Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/ixG9Mm4r3pXMP8h8rc_27ZRQuSc.roa
File: ixG9Mm4r3pXMP8h8rc_27ZRQuSc.roa (raw, json)
Hash identifier: sjyjlmQdjxVZ0aeJihEaKcODnhh3J9GHE+D14dfL2UE=
Subject key identifier: 8B:11:BD:32:6E:2B:DE:95:CC:3F:C8:7C:AD:CF:F6:ED:94:50:B9:27
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0AB1
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/ixG9Mm4r3pXMP8h8rc_27ZRQuSc.roa
Signing time: Thu 15 Sep 2022 02:41:44 +0000
ROA not before: Thu 15 Sep 2022 02:41:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 180.214.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 15 02:41:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8B11BD326E2BDE95CC3FC87CADCFF6ED9450B927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cc:fc:a9:03:cc:6f:8a:94:1f:4e:55:da:2a:
c7:9a:8b:48:f0:e7:07:f2:3d:ce:a0:9b:95:e7:a2:
ef:7d:a5:cd:fd:f7:c7:e4:73:3f:73:d0:f5:f2:b3:
62:bf:ef:3e:1a:cb:ae:3c:97:f1:20:7c:ca:50:a2:
58:67:a5:21:27:7f:6b:dc:95:e4:da:ad:3f:e9:8a:
a2:cc:68:88:be:e4:a1:4c:f8:42:fd:98:5d:aa:0c:
31:d1:35:52:7d:b5:5c:03:2e:c4:b9:b8:8a:49:32:
80:cb:39:b6:31:56:04:9d:a8:67:29:ce:c9:88:79:
bd:ef:23:63:ab:8e:c1:30:b4:88:ac:76:c3:db:22:
4a:30:24:bd:50:fa:9a:68:e8:af:24:f2:84:94:42:
0c:a9:1b:4f:d2:f3:85:f6:00:07:55:fa:3f:45:2d:
da:ae:72:fa:b8:87:9a:24:1f:3a:8e:5e:95:36:ad:
7b:43:7e:1f:88:ba:17:d2:4e:87:ff:05:f7:16:ba:
b1:91:a1:cc:36:15:35:a3:1c:93:0d:d7:1c:ff:b2:
34:b5:03:9b:83:c0:43:39:b2:8d:c2:b7:75:96:c5:
92:21:1e:aa:59:d5:62:d1:2b:41:33:b1:4b:19:7d:
7c:33:6a:00:2c:b8:16:8d:56:01:06:fd:fd:34:5e:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:11:BD:32:6E:2B:DE:95:CC:3F:C8:7C:AD:CF:F6:ED:94:50:B9:27
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/ixG9Mm4r3pXMP8h8rc_27ZRQuSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.214.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:08:67:b7:c3:b7:88:63:03:ef:44:88:22:49:df:25:1a:81:
52:14:b0:61:dd:d2:ff:1d:d7:2c:52:82:40:f6:55:96:6e:00:
bc:fd:c3:1d:e1:32:14:c2:f2:5e:28:7f:9a:46:21:e1:e6:53:
22:85:79:93:df:fe:6f:b0:49:b9:fb:4b:03:63:26:db:3d:4c:
78:77:b7:77:94:6a:2d:79:33:ec:d9:7b:a9:ea:15:4d:02:fa:
24:95:33:76:c4:4b:85:d2:e5:f2:07:3a:ca:12:db:7e:31:40:
a4:96:28:97:b2:78:c5:fa:13:8a:0c:97:40:b5:cf:39:60:16:
a1:fa:54:f7:17:ed:3a:af:4d:91:e0:f3:dd:d0:a2:44:96:27:
14:7f:d6:c1:0e:72:c1:88:29:e7:f3:93:57:95:e8:67:c6:f9:
71:85:de:19:47:5c:60:ef:f2:a5:65:24:c7:7f:4f:ab:01:c0:
a1:f9:bd:33:77:fc:85:f8:16:1e:d6:bb:6d:e1:27:42:56:ae:
24:fa:b6:06:1e:55:df:13:61:23:ae:9c:f1:d2:5f:2f:d9:3a:
03:07:ca:d3:3e:9e:52:a1:24:88:e5:14:ad:1d:7d:51:b5:56:
cf:ce:20:30:57:8d:9f:f5:bd:01:4c:fd:86:d7:c9:c5:96:fb:
84:e3:bc:49
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yMjA5MTUw
MjQxNDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhCMTFCRDMyNkUyQkRF
OTVDQzNGQzg3Q0FEQ0ZGNkVEOTQ1MEI5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqzPypA8xvipQfTlXaKseai0jw5wfyPc6gm5Xnou99pc3998fk
cz9z0PXys2K/7z4ay648l/EgfMpQolhnpSEnf2vcleTarT/piqLMaIi+5KFM+EL9
mF2qDDHRNVJ9tVwDLsS5uIpJMoDLObYxVgSdqGcpzsmIeb3vI2OrjsEwtIisdsPb
IkowJL1Q+ppo6K8k8oSUQgypG0/S84X2AAdV+j9FLdqucvq4h5okHzqOXpU2rXtD
fh+IuhfSTof/BfcWurGRocw2FTWjHJMN1xz/sjS1A5uDwEM5so3Ct3WWxZIhHqpZ
1WLRK0EzsUsZfXwzagAsuBaNVgEG/f00Xrz3AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUixG9Mm4r3pXMP8h8rc/27ZRQuScwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9peEc5TW00cjNwWE1QOGg4cmNf
MjdaUlF1U2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEtNaw
MA0GCSqGSIb3DQEBCwUAA4IBAQA7CGe3w7eIYwPvRIgiSd8lGoFSFLBh3dL/Hdcs
UoJA9lWWbgC8/cMd4TIUwvJeKH+aRiHh5lMihXmT3/5vsEm5+0sDYybbPUx4d7d3
lGoteTPs2Xup6hVNAvoklTN2xEuF0uXyBzrKEtt+MUCkliiXsnjF+hOKDJdAtc85
YBah+lT3F+06r02R4PPd0KJElicUf9bBDnLBiCnn85NXlehnxvlxhd4ZR1xg7/Kl
ZSTHf0+rAcCh+b0zd/yF+BYe1rtt4SdCVq4k+rYGHlXfE2Ejrpzx0l8v2ToDB8rT
Pp5SoSSI5RStHX1RtVbPziAwV42f9b0BTP2G18nFlvuE47xJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org