqpGVNG87PMapmJkzOw3upOUm6OtTHzGJW3t7vCtrx/u0bes
KsUxROV2kbZvEA5tYFqOvDR9fFsj7NzMxmVXBnXJOAbHo8BkbtfVIeMd6BuJqMHQ
3rZTxI6qIaH4mqSDGHsFAZFJiA0QLRz8mgA3AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUp0TOj3EB6dX7P9kKRRlQGIi5gf0wHwYDVR0jBBgwFoAU+8+hiArIbOT7mfl0
6ZU/NZfc3gowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tTTUYv
LTgtaGlBckliT1Q3bWZsMDZaVV9OWmZjM2dvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8tOC1oaUFySWJPVDdtZmwwNlpVX05aZmMzZ28uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1NNRi9wMFRPajNFQjZkWDdQOWtLUlJs
UUdJaTVnZjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ44q
MA0GCSqGSIb3DQEBCwUAA4IBAQCcj6ft/qrTOQMhqqmQNnKhcZTG8cnwb8kXtEzR
LrPqutRF/7i9us+EE/pKeh1QhClU4GkRL4ZltJvZtqKyeniwFX9tDnTqogmkHBSD
LYFrN6BDyTczuD4k0BBav+mmCu3IlrCUejMSkZ7z+wD00NJ3sKNKVoq5U09ZusEj
opJ+D5jUJpBATiIPmF3MfjecouX2Yb/fkCFhIaDLbt8nHotG+1PR+lIQ9ZmHEDLw
GMFEJ+hGo23Kyh5GPOgBK/pc8ZnyMvpdl52xGd2NicvJwVZTdLVHc6PoKZJkRQlq
yTEdwpBudvwYPa+IkL4Jc++oGTqDbIvHAMk/vt9XOl0WDLWr
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org