Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/N2pz_4LYOlq8_2Vuv_SCb_XcjPs.roa
File: N2pz_4LYOlq8_2Vuv_SCb_XcjPs.roa (raw, json)
Hash identifier: FpG4L2xXSYXn9WInShh9nsBGpxG5hC8begunEL8bpJQ=
Subject key identifier: 37:6A:73:FF:82:D8:3A:5A:BC:FF:65:6E:BF:F4:82:6F:F5:DC:8C:FB
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 08B4
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/N2pz_4LYOlq8_2Vuv_SCb_XcjPs.roa
Signing time: Sun 07 Feb 2021 12:40:09 +0000
ROA not before: Sun 07 Feb 2021 12:40:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18179
IP address blocks: 211.78.240.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Feb 7 12:40:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=376A73FF82D83A5ABCFF656EBFF4826FF5DC8CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:9c:11:a7:2a:c0:d3:54:3a:65:04:b3:ac:
00:6a:17:23:d6:09:36:8b:98:d0:e5:68:56:d1:51:
5b:ac:97:5e:23:79:4a:29:a5:b4:6c:62:00:05:1a:
82:25:de:a9:c3:53:23:57:e7:a9:d7:9e:81:5e:8c:
64:8a:7b:57:fe:29:c2:21:1a:66:f2:49:34:19:cd:
d9:b2:73:92:40:80:49:3b:6f:18:fb:b7:79:bd:db:
54:90:54:95:fa:36:5a:80:21:38:2d:a4:f6:8c:e8:
e8:b9:73:f5:73:b7:f0:40:90:00:3e:43:b3:b9:e0:
a0:76:1d:fe:26:31:dd:e1:d2:7f:5e:35:78:6c:36:
32:1a:fa:51:83:45:f4:ec:2c:12:ce:c1:d2:01:5c:
62:4a:0a:63:ee:ea:de:03:7a:2c:61:9c:c1:7e:44:
5c:48:f0:2c:9d:5b:57:8d:1b:98:d0:53:5e:56:69:
36:ac:c3:5a:28:68:e9:42:e5:99:96:ca:71:2e:53:
7a:2d:e2:5f:3c:b4:bb:74:e7:df:9a:60:ac:e1:e5:
b8:70:9b:6b:75:54:d2:1d:66:9a:cc:8b:30:f7:38:
4b:0b:77:87:8b:96:79:cd:85:a7:0f:84:d4:bf:21:
fe:bd:d4:12:cd:38:71:55:63:43:a8:02:6d:4a:d3:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:73:FF:82:D8:3A:5A:BC:FF:65:6E:BF:F4:82:6F:F5:DC:8C:FB
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/N2pz_4LYOlq8_2Vuv_SCb_XcjPs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:df:fb:63:c5:21:11:fa:ac:94:16:29:18:ea:5e:88:53:1e:
aa:95:61:1e:40:f8:c4:89:da:1a:2c:c1:4c:ec:02:75:16:3a:
a2:f7:8b:5e:1a:8a:17:b9:95:16:74:af:4d:30:f5:5e:ce:45:
8e:74:f6:90:41:15:6a:d5:73:ed:c3:2e:a4:ed:2d:f9:4c:f4:
e1:5c:b8:36:56:6b:87:0f:78:cd:42:e4:e4:b5:b1:69:bd:3b:
c1:d0:97:b0:7a:6f:34:77:06:41:e1:52:7d:31:0b:fb:7a:dc:
fc:a6:1a:d5:ea:9b:77:a2:a3:68:1b:8e:65:b9:12:68:fe:0a:
83:ee:4c:80:1e:68:36:b7:1a:90:d7:37:e4:bd:6b:ec:e8:cf:
56:1f:6a:85:f6:1c:e2:06:50:27:43:f4:7d:73:46:c2:f8:1c:
8d:53:0f:b4:73:92:50:04:b0:31:8f:d2:03:87:b4:96:f4:8b:
28:12:98:69:03:4d:db:20:b5:8e:15:d8:1c:e8:c7:b6:ae:b4:
d3:51:1f:a6:41:fc:9c:65:bb:14:a3:00:8d:71:01:c7:d2:55:
48:d8:c6:b2:79:39:32:00:6a:f7:f3:5b:93:0e:ec:de:39:c4:
6d:2e:cc:ec:95:51:fa:72:11:b4:18:05:83:71:f9:e3:52:ee:
c5:6a:d9:9d
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2
QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yMTAyMDcx
MjQwMDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM3NkE3M0ZGODJEODNB
NUFCQ0ZGNjU2RUJGRjQ4MjZGRjVEQzhDRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3WJwRpyrA01Q6ZQSzrABqFyPWCTaLmNDlaFbRUVusl14jeUop
pbRsYgAFGoIl3qnDUyNX56nXnoFejGSKe1f+KcIhGmbySTQZzdmyc5JAgEk7bxj7
t3m921SQVJX6NlqAITgtpPaM6Oi5c/Vzt/BAkAA+Q7O54KB2Hf4mMd3h0n9eNXhs
NjIa+lGDRfTsLBLOwdIBXGJKCmPu6t4DeixhnMF+RFxI8CydW1eNG5jQU15WaTas
w1ooaOlC5ZmWynEuU3ot4l88tLt059+aYKzh5bhwm2t1VNIdZprMizD3OEsLd4eL
lnnNhacPhNS/If691BLNOHFVY0OoAm1K07dLAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUN2pz/4LYOlq8/2Vuv/SCb/XcjPswHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt
qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN
REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9OMnB6XzRMWU9scThf
MlZ1dl9TQ2JfWGNqUHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQE007wMA0GCSqGSIb3DQEBCwUAA4IBAQBt3/tjxSER+qyUFikY6l6IUx6qlWEe
QPjEidoaLMFM7AJ1Fjqi94teGooXuZUWdK9NMPVezkWOdPaQQRVq1XPtwy6k7S35
TPThXLg2VmuHD3jNQuTktbFpvTvB0Jewem80dwZB4VJ9MQv7etz8phrV6pt3oqNo
G45luRJo/gqD7kyAHmg2txqQ1zfkvWvs6M9WH2qF9hziBlAnQ/R9c0bC+ByNUw+0
c5JQBLAxj9IDh7SW9IsoEphpA03bILWOFdgc6Me2rrTTUR+mQfycZbsUowCNcQHH
0lVI2MayeTkyAGr381uTDuzeOcRtLszslVH6chG0GAWDcfnjUu7Fatmd
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org