Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DASko_N2SlQhnn5nfFILytHrG3s.roa
File: DASko_N2SlQhnn5nfFILytHrG3s.roa (raw, json)
Hash identifier: 8GXTKUY8XzEcYE17zLn+2XHMBvlaxLj48MsD6pWMUZ8=
Subject key identifier: 0C:04:A4:A3:F3:76:4A:54:21:9E:7E:67:7C:52:0B:CA:D1:EB:1B:7B
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0970
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DASko_N2SlQhnn5nfFILytHrG3s.roa
Signing time: Wed 29 Sep 2021 02:44:37 +0000
ROA not before: Wed 29 Sep 2021 02:44:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131593
IP address blocks: 43.251.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416 (0x970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 29 02:44:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0C04A4A3F3764A54219E7E677C520BCAD1EB1B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:39:12:9d:86:d5:28:ef:b1:a3:2b:6c:14:
8c:c3:5b:92:2f:7a:90:73:77:5a:0f:ef:e9:2c:7b:
ad:cb:31:9d:46:1f:49:b3:c2:54:64:78:c7:9d:90:
39:3b:2d:61:88:d9:ae:c6:ec:4f:60:71:10:be:8b:
12:76:4e:51:d4:6c:62:61:2c:27:a4:2c:ff:7a:67:
ea:1c:ba:a9:90:3c:1e:c2:a4:c5:4b:5d:95:cc:78:
73:f7:7e:51:62:84:60:87:9d:0c:dc:7e:93:8f:fe:
26:9a:05:37:97:d5:b8:bf:82:9c:82:04:11:ba:b4:
bd:ee:78:30:0d:3b:c0:be:16:7c:68:25:5e:89:26:
12:2a:18:80:83:43:bf:87:e7:15:2f:43:80:76:59:
1f:80:33:01:dc:25:dc:b0:30:54:36:97:5a:35:33:
42:cf:d4:ae:d9:ad:49:06:af:bd:6f:a1:10:79:26:
bc:0b:db:a7:f2:53:b3:12:ea:e4:fd:3f:56:fc:f3:
01:18:1f:3a:21:bd:61:84:92:a7:11:41:80:81:2e:
7f:68:0c:3b:77:fc:0b:42:21:e7:9a:e1:8a:9b:0a:
36:d7:7d:3d:b4:99:ee:5d:74:3a:0c:01:75:21:a9:
1d:ca:67:06:20:20:8b:31:50:23:47:cc:da:1b:b4:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:04:A4:A3:F3:76:4A:54:21:9E:7E:67:7C:52:0B:CA:D1:EB:1B:7B
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DASko_N2SlQhnn5nfFILytHrG3s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
28:95:bc:8f:2f:fb:e9:7e:96:bd:79:9e:e1:c3:b7:08:41:28:
a1:a2:74:2f:25:3d:27:7b:5a:d3:bb:df:58:67:f7:fe:90:32:
84:23:d6:25:dc:de:ab:d2:a9:eb:cf:27:74:97:34:a3:aa:e0:
b8:b1:c5:a8:d1:49:2d:36:8c:5b:d5:db:35:2e:20:4e:00:6f:
93:05:9b:32:65:87:72:53:81:8b:f9:0f:a5:18:c0:75:5c:2e:
52:a6:6b:63:fd:cd:9e:96:9d:c2:14:ab:1b:f9:aa:8e:10:97:
62:66:87:77:b4:56:c5:98:e9:94:ee:72:1b:e5:91:96:94:5d:
ab:39:19:71:be:f0:fa:12:03:13:20:5e:5d:2f:93:46:4d:49:
55:78:a9:f8:20:a6:62:49:85:7d:72:06:9c:9e:bd:39:27:56:
f8:89:8a:0f:e6:49:b3:a7:6c:8c:5f:2f:ff:ac:b8:6f:57:6d:
fa:9d:f2:96:6e:a2:b2:45:d5:bb:f1:5d:24:1b:71:72:04:ec:
05:45:66:b8:7d:24:e1:ad:23:3b:06:8e:06:26:00:58:9d:57:
54:a2:37:bb:26:11:4c:ca:1f:86:d1:ea:78:08:dc:20:6b:39:
1f:60:cf:25:36:0e:29:30:be:bf:1e:81:ea:50:0c:c1:dd:d9:
d9:9b:ac:2b
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yMTA5Mjkw
MjQ0MzdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBDMDRBNEEzRjM3NjRB
NTQyMTlFN0U2NzdDNTIwQkNBRDFFQjFCN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWJDkSnYbVKO+xoytsFIzDW5IvepBzd1oP7+kse63LMZ1GH0mz
wlRkeMedkDk7LWGI2a7G7E9gcRC+ixJ2TlHUbGJhLCekLP96Z+ocuqmQPB7CpMVL
XZXMeHP3flFihGCHnQzcfpOP/iaaBTeX1bi/gpyCBBG6tL3ueDANO8C+FnxoJV6J
JhIqGICDQ7+H5xUvQ4B2WR+AMwHcJdywMFQ2l1o1M0LP1K7ZrUkGr71voRB5JrwL
26fyU7MS6uT9P1b88wEYHzohvWGEkqcRQYCBLn9oDDt3/AtCIeea4YqbCjbXfT20
me5ddDoMAXUhqR3KZwYgIIsxUCNHzNobtGxpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUDASko/N2SlQhnn5nfFILytHrG3swHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9EQVNrb19OMlNsUWhu
bjVuZkZJTHl0SHJHM3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAK/s8MA0GCSqGSIb3DQEBCwUAA4IBAQAolbyPL/vpfpa9eZ7hw7cIQSihonQv
JT0ne1rTu99YZ/f+kDKEI9Yl3N6r0qnrzyd0lzSjquC4scWo0UktNoxb1ds1LiBO
AG+TBZsyZYdyU4GL+Q+lGMB1XC5Spmtj/c2elp3CFKsb+aqOEJdiZod3tFbFmOmU
7nIb5ZGWlF2rORlxvvD6EgMTIF5dL5NGTUlVeKn4IKZiSYV9cgacnr05J1b4iYoP
5kmzp2yMXy//rLhvV236nfKWbqKyRdW78V0kG3FyBOwFRWa4fSThrSM7Bo4GJgBY
nVdUoje7JhFMyh+G0ep4CNwgazkfYM8lNg4pML6/HoHqUAzB3dnZm6wr
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:58 2025 by rpki-client