Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/hTzFAZlH5gGmo-dfEurafLPUQrc.roa
File: hTzFAZlH5gGmo-dfEurafLPUQrc.roa (raw, json)
Hash identifier: HBt0/1xPOWWCVQstTSTu2AzuMygXCKEwc8p3w+bUw3A=
Subject key identifier: 85:3C:C5:01:99:47:E6:01:A6:A3:E7:5F:12:EA:DA:7C:B3:D4:42:B7
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0A96
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hTzFAZlH5gGmo-dfEurafLPUQrc.roa
Signing time: Wed 29 Sep 2021 02:41:24 +0000
ROA not before: Wed 29 Sep 2021 02:41:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38844
IP address blocks: 140.122.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2710 (0xa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 02:41:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=853CC5019947E601A6A3E75F12EADA7CB3D442B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:fa:96:9e:15:26:02:0d:7d:69:0a:75:53:
79:14:b7:01:29:63:42:a8:a8:2d:24:56:ae:14:47:
94:47:43:64:19:dc:74:05:60:88:34:f4:ba:2f:16:
97:d5:f7:ec:21:99:db:b7:d3:b4:0d:7b:e2:9f:bd:
59:e5:53:cd:86:81:88:03:8b:9b:60:14:0f:fd:65:
b0:20:0e:87:1b:1d:11:cd:3a:6b:4f:da:73:f8:33:
b7:69:57:0a:5c:ab:bf:90:12:ea:35:81:fe:2f:3f:
a8:c2:3e:04:cd:3d:d4:9e:6f:a4:d6:99:bf:21:1f:
54:ac:ff:4c:3e:31:cd:a6:4f:14:41:21:f5:88:db:
99:88:97:4a:08:97:61:ee:76:a7:2f:b9:05:07:ed:
1c:c8:9b:fb:5e:d4:d2:f6:85:3a:1f:9d:09:89:1d:
e8:19:76:c5:48:bf:7c:4b:88:28:52:87:1a:db:f3:
fa:77:ff:69:5b:53:f6:49:ee:05:de:7b:c3:cc:68:
52:4e:2e:c5:ba:e8:68:22:da:87:08:d1:fb:ec:20:
71:0e:4f:bd:d7:63:7e:2d:af:01:d7:f1:91:d0:fe:
e2:a2:32:14:2a:ff:0d:4a:43:30:37:d0:9f:ba:06:
a2:4f:80:67:3e:e7:7a:50:dd:69:3f:ed:e3:a3:4b:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:C5:01:99:47:E6:01:A6:A3:E7:5F:12:EA:DA:7C:B3:D4:42:B7
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hTzFAZlH5gGmo-dfEurafLPUQrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.122.0.0/17
Signature Algorithm: sha256WithRSAEncryption
16:c5:8d:c0:5e:dd:59:26:d8:cb:60:ef:66:32:2f:10:77:f2:
56:55:37:d6:55:61:0f:44:7f:4d:a0:9c:6b:6d:db:9e:cc:44:
9d:59:9a:82:7a:32:fd:fc:86:e3:4a:6e:20:0c:be:db:08:c8:
d2:d8:aa:d0:b2:36:3e:bb:6e:16:93:68:b4:35:0f:ac:ae:b1:
15:48:0b:b8:f9:19:a5:af:25:11:d7:8b:45:11:d3:fd:81:ed:
5d:64:19:3c:d6:5f:71:74:8a:b9:d1:7b:7a:31:78:5e:e7:4e:
3c:f0:98:c3:55:89:5d:f2:0a:50:85:98:39:5c:d0:00:c3:5e:
a1:22:7b:dc:54:f7:b8:b5:16:10:b2:c2:4c:20:f0:4e:1d:e6:
71:b7:f6:e5:9e:0e:2c:4c:d4:91:a6:ae:a4:5c:6f:e8:ad:5c:
91:df:cd:f0:0e:d7:20:47:44:7b:8a:dd:01:27:20:60:9e:68:
a5:96:08:71:43:8d:de:4f:4f:e2:56:fb:99:ed:17:3f:65:46:
43:8d:e4:38:ab:3f:db:20:44:90:a4:c0:e1:65:ef:48:c6:cf:
8e:a1:dd:d3:a4:21:8d:30:ff:af:5d:c9:d0:fa:91:b9:54:5a:
8d:d8:10:5c:68:6f:cc:3f:8d:46:8d:4c:59:3f:e5:55:34:e6:
22:cb:e4:e9
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yMTA5Mjkw
MjQxMjRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDg1M0NDNTAxOTk0N0U2
MDFBNkEzRTc1RjEyRUFEQTdDQjNENDQyQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeevqWnhUmAg19aQp1U3kUtwEpY0KoqC0kVq4UR5RHQ2QZ3HQF
YIg09LovFpfV9+whmdu307QNe+KfvVnlU82GgYgDi5tgFA/9ZbAgDocbHRHNOmtP
2nP4M7dpVwpcq7+QEuo1gf4vP6jCPgTNPdSeb6TWmb8hH1Ss/0w+Mc2mTxRBIfWI
25mIl0oIl2HudqcvuQUH7RzIm/te1NL2hTofnQmJHegZdsVIv3xLiChShxrb8/p3
/2lbU/ZJ7gXee8PMaFJOLsW66Ggi2ocI0fvsIHEOT73XY34trwHX8ZHQ/uKiMhQq
/w1KQzA30J+6BqJPgGc+53pQ3Wk/7eOjSwSTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUhTzFAZlH5gGmo+dfEurafLPUQrcwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9oVHpGQVpsSDVnR21vLWRmRXVy
YWZMUFVRcmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjHoA
MA0GCSqGSIb3DQEBCwUAA4IBAQAWxY3AXt1ZJtjLYO9mMi8Qd/JWVTfWVWEPRH9N
oJxrbduezESdWZqCejL9/IbjSm4gDL7bCMjS2KrQsjY+u24Wk2i0NQ+srrEVSAu4
+RmlryUR14tFEdP9ge1dZBk81l9xdIq50Xt6MXhe50488JjDVYld8gpQhZg5XNAA
w16hInvcVPe4tRYQssJMIPBOHeZxt/blng4sTNSRpq6kXG/orVyR383wDtcgR0R7
it0BJyBgnmillghxQ43eT0/iVvuZ7Rc/ZUZDjeQ4qz/bIESQpMDhZe9Ixs+Ood3T
pCGNMP+vXcnQ+pG5VFqN2BBcaG/MP41GjUxZP+VVNOYiy+Tp
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org