Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/tg5_IEZl5vn89_VWMu1lBPVBuzo.roa
File: tg5_IEZl5vn89_VWMu1lBPVBuzo.roa (raw, json)
Hash identifier: afxy5W8UdNmaQcm/Q9Jkrploisv9YzSpyZJi6xMMhV8=
Subject key identifier: B6:0E:7F:20:46:65:E6:F9:FC:F7:F5:56:32:ED:65:04:F5:41:BB:3A
Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
Certificate serial: 0E77
Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/tg5_IEZl5vn89_VWMu1lBPVBuzo.roa
Signing time: Wed 29 Sep 2021 02:40:48 +0000
ROA not before: Wed 29 Sep 2021 02:40:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131634
IP address blocks: 103.127.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3703 (0xe77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
Validity
Not Before: Sep 29 02:40:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B60E7F204665E6F9FCF7F55632ED6504F541BB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:27:4f:9f:77:65:0f:67:22:30:1f:d6:4a:
4d:d0:89:8e:9a:dc:69:19:52:96:57:4d:6a:23:2c:
c6:37:9c:50:32:f0:ff:93:a2:a0:ef:60:b5:7c:d4:
4f:08:2f:49:9e:14:7a:a8:2c:a1:84:53:b3:61:40:
38:48:f3:8b:f0:c2:1c:0e:ff:87:96:81:62:3e:05:
d3:d0:be:66:39:f4:71:b9:41:e0:68:39:7d:13:22:
d7:92:91:83:8b:25:20:78:77:84:36:29:44:72:42:
e0:82:ac:2c:3c:2b:9d:ed:6e:bd:43:98:13:9e:26:
76:e2:2b:42:35:4a:c6:49:8a:7e:0c:fd:ef:f4:62:
7d:d6:38:44:75:55:ad:a5:f4:e9:16:80:ea:38:11:
85:72:02:33:f2:e5:81:fc:48:0a:46:94:88:3d:b9:
f7:f7:58:f0:86:16:e7:af:87:cd:7c:5a:33:e3:ad:
96:34:cf:9d:3d:54:59:63:4e:e2:e4:52:66:1f:87:
cf:3b:6f:fd:a6:0b:75:d7:e5:38:c5:e6:6d:07:57:
6d:d1:f7:3e:d2:8f:0d:04:b2:60:56:fb:10:21:e8:
d0:37:1a:18:60:57:d2:91:1b:f5:e2:3c:64:fc:37:
eb:41:56:78:20:fe:a8:f7:ab:61:b1:7a:36:68:75:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:7F:20:46:65:E6:F9:FC:F7:F5:56:32:ED:65:04:F5:41:BB:3A
X509v3 Authority Key Identifier:
keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/tg5_IEZl5vn89_VWMu1lBPVBuzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:9e:96:58:76:d8:80:c6:41:51:06:f9:8f:e0:11:b6:6d:f1:
5e:99:55:6b:ee:d4:97:25:9b:88:c7:18:cb:3e:36:b0:d4:aa:
71:a3:64:62:99:f7:fa:4d:bf:d0:90:d0:1a:be:81:a9:69:ad:
39:b3:d3:a9:5c:55:e5:ac:3e:4d:69:83:ba:18:3d:74:15:d9:
da:9b:29:e9:0b:5f:46:30:7e:82:40:fc:aa:da:b0:84:26:c8:
3c:8f:09:90:4e:6e:c5:a2:ec:bc:b4:f1:83:46:8d:af:61:c9:
5f:92:38:7d:e3:c2:96:2b:4f:65:ac:e9:37:7f:43:e9:c9:d0:
42:36:60:9b:c8:64:33:fc:8b:31:bb:8b:82:30:37:67:26:c6:
28:3e:d3:16:53:74:77:c2:14:56:fe:1e:d1:3b:cb:55:c3:b7:
3f:4e:21:d3:b8:c3:09:56:33:29:39:63:db:07:be:da:41:a8:
7b:20:aa:de:4d:2e:fb:a2:6c:4a:cc:87:8b:88:9c:81:a2:dd:
8e:2d:40:99:70:64:e4:85:f3:11:f2:61:a7:21:5e:17:50:4d:
c5:19:25:37:b8:36:9c:d5:85:05:ac:e6:64:48:b9:c4:a1:41:
88:de:d9:99:1a:61:8c:48:da:ce:80:21:80:1b:04:a8:08:60:
83:f4:29:c3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1
RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yMTA5Mjkw
MjQwNDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI2MEU3RjIwNDY2NUU2
RjlGQ0Y3RjU1NjMyRUQ2NTA0RjU0MUJCM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzuCdPn3dlD2ciMB/WSk3QiY6a3GkZUpZXTWojLMY3nFAy8P+T
oqDvYLV81E8IL0meFHqoLKGEU7NhQDhI84vwwhwO/4eWgWI+BdPQvmY59HG5QeBo
OX0TIteSkYOLJSB4d4Q2KURyQuCCrCw8K53tbr1DmBOeJnbiK0I1SsZJin4M/e/0
Yn3WOER1Va2l9OkWgOo4EYVyAjPy5YH8SApGlIg9uff3WPCGFuevh818WjPjrZY0
z509VFljTuLkUmYfh887b/2mC3XX5TjF5m0HV23R9z7Sjw0EsmBW+xAh6NA3Ghhg
V9KRG/XiPGT8N+tBVngg/qj3q2GxejZodQP5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtg5/IEZl5vn89/VWMu1lBPVBuzowHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2
+jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX
L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL3RnNV9JRVpsNXZuODlfVldN
dTFsQlBWQnV6by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
f+QwDQYJKoZIhvcNAQELBQADggEBALGellh22IDGQVEG+Y/gEbZt8V6ZVWvu1Jcl
m4jHGMs+NrDUqnGjZGKZ9/pNv9CQ0Bq+galprTmz06lcVeWsPk1pg7oYPXQV2dqb
KekLX0YwfoJA/KrasIQmyDyPCZBObsWi7Ly08YNGja9hyV+SOH3jwpYrT2Ws6Td/
Q+nJ0EI2YJvIZDP8izG7i4IwN2cmxig+0xZTdHfCFFb+HtE7y1XDtz9OIdO4wwlW
Myk5Y9sHvtpBqHsgqt5NLvuibErMh4uInIGi3Y4tQJlwZOSF8xHyYachXhdQTcUZ
JTe4NpzVhQWs5mRIucShQYje2ZkaYYxI2s6AIYAbBKgIYIP0KcM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org