Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/7_a_Mepv6RN3vbh1_Xq4oqGmeEA.roa
File: 7_a_Mepv6RN3vbh1_Xq4oqGmeEA.roa (raw, json)
Hash identifier: 1SMtCrcay+PtQwCxom7ryH+mZaG5L5kA0bXUDtoos0s=
Subject key identifier: EF:F6:BF:31:EA:6F:E9:13:77:BD:B8:75:FD:7A:B8:A2:A1:A6:78:40
Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Certificate serial: 092F
Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/7_a_Mepv6RN3vbh1_Xq4oqGmeEA.roa
Signing time: Wed 29 Sep 2021 02:40:26 +0000
ROA not before: Wed 29 Sep 2021 02:40:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131634
IP address blocks: 103.117.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351 (0x92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Validity
Not Before: Sep 29 02:40:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EFF6BF31EA6FE91377BDB875FD7AB8A2A1A67840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:64:b3:33:1a:08:4b:49:d9:bd:fa:9c:47:
06:43:2f:a9:d9:ca:e4:e0:0d:24:11:a9:fd:e7:52:
dc:66:05:ca:fc:5b:0f:c4:ac:ad:cc:2e:b6:a8:6c:
6b:1f:a2:58:e8:f4:70:be:34:1a:76:b9:e9:c9:14:
70:19:74:36:e8:84:54:29:de:b8:d4:ca:43:51:c2:
d4:7e:b0:a2:3b:a7:3f:d5:f8:2b:31:9e:4f:4c:a8:
1c:02:9d:e1:c1:5f:72:51:21:60:8b:5c:f9:e7:87:
cd:27:34:88:83:78:e0:d8:f6:2b:70:d4:d9:a0:5a:
d5:a4:6e:ef:a5:35:7a:9d:31:f3:a0:02:2f:e2:15:
c0:0c:87:d7:8a:b4:53:24:f6:e7:84:ee:83:5c:ea:
f9:96:ee:06:93:77:e4:4b:72:b7:2f:bd:20:04:69:
c2:ae:34:f0:98:54:b5:a5:f1:6b:85:f2:fe:9a:81:
1a:e5:bd:8e:f7:1f:fc:74:47:31:4f:a5:bc:32:8a:
ce:f2:ad:44:58:fb:7c:84:9d:38:3b:e1:5c:0a:82:
31:1f:6e:3c:b9:f1:6d:ec:87:be:b6:79:3c:0c:1c:
c5:e0:c1:49:be:27:a3:94:5a:e7:1e:73:c7:2f:9d:
11:57:ee:90:e4:bc:c7:27:bc:3e:7f:3d:f1:5e:c5:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:BF:31:EA:6F:E9:13:77:BD:B8:75:FD:7A:B8:A2:A1:A6:78:40
X509v3 Authority Key Identifier:
keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/7_a_Mepv6RN3vbh1_Xq4oqGmeEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:75:07:5a:1a:fc:9f:69:fa:cc:62:65:f9:bd:39:b0:d4:f8:
7d:e3:06:3d:77:6a:c8:f2:b1:77:ad:45:33:59:68:d2:88:5f:
8e:b4:8e:a2:de:6e:56:19:8e:cc:69:9c:fc:bd:4f:2a:55:5a:
25:9a:ad:5c:32:6b:7c:2e:2b:47:3f:62:d7:66:67:0f:60:42:
7e:c5:c5:88:fb:3d:b1:da:ff:d7:c0:cc:1f:1c:af:8f:aa:b3:
4f:70:ee:6e:5a:b1:49:13:d7:23:37:80:bb:63:c6:e7:62:42:
c5:f0:bb:6c:f7:ec:64:97:87:a0:c3:ca:68:b1:f7:5e:a9:c0:
5f:42:ee:82:f8:ca:36:df:8a:2d:53:e0:60:4e:1b:84:94:e9:
1e:4b:08:16:a9:52:91:a0:f2:7f:49:e1:b4:48:2d:5b:fe:73:
56:2e:e0:60:ce:60:68:0e:87:ac:09:4c:bd:8d:4f:59:2b:80:
02:05:5a:20:36:95:fa:b7:68:e9:ec:ff:04:3f:56:ae:d4:7e:
3e:da:6d:96:00:aa:08:c4:f6:46:f7:1b:ac:d4:f5:10:21:51:
97:aa:0e:45:f5:bb:86:47:a2:4f:a6:63:35:07:35:e4:4d:af:
82:ec:16:c4:b3:94:b5:65:06:99:e7:27:e5:ce:71:ed:12:9e:
a6:42:21:f3
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkY4
QzkyREZDNzhDQkZFOEM1RUZENkJBNUEzN0ExNjI4MjIxRkZFMjAeFw0yMTA5Mjkw
MjQwMjZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVGRjZCRjMxRUE2RkU5
MTM3N0JEQjg3NUZEN0FCOEEyQTFBNjc4NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuZGSzMxoIS0nZvfqcRwZDL6nZyuTgDSQRqf3nUtxmBcr8Ww/E
rK3MLraobGsfoljo9HC+NBp2uenJFHAZdDbohFQp3rjUykNRwtR+sKI7pz/V+Csx
nk9MqBwCneHBX3JRIWCLXPnnh80nNIiDeODY9itw1NmgWtWkbu+lNXqdMfOgAi/i
FcAMh9eKtFMk9ueE7oNc6vmW7gaTd+RLcrcvvSAEacKuNPCYVLWl8WuF8v6agRrl
vY73H/x0RzFPpbwyis7yrURY+3yEnTg74VwKgjEfbjy58W3sh762eTwMHMXgwUm+
J6OUWucec8cvnRFX7pDkvMcnvD5/PfFexedlAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU7/a/Mepv6RN3vbh1/Xq4oqGmeEAwHwYDVR0jBBgwFoAUb4yS38eMv+jF79a6
WjehYoIh/+IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1BFVFcv
YjR5UzM4ZU12LWpGNzlhNldqZWhZb0loXy1JLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9iNHlTMzhlTXYtakY3OWE2V2plaFlvSWhfLUkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TUEVUVy83X2FfTWVwdjZSTjN2YmgxX1hx
NG9xR21lRUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3UE
MA0GCSqGSIb3DQEBCwUAA4IBAQCNdQdaGvyfafrMYmX5vTmw1Ph94wY9d2rI8rF3
rUUzWWjSiF+OtI6i3m5WGY7MaZz8vU8qVVolmq1cMmt8LitHP2LXZmcPYEJ+xcWI
+z2x2v/XwMwfHK+PqrNPcO5uWrFJE9cjN4C7Y8bnYkLF8Lts9+xkl4egw8posfde
qcBfQu6C+Mo234otU+BgThuElOkeSwgWqVKRoPJ/SeG0SC1b/nNWLuBgzmBoDoes
CUy9jU9ZK4ACBVogNpX6t2jp7P8EP1au1H4+2m2WAKoIxPZG9xus1PUQIVGXqg5F
9buGR6JPpmM1BzXkTa+C7BbEs5S1ZQaZ5yflznHtEp6mQiHz
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:05 2023 by rpki-client on console-ams.rpki-client.org