Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/0RM-KZ0SwZ9brQmNFecc8WRdA_Q.roa
File: 0RM-KZ0SwZ9brQmNFecc8WRdA_Q.roa (raw, json)
Hash identifier: QsbTf+3uBWCbVd2JcQ5tMYh1oCj/dva2c/J2ukFiTSw=
Subject key identifier: D1:13:3E:29:9D:12:C1:9F:5B:AD:09:8D:15:E7:1C:F1:64:5D:03:F4
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0RM-KZ0SwZ9brQmNFecc8WRdA_Q.roa
Signing time: Thu 15 Sep 2022 02:41:26 +0000
ROA not before: Thu 15 Sep 2022 02:41:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131150
IP address blocks: 163.32.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D1133E299D12C19F5BAD098D15E71CF1645D03F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:98:d1:a9:ab:07:80:87:57:3a:0e:f9:06:
35:b0:a9:e3:bd:41:ff:06:bd:6e:6f:9e:ab:e1:b4:
36:81:bc:32:e7:0b:d6:e5:bb:ce:67:09:99:b6:16:
e7:05:1e:0f:44:f4:03:a4:b8:2f:91:be:b0:5b:61:
5e:f6:f7:ef:70:d6:ab:50:23:a5:09:58:b4:71:1e:
e0:f8:7d:75:68:2e:e2:3b:27:b2:8e:8b:03:cc:a9:
8f:c0:ed:98:81:88:2a:d0:88:fb:45:5f:d1:5a:b2:
fc:8f:4c:d0:82:dc:16:de:7c:b2:e8:c0:3d:18:ec:
c0:8d:aa:86:a4:77:75:d5:a1:e1:29:1d:d0:ca:a0:
68:1a:ce:b9:12:ca:13:92:5d:09:c6:bc:33:af:a3:
3b:db:4d:ae:67:4c:74:58:ec:8d:02:47:8a:07:0f:
74:a8:80:48:2d:eb:42:80:15:82:32:24:e6:e7:b6:
8c:cb:52:32:11:16:5d:82:b8:9b:02:ca:a8:3f:74:
7c:6d:52:45:d1:c0:be:3a:03:05:84:c9:6f:2a:9f:
84:3b:9f:f6:bc:91:ee:09:9e:20:2d:07:a4:c6:b2:
b5:78:1b:2a:85:7d:7f:5d:14:5a:c4:1c:b9:02:c9:
5f:bb:3d:0e:71:17:f9:79:49:f8:2a:6f:66:d2:a7:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:13:3E:29:9D:12:C1:9F:5B:AD:09:8D:15:E7:1C:F1:64:5D:03:F4
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0RM-KZ0SwZ9brQmNFecc8WRdA_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.240.0/22
Signature Algorithm: sha256WithRSAEncryption
86:01:f5:3d:1c:dd:ce:b4:1b:da:7a:b9:eb:f1:6b:64:17:66:
1d:60:33:4a:9a:d9:6a:f2:0b:d1:dd:9e:2a:bd:04:96:19:0b:
86:13:2e:3d:36:46:d0:ea:3b:cd:c9:7d:e1:3b:c4:9d:43:22:
3a:1a:5d:31:70:2c:ad:f3:a4:77:65:cd:e4:01:76:8a:47:59:
10:dd:46:82:ba:04:08:49:74:f0:43:8f:03:ce:93:f7:da:ba:
09:7a:c4:d1:f6:35:e8:31:35:31:5b:51:1f:71:2d:b6:73:92:
fe:24:c5:47:0a:89:d6:f1:9d:e2:6c:6b:0f:d3:6f:12:ad:81:
2b:0f:1b:4d:87:fa:f6:b2:72:6d:0e:3f:c5:17:19:f7:a6:2f:
39:3b:5a:3a:68:08:37:46:6a:ab:30:b2:a2:8b:f0:17:ce:88:
37:f2:ca:66:29:2c:fb:64:7f:3e:8e:c7:a9:4e:bf:58:44:31:
7c:73:35:de:e2:e0:10:86:eb:ba:66:f1:fe:20:27:16:43:68:
f3:46:f8:59:41:92:5c:33:8a:c8:da:94:fc:00:c6:59:c6:4d:
0c:6d:a0:86:c4:34:3b:1e:a0:66:83:27:d8:37:50:54:a7:fb:
96:5b:22:ae:fb:f8:95:34:7c:67:b0:52:ee:7a:14:0c:e4:8c:
ee:4d:c2:ca
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMjA5MTUw
MjQxMjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQxMTMzRTI5OUQxMkMx
OUY1QkFEMDk4RDE1RTcxQ0YxNjQ1RDAzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUnpjRqasHgIdXOg75BjWwqeO9Qf8GvW5vnqvhtDaBvDLnC9bl
u85nCZm2FucFHg9E9AOkuC+RvrBbYV729+9w1qtQI6UJWLRxHuD4fXVoLuI7J7KO
iwPMqY/A7ZiBiCrQiPtFX9FasvyPTNCC3BbefLLowD0Y7MCNqoakd3XVoeEpHdDK
oGgazrkSyhOSXQnGvDOvozvbTa5nTHRY7I0CR4oHD3SogEgt60KAFYIyJObntozL
UjIRFl2CuJsCyqg/dHxtUkXRwL46AwWEyW8qn4Q7n/a8ke4JniAtB6TGsrV4GyqF
fX9dFFrEHLkCyV+7PQ5xF/l5Sfgqb2bSp4DpAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU0RM+KZ0SwZ9brQmNFecc8WRdA/QwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8wUk0tS1owU3daOWJyUW1ORmVj
YzhXUmRBX1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoyDw
MA0GCSqGSIb3DQEBCwUAA4IBAQCGAfU9HN3OtBvaernr8WtkF2YdYDNKmtlq8gvR
3Z4qvQSWGQuGEy49NkbQ6jvNyX3hO8SdQyI6Gl0xcCyt86R3Zc3kAXaKR1kQ3UaC
ugQISXTwQ48DzpP32roJesTR9jXoMTUxW1EfcS22c5L+JMVHConW8Z3ibGsP028S
rYErDxtNh/r2snJtDj/FFxn3pi85O1o6aAg3RmqrMLKii/AXzog38spmKSz7ZH8+
jsepTr9YRDF8czXe4uAQhuu6ZvH+ICcWQ2jzRvhZQZJcM4rI2pT8AMZZxk0MbaCG
xDQ7HqBmgyfYN1BUp/uWWyKu+/iVNHxnsFLuehQM5IzuTcLK
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org