Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LohEYJtozEUmBYa52IwnezCkCDU.roa
File: LohEYJtozEUmBYa52IwnezCkCDU.roa (raw, json)
Hash identifier: Ro+J2Q1HzGtFrGO3CoJdfgKUc9yz/NeSWlhYR5SGzwU=
Subject key identifier: 2E:88:44:60:9B:68:CC:45:26:05:86:B9:D8:8C:27:7B:30:A4:08:35
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0AE6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LohEYJtozEUmBYa52IwnezCkCDU.roa
Signing time: Wed 29 Sep 2021 02:41:14 +0000
ROA not before: Wed 29 Sep 2021 02:41:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 1659
IP address blocks: 210.62.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790 (0xae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 02:41:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2E8844609B68CC45260586B9D88C277B30A40835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:37:4e:5e:b7:e5:d9:50:b0:ed:d8:78:d6:
51:8c:6e:80:f8:2a:9e:24:f8:a3:49:13:5c:6c:f5:
6c:48:8a:cb:dc:62:69:49:5c:a2:fb:44:d0:83:17:
e9:96:f7:cc:9c:ec:f4:8d:c5:01:bf:79:b7:dc:14:
19:44:ff:89:de:63:b5:90:07:ba:21:f7:ef:24:9c:
a7:b7:33:e2:3d:24:69:f2:8f:45:02:fc:93:43:b8:
b8:4e:56:bd:36:46:67:73:c7:11:07:a0:a5:cb:68:
0f:68:9a:e2:21:0c:f4:c7:af:ef:ef:37:26:e8:a7:
c4:f4:49:80:f5:36:44:e7:6c:5a:04:88:98:74:2e:
05:99:f8:d8:c1:27:b7:15:8b:2d:5f:d1:82:29:c4:
41:1a:37:a4:00:12:1f:78:64:7e:1b:5b:ae:d5:14:
8b:e0:6f:50:0d:32:cb:f8:d3:90:56:1f:bf:01:58:
e3:54:a1:a5:35:64:ea:4b:24:f4:53:ad:a3:c6:ef:
18:5f:f2:79:e8:dd:67:71:b1:07:cc:67:a3:40:66:
02:3f:99:b2:02:38:3b:e7:a5:5d:32:26:95:88:99:
0a:7a:b3:51:b8:dc:db:7d:70:7b:2f:70:a3:32:ec:
46:cc:c0:df:1a:b4:7e:e1:b3:63:b5:e1:a4:ce:3b:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:44:60:9B:68:CC:45:26:05:86:B9:D8:8C:27:7B:30:A4:08:35
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LohEYJtozEUmBYa52IwnezCkCDU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.240.0/21
Signature Algorithm: sha256WithRSAEncryption
98:65:9f:94:f4:16:f9:71:65:08:83:e7:b4:8d:ce:82:93:86:
36:7e:53:3d:a1:58:5e:15:f5:d3:d0:2f:35:4c:fc:34:30:a9:
a1:b5:3c:1d:31:0e:e2:6f:bb:0b:9c:2d:11:d4:86:e8:81:d0:
91:af:2c:5a:91:ac:07:ae:52:34:d8:d7:dd:92:c2:0d:7b:f9:
95:e6:43:52:5f:e0:22:c9:cb:63:d3:2d:51:07:52:02:f6:0a:
58:f5:b5:ac:74:12:ff:a0:d4:ad:4c:65:e8:15:b4:30:c6:fc:
b0:81:e8:64:f7:d9:1e:03:cb:cc:3f:e3:b2:9d:fe:d3:86:df:
e4:89:9d:82:0f:64:24:ed:24:92:3f:1b:d6:44:f2:3e:76:cd:
20:7d:a9:46:54:6e:02:04:03:8a:70:0d:63:84:95:b5:4a:9b:
f3:9c:1b:da:51:da:ff:0d:53:fd:3a:92:88:94:21:7d:ef:d3:
b5:dc:4f:26:e8:6d:88:40:23:42:d1:89:42:58:6b:47:31:96:
26:25:db:e3:0b:f9:fa:ab:37:4c:0b:39:e2:2c:6f:fb:b7:6a:
50:02:7a:b9:c7:3e:99:98:b0:ca:9e:d3:20:ea:73:22:14:63:
68:28:c6:26:c5:e5:6c:23:07:dc:9b:75:29:b9:57:19:64:43:
02:30:e2:92
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMTA5Mjkw
MjQxMTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDJFODg0NDYwOUI2OEND
NDUyNjA1ODZCOUQ4OEMyNzdCMzBBNDA4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXYTdOXrfl2VCw7dh41lGMboD4Kp4k+KNJE1xs9WxIisvcYmlJ
XKL7RNCDF+mW98yc7PSNxQG/ebfcFBlE/4neY7WQB7oh9+8knKe3M+I9JGnyj0UC
/JNDuLhOVr02RmdzxxEHoKXLaA9omuIhDPTHr+/vNybop8T0SYD1NkTnbFoEiJh0
LgWZ+NjBJ7cViy1f0YIpxEEaN6QAEh94ZH4bW67VFIvgb1ANMsv405BWH78BWONU
oaU1ZOpLJPRTraPG7xhf8nno3WdxsQfMZ6NAZgI/mbICODvnpV0yJpWImQp6s1G4
3Nt9cHsvcKMy7EbMwN8atH7hs2O14aTOO3stAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQULohEYJtozEUmBYa52IwnezCkCDUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9Mb2hFWUp0b3pFVW1CWWE1Mkl3
bmV6Q2tDRFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0j7w
MA0GCSqGSIb3DQEBCwUAA4IBAQCYZZ+U9Bb5cWUIg+e0jc6Ck4Y2flM9oVheFfXT
0C81TPw0MKmhtTwdMQ7ib7sLnC0R1IbogdCRryxakawHrlI02NfdksINe/mV5kNS
X+Aiyctj0y1RB1IC9gpY9bWsdBL/oNStTGXoFbQwxvywgehk99keA8vMP+Oynf7T
ht/kiZ2CD2Qk7SSSPxvWRPI+ds0gfalGVG4CBAOKcA1jhJW1SpvznBvaUdr/DVP9
OpKIlCF979O13E8m6G2IQCNC0YlCWGtHMZYmJdvjC/n6qzdMCzniLG/7t2pQAnq5
xz6ZmLDKntMg6nMiFGNoKMYmxeVsIwfcm3UpuVcZZEMCMOKS
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org