Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/oT1kmcKVXD8U9Q2FlEShMOhlVL8.roa
File: oT1kmcKVXD8U9Q2FlEShMOhlVL8.roa (raw, json)
Hash identifier: qr02jhsQzdDXgtmzCo3zzFz/L+FoGlowvZqyOrb/vdM=
Subject key identifier: A1:3D:64:99:C2:95:5C:3F:14:F5:0D:85:94:44:A1:30:E8:65:54:BF
Certificate issuer: /CN=8477B4B9FE729925D912C66D00B681DDA10A2A01
Certificate serial: 0A3D
Authority key identifier: 84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/oT1kmcKVXD8U9Q2FlEShMOhlVL8.roa
Signing time: Thu 15 Sep 2022 02:41:31 +0000
ROA not before: Thu 15 Sep 2022 02:41:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 103.117.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8477B4B9FE729925D912C66D00B681DDA10A2A01
Validity
Not Before: Sep 15 02:41:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A13D6499C2955C3F14F50D859444A130E86554BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:b0:35:aa:1e:4c:23:f5:aa:4b:82:8d:65:
2c:a1:9d:ef:54:18:01:a6:66:bb:a6:8f:23:bd:dd:
1d:a4:e1:7a:c5:a5:b4:68:e3:62:1e:21:65:a9:af:
f8:29:d0:12:87:d2:d6:8a:41:d4:d9:fc:24:56:97:
40:22:6a:35:fd:ba:f3:b4:71:0f:25:3b:bc:5e:41:
89:d8:74:6a:91:a4:f6:ed:2f:ea:0e:e8:8a:b0:18:
f6:29:0f:3e:0f:3b:f3:e5:9f:bb:99:32:7a:65:ac:
5b:da:2f:f3:d6:f9:92:82:2b:05:a7:7c:ec:92:ea:
41:20:16:f0:d5:d9:ea:28:b2:ff:7e:ac:80:9b:b5:
5f:90:71:8b:27:27:36:4c:ce:6c:c5:89:30:da:c5:
3f:6b:24:84:09:46:97:59:9b:41:01:33:f5:78:b0:
0f:b9:42:29:2e:b4:9a:d9:4c:f9:75:6e:5b:0a:cc:
f3:b9:4e:66:40:3c:97:93:cf:d8:fd:6b:29:1c:ff:
ee:b3:49:e0:3f:cd:08:a7:66:e6:8c:e1:68:fc:48:
c1:33:ed:ee:c4:e3:20:a9:a1:5c:3a:30:4d:8e:30:
45:6c:8a:7b:34:78:04:82:75:b3:4f:be:9f:e6:14:
f8:81:e0:59:dd:46:43:8e:5c:a1:68:76:75:65:88:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:64:99:C2:95:5C:3F:14:F5:0D:85:94:44:A1:30:E8:65:54:BF
X509v3 Authority Key Identifier:
keyid:84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/hHe0uf5ymSXZEsZtALaB3aEKKgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/oT1kmcKVXD8U9Q2FlEShMOhlVL8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.224.0/22
Signature Algorithm: sha256WithRSAEncryption
38:8a:82:4f:9a:33:37:f7:16:47:74:f9:74:60:db:fb:83:e0:
bd:43:0e:5d:66:80:77:3c:2c:a8:d0:23:ca:77:24:a5:95:bd:
5d:9c:8a:8b:bc:04:b5:9b:0e:3f:f1:82:2d:7b:a6:a8:06:de:
0c:da:0c:b7:ec:28:55:22:1a:c4:10:17:30:18:28:90:4a:6d:
76:51:b4:6d:16:8f:aa:de:4d:e3:16:db:d3:21:37:45:ef:d3:
eb:fa:d2:c8:7b:bd:2c:48:69:24:ea:b2:7d:f4:d6:1d:86:d8:
fd:e1:a0:ab:dc:3d:70:dd:32:31:22:88:a8:12:72:64:41:52:
d4:f4:32:36:36:18:2e:d5:0b:8d:bd:3f:e6:41:12:9b:44:12:
fa:c5:93:c6:ac:5e:63:b0:ac:59:75:a0:42:be:38:14:c2:7e:
84:27:31:7f:ec:a0:d6:5d:e4:2f:b9:90:68:e6:f8:3c:6f:a7:
e1:3b:95:2d:41:cb:b1:b3:3f:76:66:43:52:b5:63:fd:37:9d:
ba:e7:b0:fb:02:27:03:8f:1c:5c:cf:3f:3c:02:fa:e1:39:86:
7c:e6:cf:33:59:98:91:91:1e:6e:6c:d1:fb:86:83:26:31:83:
c5:31:5e:21:09:b0:95:ce:c5:53:ec:4a:ad:0a:e5:e6:9e:e6:
fb:f1:26:61
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODQ3
N0I0QjlGRTcyOTkyNUQ5MTJDNjZEMDBCNjgxRERBMTBBMkEwMTAeFw0yMjA5MTUw
MjQxMzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEExM0Q2NDk5QzI5NTVD
M0YxNEY1MEQ4NTk0NDRBMTMwRTg2NTU0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhMLA1qh5MI/WqS4KNZSyhne9UGAGmZrumjyO93R2k4XrFpbRo
42IeIWWpr/gp0BKH0taKQdTZ/CRWl0AiajX9uvO0cQ8lO7xeQYnYdGqRpPbtL+oO
6IqwGPYpDz4PO/Pln7uZMnplrFvaL/PW+ZKCKwWnfOyS6kEgFvDV2eoosv9+rICb
tV+QcYsnJzZMzmzFiTDaxT9rJIQJRpdZm0EBM/V4sA+5QikutJrZTPl1blsKzPO5
TmZAPJeTz9j9aykc/+6zSeA/zQinZuaM4Wj8SMEz7e7E4yCpoVw6ME2OMEVsins0
eASCdbNPvp/mFPiB4FndRkOOXKFodnVliCkNAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUoT1kmcKVXD8U9Q2FlEShMOhlVL8wHwYDVR0jBBgwFoAUhHe0uf5ymSXZEsZt
ALaB3aEKKgEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVJQ0lU
WTI2MC9oSGUwdWY1eW1TWFpFc1p0QUxhQjNhRUtLZ0UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL2hIZTB1ZjV5bVNYWkVzWnRBTGFCM2FFS0tnRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BFSUNJVFkyNjAvb1Qxa21jS1ZY
RDhVOVEyRmxFU2hNT2hsVkw4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmd14DANBgkqhkiG9w0BAQsFAAOCAQEAOIqCT5ozN/cWR3T5dGDb+4Pg
vUMOXWaAdzwsqNAjynckpZW9XZyKi7wEtZsOP/GCLXumqAbeDNoMt+woVSIaxBAX
MBgokEptdlG0bRaPqt5N4xbb0yE3Re/T6/rSyHu9LEhpJOqyffTWHYbY/eGgq9w9
cN0yMSKIqBJyZEFS1PQyNjYYLtULjb0/5kESm0QS+sWTxqxeY7CsWXWgQr44FMJ+
hCcxf+yg1l3kL7mQaOb4PG+n4TuVLUHLsbM/dmZDUrVj/Teduuew+wInA48cXM8/
PAL64TmGfObPM1mYkZEebmzR+4aDJjGDxTFeIQmwlc7FU+xKrQrl5p7m+/EmYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org