Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/NsfgJiV_JgeRudJ6-2Qo74XsD04.roa
File: NsfgJiV_JgeRudJ6-2Qo74XsD04.roa (raw, json)
Hash identifier: t0tZZYxsAW3seGtj9H9wuYbKHYjQ9OLS/CtqiQB9dl4=
Subject key identifier: 36:C7:E0:26:25:7F:26:07:91:B9:D2:7A:FB:64:28:EF:85:EC:0F:4E
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0804
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NsfgJiV_JgeRudJ6-2Qo74XsD04.roa
Signing time: Tue 29 Sep 2020 10:06:43 +0000
ROA not before: Tue 29 Sep 2020 10:06:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18185
IP address blocks: 120.126.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=36C7E026257F260791B9D27AFB6428EF85EC0F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:ac:ac:89:23:d2:f6:a5:84:73:ab:04:15:
5e:1b:35:ee:e2:38:76:7d:c5:8b:eb:e2:83:38:48:
e6:53:c8:2c:a7:76:46:30:23:2b:43:d4:49:9a:15:
35:b5:3a:df:aa:c8:59:83:ea:45:ea:82:77:c9:76:
0a:e0:22:aa:75:e2:2e:4e:c9:6c:59:28:22:da:69:
55:5d:94:a4:62:d8:73:17:0d:1e:25:9c:1f:95:66:
91:64:74:76:ed:85:8a:48:de:2e:de:b4:43:0e:c6:
b8:88:c9:67:bd:aa:37:85:96:43:d9:ca:99:dc:3b:
20:43:b8:4e:32:16:53:86:3d:26:56:1f:2d:0f:b3:
3a:00:29:93:f2:26:79:95:f8:0a:6d:a2:50:d6:3b:
57:eb:5c:c9:2e:c9:11:d9:17:5f:d8:d5:0b:fb:eb:
f6:b5:85:2a:8c:17:a6:de:c3:78:2c:5d:22:a9:6a:
de:6b:20:f0:42:62:bb:26:ac:49:64:13:d0:f2:5f:
39:ad:b5:47:8b:c3:63:b7:bb:13:82:2b:f0:bc:35:
e8:fa:e7:42:2d:6f:e3:9d:f8:de:c6:2a:1d:2a:c2:
06:0c:ce:03:e5:a5:69:b6:b7:03:63:91:14:a1:85:
bc:ee:7c:7f:68:21:ec:1e:cc:6f:97:d4:4b:8f:8e:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C7:E0:26:25:7F:26:07:91:B9:D2:7A:FB:64:28:EF:85:EC:0F:4E
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/NsfgJiV_JgeRudJ6-2Qo74XsD04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:30:c3:51:19:45:85:99:80:17:b1:40:ed:fb:41:fb:80:22:
fb:c7:d3:bb:88:53:11:57:22:57:e3:a9:c0:5b:1c:91:4f:13:
01:7b:58:22:bc:a6:46:2c:39:2e:be:2f:60:df:c2:22:d8:db:
88:11:13:e6:96:70:80:18:04:5b:d5:89:81:17:01:1c:5d:1c:
2a:bc:b5:eb:d3:dc:9a:31:fd:46:09:64:4a:53:a5:f4:d0:46:
21:c9:4c:96:51:03:99:36:4d:ee:4b:2c:7f:5e:e3:5d:8f:e6:
3f:14:59:32:f4:c9:20:6c:7b:41:b4:fe:16:84:a7:62:48:da:
3b:ef:5d:31:46:3a:3b:2c:d4:df:1d:7b:1a:71:bf:41:5c:70:
72:d8:47:3d:47:32:d8:31:6d:1d:f9:87:a6:24:96:65:60:6e:
c4:5f:6c:6c:67:a3:d9:41:03:8d:16:a2:4e:0c:e1:14:75:6d:
a2:c4:a5:a4:e3:0d:c0:bf:e2:5b:29:40:1a:01:f7:58:b3:b1:
e6:ff:94:4a:1b:b9:cc:eb:d7:8e:47:f8:32:b9:97:a0:66:15:
69:76:51:5c:47:7c:3d:c9:d9:50:66:b3:81:3b:58:43:7b:a0:
1b:31:06:bf:4c:c6:78:f6:e8:a6:f4:91:50:e2:fe:67:be:fe:
3d:a3:da:00
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMDA5Mjkx
MDA2NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM2QzdFMDI2MjU3RjI2
MDc5MUI5RDI3QUZCNjQyOEVGODVFQzBGNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrVKysiSPS9qWEc6sEFV4bNe7iOHZ9xYvr4oM4SOZTyCyndkYw
IytD1EmaFTW1Ot+qyFmD6kXqgnfJdgrgIqp14i5OyWxZKCLaaVVdlKRi2HMXDR4l
nB+VZpFkdHbthYpI3i7etEMOxriIyWe9qjeFlkPZypncOyBDuE4yFlOGPSZWHy0P
szoAKZPyJnmV+AptolDWO1frXMkuyRHZF1/Y1Qv76/a1hSqMF6bew3gsXSKpat5r
IPBCYrsmrElkE9DyXzmttUeLw2O3uxOCK/C8Nej650Itb+Od+N7GKh0qwgYMzgPl
pWm2twNjkRShhbzufH9oIewezG+X1EuPjvfHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUNsfgJiV/JgeRudJ6+2Qo74XsD04wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9Oc2ZnSmlWX0pnZVJ1ZEo2LTJR
bzc0WHNEMDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH5A
MA0GCSqGSIb3DQEBCwUAA4IBAQAKMMNRGUWFmYAXsUDt+0H7gCL7x9O7iFMRVyJX
46nAWxyRTxMBe1givKZGLDkuvi9g38Ii2NuIERPmlnCAGARb1YmBFwEcXRwqvLXr
09yaMf1GCWRKU6X00EYhyUyWUQOZNk3uSyx/XuNdj+Y/FFky9MkgbHtBtP4WhKdi
SNo7710xRjo7LNTfHXsacb9BXHBy2Ec9RzLYMW0d+YemJJZlYG7EX2xsZ6PZQQON
FqJODOEUdW2ixKWk4w3Av+JbKUAaAfdYs7Hm/5RKG7nM69eOR/gyuZegZhVpdlFc
R3w9ydlQZrOBO1hDe6AbMQa/TMZ49uim9JFQ4v5nvv49o9oA
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org