Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/1pDkfCibgprZOjWPDXUh1WkDfI8.roa
File: 1pDkfCibgprZOjWPDXUh1WkDfI8.roa (raw, json)
Hash identifier: /Le2gTSpEVYbIiZtHlkLpBI+tyGD5VcIre/MHvva6Js=
Subject key identifier: D6:90:E4:7C:28:9B:82:9A:D9:3A:35:8F:0D:75:21:D5:69:03:7C:8F
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 079E
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/1pDkfCibgprZOjWPDXUh1WkDfI8.roa
Signing time: Tue 29 Sep 2020 10:06:08 +0000
ROA not before: Tue 29 Sep 2020 10:06:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 180.214.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 29 10:06:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D690E47C289B829AD93A358F0D7521D569037C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:7f:d5:f4:4f:82:fa:73:73:77:82:93:eb:
fd:eb:f7:51:d5:f4:43:17:48:3d:fc:15:b8:63:f4:
73:cf:60:45:8a:7f:4c:1e:6a:8a:97:63:2c:7b:62:
22:f0:be:c3:7e:b5:40:6a:a5:87:57:20:6e:2c:61:
2e:5c:0c:f7:46:4d:6e:a3:cc:bd:7f:45:20:b8:67:
7a:e9:0e:4e:ca:23:e9:68:45:c7:d0:6e:0e:6c:62:
cc:48:da:45:cb:b2:b2:88:9e:48:29:2b:a4:44:49:
04:ae:16:fc:e1:af:ed:d4:34:93:92:e0:9f:85:6f:
57:b4:27:59:81:16:33:22:40:b4:62:81:91:1a:dc:
a4:a9:d3:ce:a9:65:22:75:26:11:bd:29:c1:67:5a:
16:09:47:b1:4f:27:0b:f6:9f:d2:06:43:03:12:25:
7c:79:4a:0f:79:18:b7:e2:33:ce:d7:af:31:e4:6f:
7c:02:b1:6c:59:29:eb:72:df:18:8a:58:6e:b6:40:
05:0a:ac:f1:fc:e6:a5:3d:4e:7a:d2:d9:7c:ea:18:
d0:0e:43:a4:1e:43:49:38:00:34:2b:d7:61:7f:17:
ce:63:5d:df:2b:63:19:ca:64:65:d7:35:d3:db:01:
2f:94:e8:e7:05:6f:67:da:52:0a:f0:bd:54:aa:55:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:E4:7C:28:9B:82:9A:D9:3A:35:8F:0D:75:21:D5:69:03:7C:8F
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/1pDkfCibgprZOjWPDXUh1WkDfI8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.214.176.0/20
Signature Algorithm: sha256WithRSAEncryption
84:ed:b3:29:d4:2a:fd:ee:82:9b:0d:64:8c:af:b6:72:c6:0b:
41:39:01:0e:92:5f:e1:24:b3:a5:6c:82:57:f9:a8:71:77:4e:
6f:93:cc:48:e0:41:0a:43:6e:7e:b3:0f:01:39:fb:e8:80:22:
c0:a5:d1:ea:51:ba:4f:38:3a:e3:a0:f0:00:fe:df:62:ca:01:
09:3e:97:57:8e:db:b9:e5:57:53:54:b5:cd:88:4d:ef:b4:df:
96:39:61:31:9b:53:b9:7b:3a:c0:8a:7a:49:95:a8:31:4d:ec:
8e:0d:e2:d0:41:70:6f:38:f6:61:c5:3a:bc:20:a6:da:85:a9:
ac:c9:55:f2:92:1f:ae:b2:d2:93:b6:70:4d:4a:b9:46:5f:e4:
05:b8:07:47:71:c8:ec:8a:81:8d:73:c6:56:20:1b:60:e6:b3:
14:f2:38:91:c8:d0:32:81:6d:50:d8:dc:09:11:78:f3:05:a7:
78:5b:5b:c9:b0:1c:98:75:bb:b0:56:0a:b1:41:be:53:e0:9e:
4b:f3:bb:13:3c:aa:9a:f1:31:86:cb:78:b9:82:30:17:fe:b1:
f8:09:90:f8:0a:f8:83:d9:20:15:05:68:5f:39:42:48:23:26:
68:d9:d2:3a:2d:0e:5b:54:40:39:83:5d:b5:1d:9a:fc:52:11:
90:3b:fd:45
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yMDA5Mjkx
MDA2MDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ2OTBFNDdDMjg5Qjgy
OUFEOTNBMzU4RjBENzUyMUQ1NjkwMzdDOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLZn/V9E+C+nNzd4KT6/3r91HV9EMXSD38Fbhj9HPPYEWKf0we
aoqXYyx7YiLwvsN+tUBqpYdXIG4sYS5cDPdGTW6jzL1/RSC4Z3rpDk7KI+loRcfQ
bg5sYsxI2kXLsrKInkgpK6RESQSuFvzhr+3UNJOS4J+Fb1e0J1mBFjMiQLRigZEa
3KSp086pZSJ1JhG9KcFnWhYJR7FPJwv2n9IGQwMSJXx5Sg95GLfiM87XrzHkb3wC
sWxZKety3xiKWG62QAUKrPH85qU9TnrS2XzqGNAOQ6QeQ0k4ADQr12F/F85jXd8r
YxnKZGXXNdPbAS+U6OcFb2faUgrwvVSqVY39AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU1pDkfCibgprZOjWPDXUh1WkDfI8wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS8xcERrZkNpYmdwclpPaldQRFhV
aDFXa0RmSTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEtNaw
MA0GCSqGSIb3DQEBCwUAA4IBAQCE7bMp1Cr97oKbDWSMr7ZyxgtBOQEOkl/hJLOl
bIJX+ahxd05vk8xI4EEKQ25+sw8BOfvogCLApdHqUbpPODrjoPAA/t9iygEJPpdX
jtu55VdTVLXNiE3vtN+WOWExm1O5ezrAinpJlagxTeyODeLQQXBvOPZhxTq8IKba
hamsyVXykh+ustKTtnBNSrlGX+QFuAdHccjsioGNc8ZWIBtg5rMU8jiRyNAygW1Q
2NwJEXjzBad4W1vJsByYdbuwVgqxQb5T4J5L87sTPKqa8TGGy3i5gjAX/rH4CZD4
CviD2SAVBWhfOUJIIyZo2dI6LQ5bVEA5g121HZr8UhGQO/1F
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:09:25 2025 by rpki-client