Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/fHGZvTfpClTE7HkTytRrWtrdYtk.roa
File: fHGZvTfpClTE7HkTytRrWtrdYtk.roa (raw, json)
Hash identifier: 49Bg9I6uqzh+QRqdp8i0byy6sdbIrF5DoHBdO85Tr1A=
Subject key identifier: 7C:71:99:BD:37:E9:0A:54:C4:EC:79:13:CA:D4:6B:5A:DA:DD:62:D9
Certificate issuer: /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Certificate serial: F0
Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/fHGZvTfpClTE7HkTytRrWtrdYtk.roa
Signing time: Thu 16 Jun 2022 07:27:17 +0000
ROA not before: Thu 16 Jun 2022 07:27:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38853
IP address blocks: 103.169.46.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Validity
Not Before: Jun 16 07:27:17 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7C7199BD37E90A54C4EC7913CAD46B5ADADD62D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fc:e3:32:e0:2a:bc:59:4d:45:11:de:61:14:
10:1b:44:e6:99:11:e7:ee:eb:ae:b7:bc:03:d4:1c:
ef:f5:e0:15:0b:d1:19:04:23:12:f9:e2:79:59:08:
71:00:07:3c:bc:e9:9a:b8:41:bc:11:a4:db:b6:36:
97:96:e6:e4:a4:f3:b5:90:a9:ae:d6:7d:0a:16:55:
9e:c7:8d:67:3f:55:5d:74:41:ab:9b:7e:92:db:39:
8f:09:7a:b6:97:70:3a:07:85:72:09:a2:44:9e:40:
64:0c:f3:cf:21:8a:1c:99:00:be:b1:0b:97:a3:87:
36:c5:05:ae:a7:df:a8:0e:4a:cb:3a:0d:d5:13:0c:
9d:8e:3f:c9:24:0b:b0:99:51:a3:0a:69:1f:89:3c:
5a:7f:b1:8e:13:a5:8a:b2:f3:c9:34:80:c7:ff:b7:
ee:27:47:14:18:29:26:ff:95:00:75:86:14:01:12:
1d:60:07:7e:0c:68:9c:c3:1c:05:00:b3:a6:0c:48:
d4:cc:61:f3:aa:48:90:ae:ca:ef:c8:ad:25:91:bd:
ee:17:44:6b:cc:9e:aa:ed:0b:78:93:5d:27:38:37:
3c:f9:ad:49:7f:fb:82:91:d4:d8:eb:45:52:28:fe:
2f:a0:94:bf:14:ea:88:9b:fa:fd:bb:1e:6c:25:89:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:99:BD:37:E9:0A:54:C4:EC:79:13:CA:D4:6B:5A:DA:DD:62:D9
X509v3 Authority Key Identifier:
keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/fHGZvTfpClTE7HkTytRrWtrdYtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.46.0/23
Signature Algorithm: sha256WithRSAEncryption
45:70:d6:d6:f0:30:ea:46:bf:4f:46:cb:ea:78:ed:d4:1a:46:
64:fd:ee:c5:44:a8:64:31:b7:38:a7:6a:5a:3d:47:0c:21:f6:
bf:64:7b:6a:68:86:d0:99:c8:b6:66:9d:aa:ee:a1:e2:61:21:
3f:e6:d1:1f:53:3a:28:0a:71:0d:ae:e9:75:d0:56:5d:a7:a7:
30:0e:91:c7:79:c9:10:dc:b6:8b:b2:86:6f:3e:18:37:ec:bc:
54:5e:82:28:7d:a4:66:b5:c3:6d:c8:5d:5f:c5:20:28:0b:fe:
fb:39:72:ac:d5:6b:53:2c:a7:3d:11:bb:ab:35:4a:87:fa:c5:
37:cf:19:f2:33:74:66:90:41:60:d2:5a:f5:21:00:b7:a7:d6:
46:e5:01:49:f2:4f:f4:3e:3e:42:a2:35:7c:ec:27:48:78:1b:
a2:f5:83:f8:a5:3f:f2:b1:d2:44:92:8a:1a:8f:b3:4f:0c:be:
07:b9:69:af:10:86:00:fa:bf:27:55:dd:a1:d2:01:75:53:26:
56:8f:30:bb:34:dd:55:ed:3b:26:f3:af:08:aa:c7:5a:41:57:
08:7f:2c:dc:7f:62:18:92:83:a4:48:f8:9b:8c:20:b6:4c:62:
15:74:c2:20:e8:72:d3:8f:bc:12:f4:c9:da:7a:b7:97:f3:37:
45:9f:e4:72
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I4
MjU3RkZEQzdDRDFDQjQxOTYxMjlDRDQwNDkzMzUyQkM4M0JCOTAeFw0yMjA2MTYw
NzI3MTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdDNzE5OUJEMzdFOTBB
NTRDNEVDNzkxM0NBRDQ2QjVBREFERDYyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx/OMy4Cq8WU1FEd5hFBAbROaZEefu6663vAPUHO/14BUL0RkE
IxL54nlZCHEABzy86Zq4QbwRpNu2NpeW5uSk87WQqa7WfQoWVZ7HjWc/VV10Qaub
fpLbOY8JeraXcDoHhXIJokSeQGQM888hihyZAL6xC5ejhzbFBa6n36gOSss6DdUT
DJ2OP8kkC7CZUaMKaR+JPFp/sY4TpYqy88k0gMf/t+4nRxQYKSb/lQB1hhQBEh1g
B34MaJzDHAUAs6YMSNTMYfOqSJCuyu/IrSWRve4XRGvMnqrtC3iTXSc4Nzz5rUl/
+4KR1NjrRVIo/i+glL8U6oib+v27HmwliSe9AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUfHGZvTfpClTE7HkTytRrWtrdYtkwHwYDVR0jBBgwFoAUe4JX/9x80ctBlhKc
1ASTNSvIO7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFSQU1J
VEEvZTRKWF85eDgwY3RCbGhLYzFBU1ROU3ZJTzdrLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9lNEpYXzl4ODBjdEJsaEtjMUFTVE5TdklPN2suY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQVJBTUlUQS9mSEdadlRmcENsVEU3
SGtUeXRScld0cmRZdGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ6kuMA0GCSqGSIb3DQEBCwUAA4IBAQBFcNbW8DDqRr9PRsvqeO3UGkZk/e7F
RKhkMbc4p2paPUcMIfa/ZHtqaIbQmci2Zp2q7qHiYSE/5tEfUzooCnENrul10FZd
p6cwDpHHeckQ3LaLsoZvPhg37LxUXoIofaRmtcNtyF1fxSAoC/77OXKs1WtTLKc9
EburNUqH+sU3zxnyM3RmkEFg0lr1IQC3p9ZG5QFJ8k/0Pj5CojV87CdIeBui9YP4
pT/ysdJEkooaj7NPDL4HuWmvEIYA+r8nVd2h0gF1UyZWjzC7NN1V7Tsm868Iqsda
QVcIfyzcf2IYkoOkSPibjCC2TGIVdMIg6HLTj7wS9MnaereX8zdFn+Ry
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org