Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/PUZqh3ARuAvFeOtyvL4J69SNJ4E.roa
File: PUZqh3ARuAvFeOtyvL4J69SNJ4E.roa (raw, json)
Hash identifier: xrU9+czaB4gn2HDF0gSAV6Y7jxog3hkHKdz8SURv46o=
Subject key identifier: 3D:46:6A:87:70:11:B8:0B:C5:78:EB:72:BC:BE:09:EB:D4:8D:27:81
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0A9E
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PUZqh3ARuAvFeOtyvL4J69SNJ4E.roa
Signing time: Wed 29 Sep 2021 02:41:27 +0000
ROA not before: Wed 29 Sep 2021 02:41:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9264
IP address blocks: 140.109.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 02:41:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3D466A877011B80BC578EB72BCBE09EBD48D2781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:d2:4f:21:04:a6:1a:b4:07:62:ae:0c:3d:
be:e1:d6:f1:a2:4f:06:69:42:f5:26:48:be:55:af:
53:08:ac:b3:31:59:dd:69:f8:b9:61:3e:13:a3:36:
8d:f3:16:c3:4c:c1:45:f3:b0:b6:f9:89:bb:e9:0e:
a6:73:23:c0:47:61:18:e2:14:5e:29:da:a9:4a:1e:
31:67:9d:a8:a3:10:e5:e3:50:63:76:7b:54:74:e7:
ae:32:3b:92:dd:a0:4c:06:57:70:96:51:13:4d:13:
4e:f4:01:cc:ae:43:3d:58:86:fe:a9:df:1d:dd:af:
1b:76:1e:e8:af:a5:51:85:95:0b:2a:96:55:fe:6b:
cc:4f:38:59:e4:84:32:67:03:53:89:e7:7c:76:34:
e6:93:f1:86:5f:71:e4:08:19:9e:96:8b:6f:56:ac:
ea:fb:57:81:60:98:77:21:99:9f:fc:fc:b7:96:17:
25:63:29:a4:61:c7:12:ce:a7:29:4c:2b:84:6a:60:
d7:d1:20:7f:f6:ce:8a:41:c6:f1:9e:30:d6:4f:77:
b0:6f:b7:2a:0d:3f:40:c1:88:6c:d9:31:ca:e1:a3:
1e:25:7f:1d:fe:73:f3:96:25:a0:16:65:6e:01:39:
ec:9b:76:be:20:5b:6e:e1:f6:6f:8c:fe:b3:e7:f9:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:6A:87:70:11:B8:0B:C5:78:EB:72:BC:BE:09:EB:D4:8D:27:81
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PUZqh3ARuAvFeOtyvL4J69SNJ4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:e8:51:ce:88:92:49:0c:4a:6d:85:6b:62:d8:92:a2:04:4d:
bb:78:8a:29:39:47:3b:6f:0d:b1:4c:24:c6:e4:81:b2:c8:ca:
12:04:8b:a1:1c:39:af:0a:f5:86:9f:46:17:ee:86:9b:0f:4b:
de:6f:2a:84:33:ae:98:b3:a9:78:46:a0:21:c7:68:82:40:df:
33:2f:c1:21:9c:4b:e3:a1:23:7f:2a:84:97:0c:56:f6:1b:5f:
8d:1d:45:4f:b7:91:a8:8c:31:ff:79:80:d2:a9:f1:8b:2d:55:
2c:21:37:bb:a5:71:d9:48:1b:01:29:4e:13:15:70:7b:44:45:
ed:5b:a2:84:03:53:0c:ca:d9:9b:86:6a:7b:57:93:af:9b:e7:
c3:00:64:b9:a2:65:d7:e8:95:62:c1:9f:51:ae:a9:c2:b9:d9:
f1:1d:40:af:4c:e0:8a:06:e9:95:1b:52:c8:f1:4f:0a:b8:63:
cd:3e:1d:ad:3c:77:2e:48:af:ed:de:74:bd:fa:f6:08:77:37:
1e:bf:a1:45:d5:f4:15:f3:e7:28:ed:f5:20:a2:04:ba:b2:73:
1f:95:97:76:47:90:0a:2c:43:04:f0:f4:9f:b0:93:2e:1e:c5:
42:c8:44:6d:e1:9c:65:90:4b:aa:4c:e4:07:1b:b0:83:65:5d:
c8:38:bc:8f
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yMTA5Mjkw
MjQxMjdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNENDY2QTg3NzAxMUI4
MEJDNTc4RUI3MkJDQkUwOUVCRDQ4RDI3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrZdJPIQSmGrQHYq4MPb7h1vGiTwZpQvUmSL5Vr1MIrLMxWd1p
+LlhPhOjNo3zFsNMwUXzsLb5ibvpDqZzI8BHYRjiFF4p2qlKHjFnnaijEOXjUGN2
e1R0564yO5LdoEwGV3CWURNNE070AcyuQz1Yhv6p3x3drxt2HuivpVGFlQsqllX+
a8xPOFnkhDJnA1OJ53x2NOaT8YZfceQIGZ6Wi29WrOr7V4FgmHchmZ/8/LeWFyVj
KaRhxxLOpylMK4RqYNfRIH/2zopBxvGeMNZPd7BvtyoNP0DBiGzZMcrhox4lfx3+
c/OWJaAWZW4BOeybdr4gW27h9m+M/rPn+Q7vAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUPUZqh3ARuAvFeOtyvL4J69SNJ4EwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9QVVpxaDNBUnVBdkZlT3R5dkw0
SjY5U05KNEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjG0w
DQYJKoZIhvcNAQELBQADggEBAGXoUc6IkkkMSm2Fa2LYkqIETbt4iik5RztvDbFM
JMbkgbLIyhIEi6EcOa8K9YafRhfuhpsPS95vKoQzrpizqXhGoCHHaIJA3zMvwSGc
S+OhI38qhJcMVvYbX40dRU+3kaiMMf95gNKp8YstVSwhN7ulcdlIGwEpThMVcHtE
Re1booQDUwzK2ZuGantXk6+b58MAZLmiZdfolWLBn1GuqcK52fEdQK9M4IoG6ZUb
UsjxTwq4Y80+Ha08dy5Ir+3edL369gh3Nx6/oUXV9BXz5yjt9SCiBLqycx+Vl3ZH
kAosQwTw9J+wky4exULIRG3hnGWQS6pM5AcbsINlXcg4vI8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org