Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/XYxu4xLJxCKuGG7G1ZQf7g5joPc.roa
File: XYxu4xLJxCKuGG7G1ZQf7g5joPc.roa (raw, json)
Hash identifier: qsfqKTL5Yqmvj00lNYm8A8QbvfCQJ75KeW/185/krrU=
Subject key identifier: 5D:8C:6E:E3:12:C9:C4:22:AE:18:6E:C6:D5:94:1F:EE:0E:63:A0:F7
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 08E3
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/XYxu4xLJxCKuGG7G1ZQf7g5joPc.roa
Signing time: Sun 07 Feb 2021 06:05:14 +0000
ROA not before: Sun 07 Feb 2021 06:05:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.106.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Feb 7 06:05:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5D8C6EE312C9C422AE186EC6D5941FEE0E63A0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:25:2c:86:3a:d4:b3:bc:55:6d:3d:db:0f:
9d:85:74:8f:1c:b0:8f:c1:ec:92:58:15:89:d5:22:
7d:7e:3c:90:95:63:69:26:ee:63:81:21:a1:b5:b6:
d7:0e:7e:4d:01:b9:49:4e:b5:46:4f:b6:89:29:78:
94:c3:eb:7a:9f:90:dc:85:ed:d5:bb:4f:01:3c:99:
47:5c:70:e8:a1:f7:59:70:b6:2f:b2:da:fb:ba:bc:
2b:70:22:c6:b6:e9:fc:08:7d:af:fc:37:3f:3f:e6:
ba:2f:5a:58:ea:07:1e:d9:51:d7:86:56:7d:aa:8f:
e3:e6:3a:de:c8:01:00:66:73:94:da:87:e7:ba:c6:
b6:12:53:b6:d9:0a:f4:04:16:ee:f4:2e:e5:20:7f:
9d:33:12:66:cc:98:ce:b1:5a:cb:28:86:54:7a:0f:
70:fd:c8:73:16:47:8d:b2:c9:f1:07:ef:e8:d1:09:
46:76:8b:11:52:e8:f0:37:4c:2d:2c:ce:76:7b:e6:
ac:f4:e5:43:31:e1:39:19:25:0e:91:b5:73:1f:8b:
12:c1:9b:3b:4f:c8:1f:09:81:36:cf:9f:9d:06:f2:
5b:a2:62:9f:16:75:1c:c3:e1:21:2d:78:53:3d:b1:
b2:98:aa:ab:4e:a5:c9:69:44:44:fa:2c:a1:8a:9c:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:6E:E3:12:C9:C4:22:AE:18:6E:C6:D5:94:1F:EE:0E:63:A0:F7
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/XYxu4xLJxCKuGG7G1ZQf7g5joPc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.52.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2d:29:54:15:e0:9d:dc:09:6c:0d:fc:6b:1a:ad:2b:1e:96:
86:41:9a:ba:3b:22:4e:03:01:e1:39:9c:e0:d3:80:1f:b6:57:
0d:ed:5f:e7:8b:c6:37:ef:74:c9:1d:9c:6b:4d:4f:ea:65:cd:
37:56:f6:2d:73:6d:46:a3:b4:85:06:ac:b7:c4:27:ad:4b:95:
b8:38:a0:6e:d6:6f:1b:0f:3a:fd:b5:be:6c:c8:0d:d4:90:31:
22:61:14:b5:8e:b2:6a:0c:9d:47:5c:1c:a9:75:97:b3:4c:45:
73:e7:9e:ba:93:c0:71:d7:04:67:c7:d9:10:cf:a7:b6:52:02:
fc:87:0e:7d:c6:6e:06:f0:05:56:e6:35:ff:7c:13:84:b3:65:
7a:a5:57:55:63:59:d1:c4:70:29:50:ec:3e:ff:1b:63:79:85:
91:a6:80:76:99:bf:59:aa:13:24:dd:9d:8f:ad:e8:8d:47:8c:
5e:72:c5:90:14:7d:a5:c4:31:98:ee:1f:8b:65:75:60:97:91:
a4:9c:59:60:1e:1b:c6:e7:d4:90:6a:e6:a4:8c:99:c2:40:df:
72:4f:ff:70:a7:fd:cc:71:3a:1a:8d:df:de:6f:3b:bc:7f:f1:
78:5a:ab:12:84:74:b4:d7:38:07:d7:44:71:19:89:a4:8d:3d:
8e:45:3f:e6
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMTAyMDcw
NjA1MTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVEOEM2RUUzMTJDOUM0
MjJBRTE4NkVDNkQ1OTQxRkVFMEU2M0EwRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgqyUshjrUs7xVbT3bD52FdI8csI/B7JJYFYnVIn1+PJCVY2km
7mOBIaG1ttcOfk0BuUlOtUZPtokpeJTD63qfkNyF7dW7TwE8mUdccOih91lwti+y
2vu6vCtwIsa26fwIfa/8Nz8/5rovWljqBx7ZUdeGVn2qj+PmOt7IAQBmc5Tah+e6
xrYSU7bZCvQEFu70LuUgf50zEmbMmM6xWssohlR6D3D9yHMWR42yyfEH7+jRCUZ2
ixFS6PA3TC0sznZ75qz05UMx4TkZJQ6RtXMfixLBmztPyB8JgTbPn50G8luiYp8W
dRzD4SEteFM9sbKYqqtOpclpRET6LKGKnNTzAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUXYxu4xLJxCKuGG7G1ZQf7g5joPcwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL1hZeHU0eExKeENL
dUdHN0cxWlFmN2c1am9QYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnajQwDQYJKoZIhvcNAQELBQADggEBACctKVQV4J3cCWwN/GsarSseloZB
mro7Ik4DAeE5nODTgB+2Vw3tX+eLxjfvdMkdnGtNT+plzTdW9i1zbUajtIUGrLfE
J61Llbg4oG7WbxsPOv21vmzIDdSQMSJhFLWOsmoMnUdcHKl1l7NMRXPnnrqTwHHX
BGfH2RDPp7ZSAvyHDn3GbgbwBVbmNf98E4SzZXqlV1VjWdHEcClQ7D7/G2N5hZGm
gHaZv1mqEyTdnY+t6I1HjF5yxZAUfaXEMZjuH4tldWCXkaScWWAeG8bn1JBq5qSM
mcJA33JP/3Cn/cxxOhqN395vO7x/8XhaqxKEdLTXOAfXRHEZiaSNPY5FP+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org