Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/A3k0SgINnzAgxmMMASqgM5iqKKo.roa
File: A3k0SgINnzAgxmMMASqgM5iqKKo.roa (raw, json)
Hash identifier: lpA5erc/pkD4BL6a6Vr4NscbwQmSNs2iJ/rV6P6QZKM=
Subject key identifier: 03:79:34:4A:02:0D:9F:30:20:C6:63:0C:01:2A:A0:33:98:AA:28:AA
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 078E
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/A3k0SgINnzAgxmMMASqgM5iqKKo.roa
Signing time: Tue 29 Sep 2020 09:53:04 +0000
ROA not before: Tue 29 Sep 2020 09:53:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 103.106.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 29 09:53:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0379344A020D9F3020C6630C012AA03398AA28AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:25:ab:56:4b:e7:56:b7:4e:06:17:e7:db:
13:e2:87:10:64:6d:d3:5c:32:ab:b4:08:f0:7c:7e:
cc:be:d4:fc:e9:e1:99:b5:3a:75:ed:0e:83:9b:01:
29:d7:38:1d:f9:ea:0d:83:49:e9:3a:13:12:7b:df:
c0:23:1d:3a:cb:01:43:f9:45:92:9a:60:77:8b:6d:
fe:d0:5e:98:f6:6e:60:df:f1:2a:57:99:d6:5c:65:
8b:d1:8e:f3:58:81:57:d9:91:31:e4:dd:74:17:ae:
17:f6:cf:8a:4c:0d:8f:d2:9c:34:9d:f2:33:ec:93:
8a:a2:7f:76:51:7d:de:99:32:b4:f6:81:6f:c3:20:
01:bd:f6:fb:3c:df:4f:a9:d5:35:02:3d:dd:10:fb:
a4:af:51:78:65:d3:e3:3d:bc:ca:dc:6d:f1:2d:52:
74:b7:29:3e:2b:de:70:93:4f:81:76:34:c0:5f:33:
ab:e6:15:ba:a1:13:5b:ea:98:d8:58:d6:fa:eb:a1:
fc:b6:af:e0:51:3c:0a:7a:7c:d4:c9:82:6a:cc:ae:
7a:be:a9:ea:e1:f4:f1:23:b4:90:73:1b:8b:e0:36:
70:d3:e3:dd:ae:2b:6a:7a:6e:ac:7d:4f:b0:83:91:
3e:ea:78:19:12:9c:f2:1a:ae:0e:48:07:f4:66:be:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:34:4A:02:0D:9F:30:20:C6:63:0C:01:2A:A0:33:98:AA:28:AA
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/A3k0SgINnzAgxmMMASqgM5iqKKo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.52.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:1e:0b:62:55:28:c2:fb:73:ce:b6:93:ae:80:ce:7c:dd:
57:6c:bb:d0:f1:d8:a8:e3:8d:a8:75:aa:ed:31:59:45:b3:16:
38:66:60:fa:b2:88:66:bd:10:01:58:c9:23:ea:b0:97:80:b5:
bd:40:92:a1:d5:79:04:c4:74:e3:2f:68:bf:d3:34:fb:26:e4:
57:2a:67:d0:61:7f:f1:29:e5:e1:bd:30:db:2f:64:56:a0:ed:
93:29:8a:38:bb:ff:3c:19:eb:f6:a3:e5:49:43:de:b5:a5:2b:
45:5d:cc:76:81:4e:1c:85:b6:f0:0a:26:76:88:bb:32:cb:de:
d1:df:56:91:1d:28:88:fa:ee:44:c0:50:23:d7:78:9d:c8:8e:
7b:b0:b4:cb:87:1b:a2:02:dc:01:c8:3d:d5:6b:bd:ac:20:f3:
14:28:7c:d5:6a:42:d8:af:81:b8:42:de:e4:23:1e:d7:dc:07:
e0:16:0d:f2:fb:0b:25:94:e1:17:e5:28:45:4b:1f:b0:3a:fa:
18:81:6d:63:8c:99:84:1d:af:61:55:90:9b:95:e8:83:86:f8:
e8:54:8c:78:3b:99:b3:5b:1e:c4:97:72:f8:b8:98:df:0c:ac:
3a:1f:d6:d1:b3:94:89:a0:ae:b0:b4:96:c8:49:06:90:16:33:
92:3e:1f:43
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICB44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMDA5Mjkw
OTUzMDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAzNzkzNDRBMDIwRDlG
MzAyMEM2NjMwQzAxMkFBMDMzOThBQTI4QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxQyWrVkvnVrdOBhfn2xPihxBkbdNcMqu0CPB8fsy+1Pzp4Zm1
OnXtDoObASnXOB356g2DSek6ExJ738AjHTrLAUP5RZKaYHeLbf7QXpj2bmDf8SpX
mdZcZYvRjvNYgVfZkTHk3XQXrhf2z4pMDY/SnDSd8jPsk4qif3ZRfd6ZMrT2gW/D
IAG99vs830+p1TUCPd0Q+6SvUXhl0+M9vMrcbfEtUnS3KT4r3nCTT4F2NMBfM6vm
FbqhE1vqmNhY1vrrofy2r+BRPAp6fNTJgmrMrnq+qerh9PEjtJBzG4vgNnDT492u
K2p6bqx9T7CDkT7qeBkSnPIarg5IB/RmvgMlAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUA3k0SgINnzAgxmMMASqgM5iqKKowHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0EzazBTZ0lObnpB
Z3htTU1BU3FnTTVpcUtLby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnajQwDQYJKoZIhvcNAQELBQADggEBADYfHgtiVSjC+3POtpOugM583Vds
u9Dx2Kjjjah1qu0xWUWzFjhmYPqyiGa9EAFYySPqsJeAtb1AkqHVeQTEdOMvaL/T
NPsm5FcqZ9Bhf/Ep5eG9MNsvZFag7ZMpiji7/zwZ6/aj5UlD3rWlK0VdzHaBThyF
tvAKJnaIuzLL3tHfVpEdKIj67kTAUCPXeJ3IjnuwtMuHG6IC3AHIPdVrvawg8xQo
fNVqQtivgbhC3uQjHtfcB+AWDfL7CyWU4RflKEVLH7A6+hiBbWOMmYQdr2FVkJuV
6IOG+OhUjHg7mbNbHsSXcvi4mN8MrDof1tGzlImgrrC0lshJBpAWM5I+H0M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org