Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/rBca4_EcW2pHACynSlAiJf9tr3M.roa
File: rBca4_EcW2pHACynSlAiJf9tr3M.roa (raw, json)
Hash identifier: 3fiM4Pn3+i+alRJgRjGm1I/n/eiCu+lyVogtu6F7cXo=
Subject key identifier: AC:17:1A:E3:F1:1C:5B:6A:47:00:2C:A7:4A:50:22:25:FF:6D:AF:73
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 078F
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/rBca4_EcW2pHACynSlAiJf9tr3M.roa
Signing time: Tue 29 Sep 2020 10:05:44 +0000
ROA not before: Tue 29 Sep 2020 10:05:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9676
IP address blocks: 61.63.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 29 10:05:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AC171AE3F11C5B6A47002CA74A502225FF6DAF73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:d1:90:7d:53:09:e2:fc:ce:96:39:36:18:
3f:e9:84:5e:2c:3f:b5:55:90:86:29:e2:3a:23:6a:
de:e9:c9:6a:a2:b5:fa:68:01:ee:36:38:15:17:37:
31:a6:91:f1:dc:33:c6:69:38:53:f9:27:82:ff:22:
0d:28:41:ab:de:ae:4a:55:f7:c1:d0:72:eb:79:e0:
83:bf:c7:c5:9c:e6:5c:5f:5a:de:0d:f6:76:34:7c:
e6:46:1a:c9:b4:0a:10:47:d0:57:5a:73:23:1e:7f:
b6:9b:1d:20:72:6b:0f:b8:a7:0d:0a:15:2e:12:7b:
af:66:d3:71:93:63:cf:f1:86:1c:3a:a5:97:58:6d:
34:75:e3:5b:89:d5:ed:dc:54:e4:15:e1:f2:cd:ec:
c2:24:af:be:fd:c4:73:59:cf:77:9c:15:56:bc:71:
5c:b5:f7:e5:2b:94:f9:ff:ce:e3:4f:b2:f0:70:13:
b3:96:57:a7:49:ba:37:d6:09:f5:a5:65:46:59:b8:
f3:87:c4:fe:dc:d2:c3:f4:57:27:af:2d:a9:5b:ab:
b7:9e:32:e5:dd:20:6f:6c:09:3e:19:c9:10:4d:67:
95:46:0e:a6:22:3f:d1:11:0e:9b:30:4d:72:81:51:
5f:d6:cc:86:28:58:fe:d4:54:6f:b8:e6:a7:f8:b7:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:1A:E3:F1:1C:5B:6A:47:00:2C:A7:4A:50:22:25:FF:6D:AF:73
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/rBca4_EcW2pHACynSlAiJf9tr3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:fa:d2:a8:9e:32:26:cf:12:61:22:e0:2c:ed:6b:48:77:8e:
cd:94:66:f2:7c:ea:b1:ef:9e:ae:47:25:4d:e5:07:2b:cd:6c:
10:35:ab:f7:37:f0:2f:45:71:0b:76:35:64:aa:17:d2:1b:9a:
24:65:6d:09:80:d6:05:7a:03:7a:c4:2a:4f:8e:4d:3e:e0:60:
f4:33:66:1b:84:ff:54:fc:c7:62:5a:4a:89:0f:aa:d1:10:e4:
c9:7a:56:85:f9:13:74:de:52:74:12:ab:47:45:00:d2:d6:45:
0c:78:9d:fc:3c:49:97:a8:a2:3d:67:7f:56:1f:b8:6d:42:d8:
0c:49:eb:ea:6a:1d:ad:5b:30:6c:3e:57:2f:f3:54:1f:a4:5f:
c5:33:7f:18:65:1f:1e:38:03:a2:0a:14:bd:f0:fb:1c:a8:bb:
7a:ff:e2:48:83:c0:39:f1:dd:d3:36:6a:ee:d4:b6:4d:75:4c:
a2:a9:57:e1:f7:cf:7a:30:ab:06:96:b5:f0:5f:22:86:eb:c6:
ac:15:05:07:32:61:1e:57:fe:b4:0b:c8:29:d9:6e:75:e6:cc:
a8:e0:d2:ec:d4:33:2d:0e:97:aa:b6:a0:01:aa:b4:af:72:e5:
e3:e8:cb:2c:9e:ce:de:66:3b:8c:3d:50:42:64:86:a8:32:c4:
7d:d1:40:d2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMDA5Mjkx
MDA1NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFDMTcxQUUzRjExQzVC
NkE0NzAwMkNBNzRBNTAyMjI1RkY2REFGNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhedGQfVMJ4vzOljk2GD/phF4sP7VVkIYp4jojat7pyWqitfpo
Ae42OBUXNzGmkfHcM8ZpOFP5J4L/Ig0oQaverkpV98HQcut54IO/x8Wc5lxfWt4N
9nY0fOZGGsm0ChBH0FdacyMef7abHSByaw+4pw0KFS4Se69m03GTY8/xhhw6pZdY
bTR141uJ1e3cVOQV4fLN7MIkr779xHNZz3ecFVa8cVy19+UrlPn/zuNPsvBwE7OW
V6dJujfWCfWlZUZZuPOHxP7c0sP0VyevLalbq7eeMuXdIG9sCT4ZyRBNZ5VGDqYi
P9ERDpswTXKBUV/WzIYoWP7UVG+45qf4tzxfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUrBca4/EcW2pHACynSlAiJf9tr3MwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vckJjYTRfRWNXMnBIQUN5
blNsQWlKZjl0cjNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Bj0/wDANBgkqhkiG9w0BAQsFAAOCAQEATfrSqJ4yJs8SYSLgLO1rSHeOzZRm8nzq
se+erkclTeUHK81sEDWr9zfwL0VxC3Y1ZKoX0huaJGVtCYDWBXoDesQqT45NPuBg
9DNmG4T/VPzHYlpKiQ+q0RDkyXpWhfkTdN5SdBKrR0UA0tZFDHid/DxJl6iiPWd/
Vh+4bULYDEnr6modrVswbD5XL/NUH6RfxTN/GGUfHjgDogoUvfD7HKi7ev/iSIPA
OfHd0zZq7tS2TXVMoqlX4ffPejCrBpa18F8ihuvGrBUFBzJhHlf+tAvIKdludebM
qODS7NQzLQ6XqragAaq0r3Ll4+jLLJ7O3mY7jD1QQmSGqDLEfdFA0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org