Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/ttMCghqG7iLFWt6g702kI1SgT4E.roa
File: ttMCghqG7iLFWt6g702kI1SgT4E.roa (raw, json)
Hash identifier: W8BpUy/Y5kdHg3ikIpa1OMmcmFghbvIALQdUcqiB7H4=
Subject key identifier: B6:D3:02:82:1A:86:EE:22:C5:5A:DE:A0:EF:4D:A4:23:54:A0:4F:81
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0A32
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/ttMCghqG7iLFWt6g702kI1SgT4E.roa
Signing time: Thu 15 Sep 2022 02:50:36 +0000
ROA not before: Thu 15 Sep 2022 02:50:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4781
IP address blocks: 210.63.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 15 02:50:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6D302821A86EE22C55ADEA0EF4DA42354A04F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:c2:30:d6:3b:1d:68:c4:9c:2b:7a:ac:98:
02:12:6f:6b:54:24:d4:28:09:bb:be:30:73:83:49:
7d:41:2d:46:22:2c:9a:48:f6:20:9c:fa:86:e3:92:
6b:55:78:02:2a:59:32:0a:3d:41:c5:a2:ff:2a:29:
f1:c7:8e:56:ea:cd:85:8b:71:77:fb:10:04:c7:f0:
42:f5:65:67:19:09:01:4f:f4:7d:53:3c:06:56:e1:
00:58:12:e5:85:c6:45:2f:da:75:b4:a1:e7:a8:eb:
1c:3e:a5:c5:7c:ef:b2:20:c0:86:11:4e:bc:2e:94:
af:4b:02:c4:16:f8:17:31:ab:e6:ef:89:a4:3c:3b:
91:4d:8f:3b:d0:ed:8c:e8:45:e9:c3:bc:ac:e8:93:
18:f8:2a:d2:bb:60:63:39:bc:57:93:9a:1e:52:df:
f1:4a:d8:ab:5d:c1:5a:50:2d:d0:33:91:c9:03:89:
72:03:7a:21:cb:6b:e4:bf:48:47:0b:86:0e:74:28:
ec:7c:1c:00:af:69:40:0a:0d:03:c8:79:bd:fa:51:
41:90:8b:98:2d:d0:6b:40:8e:14:00:b7:21:9a:da:
e0:8a:88:83:9a:74:6a:32:0f:91:de:a8:99:8b:c8:
00:28:91:01:2e:d6:00:bd:2a:3c:26:61:e7:f2:1d:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:02:82:1A:86:EE:22:C5:5A:DE:A0:EF:4D:A4:23:54:A0:4F:81
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/ttMCghqG7iLFWt6g702kI1SgT4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.103.0/24
Signature Algorithm: sha256WithRSAEncryption
32:50:d0:1a:9b:58:ca:6c:8c:46:94:5f:c8:0b:69:d8:dd:cc:
e6:0e:60:4e:5d:4c:c2:47:1b:c4:8c:a8:1e:dc:86:67:04:4b:
d4:a6:9f:f0:8e:39:62:e3:7c:33:07:78:56:4e:d1:97:63:9a:
ec:f2:a7:5c:75:27:ae:f1:e9:31:70:3e:ad:8a:b3:ce:3d:03:
8a:48:46:61:b8:c3:cc:36:d2:55:ba:ab:93:2f:04:a7:3e:7c:
f5:1b:bb:b9:1a:21:27:4f:66:f6:06:88:99:ad:78:49:28:26:
31:92:ab:cd:e8:f5:82:28:fc:42:ab:3f:36:46:fe:20:d9:eb:
00:8f:ae:90:e6:ab:1f:ea:19:bd:38:e8:56:40:c1:32:1c:0a:
1e:45:7b:73:db:5d:c7:29:b4:0e:ce:34:f6:51:fc:16:62:89:
37:1d:0e:33:96:d5:c3:53:87:e9:fb:28:fa:1a:5c:ba:23:e1:
6a:93:28:db:a8:78:f0:1e:d2:37:c9:5b:f4:b4:f6:c1:78:7c:
8e:c0:6c:18:db:6d:8a:06:aa:af:7b:0a:42:29:ed:1b:7d:0d:
ea:68:24:35:73:02:e7:58:8e:b0:e6:7a:9b:80:f3:25:7a:da:
d5:7f:35:dd:c1:91:18:b2:aa:c8:5a:e7:24:cd:e1:5a:4a:5b:
e2:af:f6:18
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5
QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yMjA5MTUw
MjUwMzZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI2RDMwMjgyMUE4NkVF
MjJDNTVBREVBMEVGNERBNDIzNTRBMDRGODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfHsIw1jsdaMScK3qsmAISb2tUJNQoCbu+MHODSX1BLUYiLJpI
9iCc+objkmtVeAIqWTIKPUHFov8qKfHHjlbqzYWLcXf7EATH8EL1ZWcZCQFP9H1T
PAZW4QBYEuWFxkUv2nW0oeeo6xw+pcV877IgwIYRTrwulK9LAsQW+Bcxq+bviaQ8
O5FNjzvQ7YzoRenDvKzokxj4KtK7YGM5vFeTmh5S3/FK2KtdwVpQLdAzkckDiXID
eiHLa+S/SEcLhg50KOx8HACvaUAKDQPIeb36UUGQi5gt0GtAjhQAtyGa2uCKiIOa
dGoyD5HeqJmLyAAokQEu1gC9KjwmYefyHUF1AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUttMCghqG7iLFWt6g702kI1SgT4EwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+
sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv
VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy90dE1DZ2hxRzdpTEZXdDZnNzAy
a0kxU2dUNEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9n
MA0GCSqGSIb3DQEBCwUAA4IBAQAyUNAam1jKbIxGlF/IC2nY3czmDmBOXUzCRxvE
jKge3IZnBEvUpp/wjjli43wzB3hWTtGXY5rs8qdcdSeu8ekxcD6tirPOPQOKSEZh
uMPMNtJVuquTLwSnPnz1G7u5GiEnT2b2BoiZrXhJKCYxkqvN6PWCKPxCqz82Rv4g
2esAj66Q5qsf6hm9OOhWQMEyHAoeRXtz213HKbQOzjT2UfwWYok3HQ4zltXDU4fp
+yj6Gly6I+FqkyjbqHjwHtI3yVv0tPbBeHyOwGwY222KBqqvewpCKe0bfQ3qaCQ1
cwLnWI6w5nqbgPMletrVfzXdwZEYsqrIWuckzeFaSlvir/YY
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org