Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/q98bScxDw4x-mkgkpkYkZ-hF8Tc.roa
File: q98bScxDw4x-mkgkpkYkZ-hF8Tc.roa (raw, json)
Hash identifier: fT4dqLR8c2lQkW4Ys+V64Ei4+oKMAIQ69pZwPVyyZII=
Subject key identifier: AB:DF:1B:49:CC:43:C3:8C:7E:9A:48:24:A6:46:24:67:E8:45:F1:37
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C3B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q98bScxDw4x-mkgkpkYkZ-hF8Tc.roa
Signing time: Sun 07 Feb 2021 07:15:10 +0000
ROA not before: Sun 07 Feb 2021 07:15:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 60.245.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 07:15:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ABDF1B49CC43C38C7E9A4824A6462467E845F137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:f3:97:1e:4b:1f:dc:42:85:43:12:1b:25:
c5:78:18:08:b6:e1:8d:2a:2a:27:cf:46:06:44:b4:
bf:cd:29:5b:c2:02:dd:29:ac:10:83:7c:0a:5b:57:
44:1d:75:c4:9d:51:ca:22:69:f3:b6:cf:35:38:0c:
6e:10:e2:6d:22:52:07:a6:eb:aa:bd:9b:47:28:0f:
f9:ca:d7:d3:4e:b7:84:d1:35:56:e7:a3:61:96:3b:
48:b0:2d:6f:ef:3f:15:32:00:45:91:c7:20:f3:b2:
3d:72:fa:8b:1b:b6:c3:72:21:06:5e:78:f6:c8:5e:
8b:3c:2c:f8:5b:d7:92:31:c0:a2:08:c8:2a:ad:6d:
73:4b:89:b8:13:d5:2f:fb:58:db:56:56:03:55:57:
bb:fb:9c:46:c5:40:57:09:9f:3f:88:1c:14:4a:f9:
25:04:bd:e6:01:a0:3d:7e:81:2a:f5:2b:4a:2d:0e:
58:ff:a5:0c:8b:02:b3:a2:f1:c8:2d:09:68:ac:07:
d3:d5:10:e4:30:76:64:90:17:09:03:4e:9f:89:af:
93:16:cc:dd:2c:c5:0b:48:d2:bd:48:04:ae:00:36:
ec:4d:25:3d:99:58:b0:0f:91:0e:0d:da:19:79:c6:
af:cd:51:ee:0f:eb:45:c9:a0:1d:a8:ab:f9:59:c9:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:1B:49:CC:43:C3:8C:7E:9A:48:24:A6:46:24:67:E8:45:F1:37
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q98bScxDw4x-mkgkpkYkZ-hF8Tc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
15:f8:cd:b5:2e:c7:6a:2d:1b:ca:12:87:cf:07:cd:8f:02:f6:
76:11:c1:a9:78:a3:b6:90:f3:35:d5:0a:2c:75:21:7a:35:6b:
2c:e1:2f:65:4e:78:f7:2f:f4:2e:96:6d:01:4e:9f:54:82:82:
35:10:85:10:d3:6e:f1:8b:ce:99:8b:0d:28:94:70:7d:b6:88:
6a:2c:03:b6:a1:d5:57:2a:2d:ec:25:4b:9c:62:fb:b2:06:f4:
fb:8a:0d:a4:af:55:eb:b4:27:26:9c:e0:59:49:47:68:f3:36:
33:99:c6:4d:fa:ca:e7:46:b5:92:cc:51:2b:79:16:0e:bf:64:
98:c7:49:4c:e8:46:ff:ba:8d:fa:f7:48:50:ce:34:7c:30:56:
d1:30:27:52:77:c2:11:67:03:1f:85:30:f0:28:c7:22:a1:eb:
ea:fc:a9:af:e3:6c:32:25:3d:b2:11:b5:d2:cd:70:cd:bc:b5:
73:50:3e:32:86:1e:31:2f:4f:bb:95:6c:cd:c4:38:77:9d:12:
14:ea:ef:be:e9:3f:d6:ea:f0:75:80:06:ea:e7:8c:f3:e7:13:
14:1a:39:1f:47:d7:1d:c3:ab:b7:c5:22:e5:61:55:a8:e9:4f:
5c:50:0c:39:5e:c9:4e:80:c7:60:fa:cb:ae:8c:5f:c1:a9:7b:
e1:ac:28:68
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NzE1MTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFCREYxQjQ5Q0M0M0Mz
OEM3RTlBNDgyNEE2NDYyNDY3RTg0NUYxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy7POXHksf3EKFQxIbJcV4GAi24Y0qKifPRgZEtL/NKVvCAt0p
rBCDfApbV0QddcSdUcoiafO2zzU4DG4Q4m0iUgem66q9m0coD/nK19NOt4TRNVbn
o2GWO0iwLW/vPxUyAEWRxyDzsj1y+osbtsNyIQZeePbIXos8LPhb15IxwKIIyCqt
bXNLibgT1S/7WNtWVgNVV7v7nEbFQFcJnz+IHBRK+SUEveYBoD1+gSr1K0otDlj/
pQyLArOi8cgtCWisB9PVEOQwdmSQFwkDTp+Jr5MWzN0sxQtI0r1IBK4ANuxNJT2Z
WLAPkQ4N2hl5xq/NUe4P60XJoB2oq/lZyd4xAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUq98bScxDw4x+mkgkpkYkZ+hF8TcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcTk4YlNjeER3NHgtbWtna3BrWWta
LWhGOFRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzz1eDAN
BgkqhkiG9w0BAQsFAAOCAQEAFfjNtS7Hai0byhKHzwfNjwL2dhHBqXijtpDzNdUK
LHUhejVrLOEvZU549y/0LpZtAU6fVIKCNRCFENNu8YvOmYsNKJRwfbaIaiwDtqHV
Vyot7CVLnGL7sgb0+4oNpK9V67QnJpzgWUlHaPM2M5nGTfrK50a1ksxRK3kWDr9k
mMdJTOhG/7qN+vdIUM40fDBW0TAnUnfCEWcDH4Uw8CjHIqHr6vypr+NsMiU9shG1
0s1wzby1c1A+MoYeMS9Pu5VszcQ4d50SFOrvvuk/1urwdYAG6ueM8+cTFBo5H0fX
HcOrt8Ui5WFVqOlPXFAMOV7JToDHYPrLroxfwal74awoaA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org