Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/I5UJVPG4T5VVbASLTWh6a2pR0bE.roa
File: I5UJVPG4T5VVbASLTWh6a2pR0bE.roa (raw, json)
Hash identifier: Nwzrb4HG2KnQ+3FHYUt7WmWh8xEsSYcTDiYo4Y6Ap9I=
Subject key identifier: 23:95:09:54:F1:B8:4F:95:55:6C:04:8B:4D:68:7A:6B:6A:51:D1:B1
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/I5UJVPG4T5VVbASLTWh6a2pR0bE.roa
Signing time: Thu 15 Sep 2022 02:38:23 +0000
ROA not before: Thu 15 Sep 2022 02:38:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131668
IP address blocks: 103.152.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Sep 15 02:38:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=23950954F1B84F95556C048B4D687A6B6A51D1B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:9a:ba:c1:4e:ae:e1:1f:67:a3:86:c7:8d:
5a:7f:ec:ee:0c:be:e0:ae:e4:35:2a:1e:51:0c:74:
7f:19:a6:b2:1a:6b:aa:81:2e:83:32:21:fd:21:61:
99:c3:3d:fe:89:35:32:54:ce:ef:68:07:1d:2d:fd:
58:2f:c6:88:03:1a:c4:89:9c:a7:66:c2:79:0d:1a:
68:65:f3:72:56:22:c1:00:4b:97:73:da:54:ed:17:
81:49:1c:a3:26:a0:08:41:b4:7c:a0:25:0a:55:11:
08:0d:ce:be:cd:30:1f:94:65:f8:0e:0f:26:d0:b5:
76:19:01:8b:af:af:fb:d7:50:d8:ea:d2:df:cb:ab:
c1:3f:35:ae:fc:2f:26:81:35:e3:13:ad:7b:a6:ba:
25:c9:05:36:61:c9:33:c8:99:43:58:ae:ed:32:82:
9f:a0:85:61:f8:48:22:38:6d:7a:4b:f8:c1:78:7a:
80:80:24:41:85:00:40:f3:4d:c0:33:1f:7e:5e:e3:
66:d7:b2:6a:a9:e7:52:2b:41:cb:6b:68:67:8d:16:
e0:f3:1d:51:1e:27:35:20:0c:73:62:93:07:28:28:
f8:ad:00:62:61:78:20:dd:14:9a:f5:1d:3a:f0:30:
3c:68:ee:cd:06:f7:ec:85:91:2e:93:0d:18:a2:f5:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:09:54:F1:B8:4F:95:55:6C:04:8B:4D:68:7A:6B:6A:51:D1:B1
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/I5UJVPG4T5VVbASLTWh6a2pR0bE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:40:92:a1:29:f8:8b:6c:de:dd:e4:22:b2:ed:2f:f9:98:7e:
fc:84:08:dc:81:3a:df:98:da:f0:5b:c5:b7:8a:89:9d:b4:f0:
bd:1d:85:71:7b:1a:1f:2f:66:c2:8f:dc:4e:bc:ca:35:35:d9:
12:30:73:3a:1e:2b:c9:ca:41:ab:f4:82:da:63:e4:77:0c:3d:
69:c5:30:83:43:6e:88:9f:9f:65:3b:34:bb:07:36:0c:eb:56:
a2:5e:35:5d:35:1e:2f:0f:9c:02:60:69:f4:fd:8b:0d:04:ce:
8e:4b:fb:d2:4c:19:4d:7c:07:91:01:5c:8f:74:f4:12:cb:64:
f3:15:27:64:fd:84:73:10:eb:e4:3f:0d:68:2c:20:20:0b:f2:
39:a1:c7:cd:e6:4b:f9:66:97:4b:1f:0f:6d:c7:c0:17:9d:4b:
33:f4:e1:e8:8c:f8:64:a1:bd:4a:33:13:33:65:0f:8c:af:a5:
48:9f:35:20:7e:20:b1:1c:47:c6:e7:a5:26:38:24:6e:0e:d9:
a6:1a:24:bc:fa:12:14:74:c1:e8:f4:f2:af:3c:a9:4e:3b:45:
01:72:2b:0e:fd:1d:ec:7e:e8:00:63:12:13:54:c7:c1:c2:8e:
fe:b9:3e:70:eb:57:a6:20:8f:b0:c7:02:94:b0:af:6b:af:2b:
20:2f:76:f6
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMjA5MTUw
MjM4MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIzOTUwOTU0RjFCODRG
OTU1NTZDMDQ4QjRENjg3QTZCNkE1MUQxQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoppq6wU6u4R9no4bHjVp/7O4MvuCu5DUqHlEMdH8ZprIaa6qB
LoMyIf0hYZnDPf6JNTJUzu9oBx0t/VgvxogDGsSJnKdmwnkNGmhl83JWIsEAS5dz
2lTtF4FJHKMmoAhBtHygJQpVEQgNzr7NMB+UZfgODybQtXYZAYuvr/vXUNjq0t/L
q8E/Na78LyaBNeMTrXumuiXJBTZhyTPImUNYru0ygp+ghWH4SCI4bXpL+MF4eoCA
JEGFAEDzTcAzH35e42bXsmqp51IrQctraGeNFuDzHVEeJzUgDHNikwcoKPitAGJh
eCDdFJr1HTrwMDxo7s0G9+yFkS6TDRii9RDrAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUI5UJVPG4T5VVbASLTWh6a2pR0bEwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL0k1VUpWUEc0VDVW
VmJBU0xUV2g2YTJwUjBiRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnmMowDQYJKoZIhvcNAQELBQADggEBAF9AkqEp+Its3t3kIrLtL/mYfvyE
CNyBOt+Y2vBbxbeKiZ208L0dhXF7Gh8vZsKP3E68yjU12RIwczoeK8nKQav0gtpj
5HcMPWnFMINDboifn2U7NLsHNgzrVqJeNV01Hi8PnAJgafT9iw0Ezo5L+9JMGU18
B5EBXI909BLLZPMVJ2T9hHMQ6+Q/DWgsICAL8jmhx83mS/lml0sfD23HwBedSzP0
4eiM+GShvUozEzNlD4yvpUifNSB+ILEcR8bnpSY4JG4O2aYaJLz6EhR0wej08q88
qU47RQFyKw79Hex+6ABjEhNUx8HCjv65PnDrV6Ygj7DHApSwr2uvKyAvdvY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org