Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/F2L8obO50lEsnIOW6lZqPBQlY1M.roa
File: F2L8obO50lEsnIOW6lZqPBQlY1M.roa (raw, json)
Hash identifier: Su5RKbQRL67TBXE2I01+VvlDpd0Z4yYVpkU3yILUeEc=
Subject key identifier: 17:62:FC:A1:B3:B9:D2:51:2C:9C:83:96:EA:56:6A:3C:14:25:63:53
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0800
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/F2L8obO50lEsnIOW6lZqPBQlY1M.roa
Signing time: Tue 29 Sep 2020 10:06:43 +0000
ROA not before: Tue 29 Sep 2020 10:06:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 120.107.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1762FCA1B3B9D2512C9C8396EA566A3C14256353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:89:3d:9f:08:ee:d5:52:9b:25:9e:81:f7:
e0:7c:e7:a4:9e:fb:a2:9b:4a:17:ec:e7:10:dc:2e:
ba:85:d7:14:55:47:0e:2c:ec:f9:ad:ab:d1:a2:57:
b0:3d:86:97:22:1e:f2:5e:0a:aa:a6:f8:98:dd:94:
e0:3e:4a:23:78:a6:69:ff:cc:8a:36:b8:9e:a0:7f:
bb:c6:08:4d:5d:c3:8d:a2:63:c0:48:79:4f:4a:ae:
6a:4c:2c:6d:df:e0:d7:fb:2d:b3:47:a0:b3:e8:66:
d0:72:a3:6e:79:7b:47:39:c8:fd:d7:3c:a3:15:7d:
d5:1d:29:35:0e:5a:58:c8:9e:1b:6c:62:78:00:78:
54:38:25:58:d8:0d:56:33:d3:28:7c:4a:79:5f:a9:
38:04:39:71:e2:4e:4e:68:47:19:91:28:3b:9b:6d:
ff:2a:4a:75:7b:95:30:16:f2:46:05:ab:cf:af:33:
0e:e9:d3:19:dd:03:c7:7c:cd:db:f2:e2:91:53:b6:
73:36:f4:88:a2:0a:ae:5b:85:94:70:73:84:da:25:
44:d1:ef:b9:96:7d:88:d4:c5:85:29:9a:49:ca:bc:
a5:2b:d2:6e:05:da:aa:48:7f:d6:79:a8:40:43:a9:
e2:9a:04:d5:c6:9b:1e:b5:28:57:96:d9:0e:13:bc:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:FC:A1:B3:B9:D2:51:2C:9C:83:96:EA:56:6A:3C:14:25:63:53
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/F2L8obO50lEsnIOW6lZqPBQlY1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:6c:8c:72:81:00:cd:9c:4b:bd:83:ae:96:b2:eb:40:0e:16:
20:53:18:4e:a0:06:14:1c:f2:8e:d4:f0:7e:ad:10:1d:e5:0e:
3c:21:d2:50:7a:96:8d:28:84:61:21:8d:ac:00:5a:2a:7a:78:
a7:45:5a:52:bf:8f:a4:55:82:ac:83:0a:dc:d9:3e:13:85:92:
88:20:7f:5b:69:6a:8d:72:ae:85:74:eb:73:5b:23:0b:17:1e:
bb:67:73:71:44:c9:ab:30:1d:8f:f3:2e:1c:02:f9:08:1e:0e:
36:79:92:81:ef:62:80:04:d4:b8:bf:a8:a9:23:77:a5:68:f6:
71:c7:66:ab:b0:67:de:b7:e2:14:61:8e:3e:0a:48:38:50:2f:
96:86:78:17:1b:8c:02:a1:a0:85:12:ce:26:ec:31:14:5a:0f:
14:c0:37:6a:d5:e3:85:fd:bf:fd:50:58:a0:8f:6c:7b:91:3c:
81:56:fe:9e:aa:58:b7:9e:cc:c1:46:23:4e:94:3d:9d:89:f9:
26:7b:18:eb:3f:d1:a7:e0:a0:3b:7c:5c:78:38:52:f6:0a:36:
20:e8:14:63:f1:04:ca:fe:17:30:a8:27:70:9b:5c:d0:c8:c4:
d4:49:85:d1:b2:50:5c:09:bf:5e:db:4a:e3:9d:9d:bd:4f:de:
60:83:ec:0f
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMDA5Mjkx
MDA2NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE3NjJGQ0ExQjNCOUQy
NTEyQzlDODM5NkVBNTY2QTNDMTQyNTYzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCve4k9nwju1VKbJZ6B9+B856Se+6KbShfs5xDcLrqF1xRVRw4s
7Pmtq9GiV7A9hpciHvJeCqqm+JjdlOA+SiN4pmn/zIo2uJ6gf7vGCE1dw42iY8BI
eU9KrmpMLG3f4Nf7LbNHoLPoZtByo255e0c5yP3XPKMVfdUdKTUOWljInhtsYngA
eFQ4JVjYDVYz0yh8SnlfqTgEOXHiTk5oRxmRKDubbf8qSnV7lTAW8kYFq8+vMw7p
0xndA8d8zdvy4pFTtnM29IiiCq5bhZRwc4TaJUTR77mWfYjUxYUpmknKvKUr0m4F
2qpIf9Z5qEBDqeKaBNXGmx61KFeW2Q4TvP0bAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUF2L8obO50lEsnIOW6lZqPBQlY1MwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9GMkw4b2JPNTBsRXNuSU9XNmxa
cVBCUWxZMU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeGsw
DQYJKoZIhvcNAQELBQADggEBAI1sjHKBAM2cS72Drpay60AOFiBTGE6gBhQc8o7U
8H6tEB3lDjwh0lB6lo0ohGEhjawAWip6eKdFWlK/j6RVgqyDCtzZPhOFkoggf1tp
ao1yroV063NbIwsXHrtnc3FEyaswHY/zLhwC+QgeDjZ5koHvYoAE1Li/qKkjd6Vo
9nHHZquwZ9634hRhjj4KSDhQL5aGeBcbjAKhoIUSzibsMRRaDxTAN2rV44X9v/1Q
WKCPbHuRPIFW/p6qWLeezMFGI06UPZ2J+SZ7GOs/0afgoDt8XHg4UvYKNiDoFGPx
BMr+FzCoJ3CbXNDIxNRJhdGyUFwJv17bSuOdnb1P3mCD7A8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org