Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/nJRGEDRNoOaRAxhEVh1SLkVWp-0.roa
File: nJRGEDRNoOaRAxhEVh1SLkVWp-0.roa (raw, json)
Hash identifier: 9WJkJNWUd4Gz00hWq9zaGIrJivu1qsPOe+uDM/J6EIQ=
Subject key identifier: 9C:94:46:10:34:4D:A0:E6:91:03:18:44:56:1D:52:2E:45:56:A7:ED
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0B03
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/nJRGEDRNoOaRAxhEVh1SLkVWp-0.roa
Signing time: Mon 24 Jul 2023 09:19:18 +0000
ROA not before: Mon 24 Jul 2023 09:19:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17420
IP address blocks: 203.65.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Jul 24 09:19:18 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C944610344DA0E691031844561D522E4556A7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:62:70:4b:df:85:d2:d3:46:2d:4c:3e:96:
5b:19:49:12:ae:cd:c1:1e:a7:db:7c:83:c6:5a:73:
db:13:4f:43:df:d7:71:82:1d:10:8d:f4:a5:29:99:
ca:d3:2e:1a:9b:3b:52:43:96:2b:33:62:8a:c7:af:
8b:42:62:6e:67:84:b1:e9:33:58:a7:ea:12:db:64:
dd:a2:d5:f2:ad:58:c8:6a:3f:31:58:0a:4c:5d:0f:
af:5b:ad:05:0e:f4:a0:25:b3:0c:b4:89:54:2f:f1:
7a:26:6b:d9:dc:5c:2e:80:cf:53:f6:7f:a5:6a:a4:
64:77:3f:f2:98:b1:cb:72:01:a9:0f:fc:67:a9:39:
4d:b7:56:f8:1f:d3:a3:4b:6b:a5:d6:b8:27:11:09:
77:fc:87:cf:ca:42:1e:cd:80:68:cb:7a:d7:61:d7:
27:54:e8:36:6c:d0:df:35:90:a8:32:23:bd:3a:8e:
00:08:f2:12:4d:52:25:5f:9c:b0:8c:78:69:4d:7e:
96:8d:43:65:b9:bf:04:9f:77:27:75:59:d8:d8:d7:
8d:99:21:fd:ee:e1:a3:bc:66:f1:6c:59:0d:68:24:
09:15:35:11:2d:8c:d8:59:ce:a7:54:7d:3d:f3:5f:
bb:c7:2e:0e:1c:16:8a:9c:64:3f:0e:ae:f0:53:0f:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:46:10:34:4D:A0:E6:91:03:18:44:56:1D:52:2E:45:56:A7:ED
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/nJRGEDRNoOaRAxhEVh1SLkVWp-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
Signature Algorithm: sha256WithRSAEncryption
68:c4:af:83:dd:25:b5:98:5e:0f:0d:15:73:4e:c6:01:8f:ab:
80:a9:fa:09:e7:8a:73:fa:22:7d:4a:41:e0:b1:a4:38:5d:e5:
11:db:65:ea:78:86:2f:af:12:77:47:39:09:8e:f4:47:8b:e7:
a8:2d:b5:e7:21:26:41:e9:bc:09:fd:95:81:25:41:be:83:25:
7b:8c:bb:ab:4c:84:27:60:1f:a1:ea:81:fc:df:2d:70:e8:15:
40:74:fc:70:3b:a9:89:69:4a:11:68:4a:88:ae:38:5c:c5:2d:
79:6f:17:8a:9f:92:74:8e:d9:d2:8c:a9:e7:e1:9c:a3:3a:7c:
16:be:67:be:a7:64:1d:01:f8:db:99:3e:30:93:84:60:3b:15:
3b:be:be:bc:8e:27:75:38:73:5b:d1:5d:fb:95:83:e1:40:57:
cb:38:31:6d:ee:54:ac:4e:18:0e:23:54:12:43:8b:6c:4b:61:
fb:17:01:0f:a2:95:a3:46:98:16:f7:2c:1c:1e:ee:5d:eb:04:
7b:a2:54:38:5b:31:2d:64:f4:1d:b5:d3:a6:a4:4a:29:a9:14:
25:2f:c7:a5:79:46:e2:88:6a:46:14:65:21:11:aa:bd:d8:0d:
b8:1b:0e:b3:f8:37:60:68:de:55:65:01:4f:74:81:c2:d5:36:
63:9f:ec:34
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5
QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yMzA3MjQw
OTE5MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlDOTQ0NjEwMzQ0REEw
RTY5MTAzMTg0NDU2MUQ1MjJFNDU1NkE3RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcG2JwS9+F0tNGLUw+llsZSRKuzcEep9t8g8Zac9sTT0Pf13GC
HRCN9KUpmcrTLhqbO1JDliszYorHr4tCYm5nhLHpM1in6hLbZN2i1fKtWMhqPzFY
CkxdD69brQUO9KAlswy0iVQv8Xoma9ncXC6Az1P2f6VqpGR3P/KYsctyAakP/Gep
OU23Vvgf06NLa6XWuCcRCXf8h8/KQh7NgGjLetdh1ydU6DZs0N81kKgyI706jgAI
8hJNUiVfnLCMeGlNfpaNQ2W5vwSfdyd1WdjY142ZIf3u4aO8ZvFsWQ1oJAkVNREt
jNhZzqdUfT3zX7vHLg4cFoqcZD8OrvBTDyn9AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUnJRGEDRNoOaRAxhEVh1SLkVWp+0wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+
sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv
VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9uSlJHRURSTm9PYVJBeGhFVmgx
U0xrVldwLTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFy0HA
MA0GCSqGSIb3DQEBCwUAA4IBAQBoxK+D3SW1mF4PDRVzTsYBj6uAqfoJ54pz+iJ9
SkHgsaQ4XeUR22XqeIYvrxJ3RzkJjvRHi+eoLbXnISZB6bwJ/ZWBJUG+gyV7jLur
TIQnYB+h6oH83y1w6BVAdPxwO6mJaUoRaEqIrjhcxS15bxeKn5J0jtnSjKnn4Zyj
OnwWvme+p2QdAfjbmT4wk4RgOxU7vr68jid1OHNb0V37lYPhQFfLODFt7lSsThgO
I1QSQ4tsS2H7FwEPopWjRpgW9ywcHu5d6wR7olQ4WzEtZPQdtdOmpEopqRQlL8el
eUbiiGpGFGUhEaq92A24Gw6z+DdgaN5VZQFPdIHC1TZjn+w0
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org