Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/eX6t_aM7tws0Q8zgGBSt7iCjh14.roa
File: eX6t_aM7tws0Q8zgGBSt7iCjh14.roa (raw, json)
Hash identifier: g8QjJ3+Y9S6GyXxF/wb+lkShJRE+gsPe0l4KTo8i9Qk=
Subject key identifier: 79:7E:AD:FD:A3:3B:B7:0B:34:43:CC:E0:18:14:AD:EE:20:A3:87:5E
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0AC7
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/eX6t_aM7tws0Q8zgGBSt7iCjh14.roa
Signing time: Wed 29 Sep 2021 02:41:03 +0000
ROA not before: Wed 29 Sep 2021 02:41:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18185
IP address blocks: 120.117.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2759 (0xac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 02:41:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=797EADFDA33BB70B3443CCE01814ADEE20A3875E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:bc:73:bb:9b:81:70:86:60:ac:13:e7:ce:
70:ea:89:86:af:60:02:49:05:a2:aa:b5:63:32:dc:
50:8f:58:b5:5f:f7:71:c3:be:94:6c:45:6d:a2:02:
1b:5d:15:f3:21:64:93:7f:d5:67:d4:1d:1b:48:4f:
53:30:93:c2:cd:2c:f9:78:02:bf:7e:12:f0:81:88:
e0:de:c3:8e:05:91:d0:bc:a7:a9:2b:cd:a2:3d:6e:
27:9d:1a:41:ee:b7:76:6d:38:c5:fc:ae:fa:50:48:
f5:2a:34:03:7b:d7:d9:56:28:ac:25:60:ac:db:b5:
a8:84:d8:33:95:32:8f:ca:be:b4:4a:2b:65:8b:43:
30:1e:57:fa:dc:b4:01:15:32:51:66:df:cc:6e:d1:
d0:b5:f3:d3:65:88:cb:cf:0d:64:8d:a2:3a:fb:84:
05:45:f9:1f:32:04:b2:ae:10:43:9d:b9:16:d9:ac:
c9:9c:17:22:63:e9:3b:01:c6:18:89:cd:2b:33:a0:
8b:73:50:be:45:69:b8:45:9c:c2:43:bd:43:88:d5:
62:07:3f:8c:8c:db:f7:1a:c5:00:b7:0c:0a:78:f5:
c3:1a:c9:40:cd:b4:bd:ad:29:6f:af:84:fc:13:e9:
15:72:9d:72:0a:d0:95:3d:a0:59:fd:50:6f:90:4e:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7E:AD:FD:A3:3B:B7:0B:34:43:CC:E0:18:14:AD:EE:20:A3:87:5E
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/eX6t_aM7tws0Q8zgGBSt7iCjh14.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.2.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d8:b4:67:17:16:11:8f:54:d8:4b:52:18:78:f1:50:a3:d9:
ac:11:54:5f:08:fd:53:31:59:5a:32:00:1d:73:b3:6f:94:de:
c2:9f:d6:c8:44:85:42:9b:40:0d:6d:35:43:b8:38:1c:95:6c:
6e:77:d1:b7:74:d3:ae:d6:9e:4e:7b:b6:12:d1:70:b7:b8:c7:
0e:19:b6:53:bb:06:de:bb:46:44:f6:33:61:ed:b7:69:39:6b:
89:9a:17:3f:74:6e:c2:23:f4:e7:ef:e8:53:b7:27:cb:ee:db:
00:68:c0:d9:ad:4b:13:9f:4e:4e:30:5a:23:47:f6:be:be:a0:
5e:5a:40:a5:45:81:7c:c0:87:ed:40:a5:4b:08:a4:b8:48:6b:
6f:53:cd:6f:c7:0b:76:5b:df:e2:38:55:0e:6b:0b:a1:50:a9:
59:45:73:28:98:d0:5a:0d:1a:f7:3c:3e:db:72:6c:c0:47:9c:
53:89:aa:74:c5:5a:ce:12:22:56:26:37:0d:2a:33:a2:1d:eb:
7e:8d:84:ec:32:fb:0c:23:db:47:dc:74:94:ac:26:1a:a6:7b:
2d:f4:d5:f2:a3:70:da:f8:72:1f:f0:16:b7:3a:fa:52:87:3a:
fb:81:e3:f1:16:7e:dc:09:94:53:83:ec:42:db:86:78:f4:48:
a3:2a:5d:79
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCscwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMTA5Mjkw
MjQxMDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc5N0VBREZEQTMzQkI3
MEIzNDQzQ0NFMDE4MTRBREVFMjBBMzg3NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClz7xzu5uBcIZgrBPnznDqiYavYAJJBaKqtWMy3FCPWLVf93HD
vpRsRW2iAhtdFfMhZJN/1WfUHRtIT1Mwk8LNLPl4Ar9+EvCBiODew44FkdC8p6kr
zaI9biedGkHut3ZtOMX8rvpQSPUqNAN719lWKKwlYKzbtaiE2DOVMo/KvrRKK2WL
QzAeV/rctAEVMlFm38xu0dC189NliMvPDWSNojr7hAVF+R8yBLKuEEOduRbZrMmc
FyJj6TsBxhiJzSszoItzUL5FabhFnMJDvUOI1WIHP4yM2/caxQC3DAp49cMayUDN
tL2tKW+vhPwT6RVynXIK0JU9oFn9UG+QTs2vAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUeX6t/aM7tws0Q8zgGBSt7iCjh14wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9lWDZ0X2FNN3R3czBROHpnR0JT
dDdpQ2poMTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeHUC
MA0GCSqGSIb3DQEBCwUAA4IBAQBH2LRnFxYRj1TYS1IYePFQo9msEVRfCP1TMVla
MgAdc7NvlN7Cn9bIRIVCm0ANbTVDuDgclWxud9G3dNOu1p5Oe7YS0XC3uMcOGbZT
uwbeu0ZE9jNh7bdpOWuJmhc/dG7CI/Tn7+hTtyfL7tsAaMDZrUsTn05OMFojR/a+
vqBeWkClRYF8wIftQKVLCKS4SGtvU81vxwt2W9/iOFUOawuhUKlZRXMomNBaDRr3
PD7bcmzAR5xTiap0xVrOEiJWJjcNKjOiHet+jYTsMvsMI9tH3HSUrCYapnst9NXy
o3Da+HIf8Ba3OvpShzr7gePxFn7cCZRTg+xC24Z49EijKl15
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org