Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5hXhZCNAir_Sthe4OPt-j5-Ynng.roa
File: 5hXhZCNAir_Sthe4OPt-j5-Ynng.roa (raw, json)
Hash identifier: jHcbPoWFwWRS7kwEuxWdj9MHYwBjy67IGUWuUmTJcK0=
Subject key identifier: E6:15:E1:64:23:40:8A:BF:D2:B6:17:B8:38:FB:7E:8F:9F:98:9E:78
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0ACE
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5hXhZCNAir_Sthe4OPt-j5-Ynng.roa
Signing time: Wed 29 Sep 2021 02:41:06 +0000
ROA not before: Wed 29 Sep 2021 02:41:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18047
IP address blocks: 120.127.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 02:41:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E615E16423408ABFD2B617B838FB7E8F9F989E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:12:59:cd:aa:c2:bb:66:cf:46:bd:ec:fe:
20:2f:f7:b1:fb:93:92:49:68:5c:ac:e0:78:1a:f0:
58:b8:66:08:4c:22:ea:00:4b:32:7f:93:39:e0:3f:
6f:4f:98:de:37:7d:38:67:2b:d7:a2:04:b8:f9:3b:
b5:27:db:6d:c4:c7:7b:7f:94:ff:b7:17:ac:38:5b:
21:6f:dc:18:19:5b:19:14:03:0f:a6:49:19:3f:6d:
10:2e:eb:e6:e2:32:c5:93:27:87:fe:78:ac:eb:29:
46:7e:0e:d7:8f:8e:a3:17:b7:f3:79:95:33:9b:9f:
7a:53:05:aa:b0:a2:12:4e:d8:4d:2d:da:57:88:ab:
97:5e:0d:a0:b9:69:c9:50:46:be:97:52:11:af:f3:
00:a5:d7:2b:55:0b:6b:ef:49:3a:c5:70:41:6f:dc:
c6:db:46:b3:6a:e5:ea:21:b3:9b:dc:d9:c9:63:6f:
66:4c:6d:84:f0:f2:ee:56:a9:00:50:11:2f:1a:c6:
11:70:43:d7:9f:2a:67:77:bd:c5:40:59:63:c6:5b:
b0:7c:7e:70:5e:ad:f4:55:41:2b:8b:d6:b9:0a:be:
6a:90:0b:8f:ef:cd:5b:16:1b:9c:d4:af:32:15:f3:
51:cb:9f:99:ce:9d:5d:28:e4:2a:e3:8d:48:a4:22:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:15:E1:64:23:40:8A:BF:D2:B6:17:B8:38:FB:7E:8F:9F:98:9E:78
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5hXhZCNAir_Sthe4OPt-j5-Ynng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.127.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:7b:41:3b:e3:a5:06:c8:26:7b:88:a7:18:d2:c8:0f:c6:72:
f3:48:b0:5b:4c:79:81:ad:fd:88:b9:0e:84:71:ed:7d:e4:a8:
cc:b1:8d:ea:5d:2e:e7:8a:88:52:e4:d8:76:c1:f5:a0:fa:6a:
d5:d8:41:b2:16:ee:7c:aa:a2:6b:dd:4d:7d:24:14:63:18:a1:
0a:2f:93:0f:36:1e:00:31:b9:05:e5:e2:fd:0a:f0:27:4f:65:
86:04:3d:b3:e8:4d:b6:1a:76:1e:d8:63:9e:41:a2:73:74:3a:
be:7a:ae:fc:9e:dc:14:d2:d0:ec:20:f3:72:d8:cc:9c:af:c9:
b7:e2:d7:c0:8d:e3:05:52:20:d1:ee:ff:d6:75:8b:a2:56:0b:
3d:d5:47:67:2c:05:75:09:12:5e:09:7b:f0:69:b5:0f:fb:a3:
7a:cc:2b:66:5c:7f:38:e4:4d:ce:7d:a6:44:6e:3a:50:21:d0:
f9:07:8c:6d:f5:e9:fa:36:19:56:c8:c6:8a:b0:34:95:c0:da:
a9:23:0e:0c:c6:fb:71:3e:67:0e:52:8b:d6:56:86:dd:bc:eb:
fc:34:f5:3b:6e:21:fa:ab:7e:57:99:07:e0:cc:f2:f0:28:cf:
5a:25:ac:c0:8a:04:d2:12:e6:9f:2e:a3:0a:cc:ad:f9:d9:2a:
3c:c4:a7:23
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMTA5Mjkw
MjQxMDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU2MTVFMTY0MjM0MDhB
QkZEMkI2MTdCODM4RkI3RThGOUY5ODlFNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTrhJZzarCu2bPRr3s/iAv97H7k5JJaFys4Hga8Fi4ZghMIuoA
SzJ/kzngP29PmN43fThnK9eiBLj5O7Un223Ex3t/lP+3F6w4WyFv3BgZWxkUAw+m
SRk/bRAu6+biMsWTJ4f+eKzrKUZ+DtePjqMXt/N5lTObn3pTBaqwohJO2E0t2leI
q5deDaC5aclQRr6XUhGv8wCl1ytVC2vvSTrFcEFv3MbbRrNq5eohs5vc2cljb2ZM
bYTw8u5WqQBQES8axhFwQ9efKmd3vcVAWWPGW7B8fnBerfRVQSuL1rkKvmqQC4/v
zVsWG5zUrzIV81HLn5nOnV0o5CrjjUikIk2lAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU5hXhZCNAir/Sthe4OPt+j5+YnngwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC81aFhoWkNOQWlyX1N0aGU0T1B0
LWo1LVlubmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH+g
MA0GCSqGSIb3DQEBCwUAA4IBAQA9e0E746UGyCZ7iKcY0sgPxnLzSLBbTHmBrf2I
uQ6Ece195KjMsY3qXS7niohS5Nh2wfWg+mrV2EGyFu58qqJr3U19JBRjGKEKL5MP
Nh4AMbkF5eL9CvAnT2WGBD2z6E22GnYe2GOeQaJzdDq+eq78ntwU0tDsIPNy2Myc
r8m34tfAjeMFUiDR7v/WdYuiVgs91UdnLAV1CRJeCXvwabUP+6N6zCtmXH845E3O
faZEbjpQIdD5B4xt9en6NhlWyMaKsDSVwNqpIw4MxvtxPmcOUovWVobdvOv8NPU7
biH6q35XmQfgzPLwKM9aJazAigTSEuafLqMKzK352So8xKcj
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org