Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/kJi3dZuRj5NcXybSxDNM7PDfDm0.roa
File: kJi3dZuRj5NcXybSxDNM7PDfDm0.roa (raw, json)
Hash identifier: bwK6lFkTAiRHu+/HHvjwWJFqVbFgJVzgeUqxOumy63I=
Subject key identifier: 90:98:B7:75:9B:91:8F:93:5C:5F:26:D2:C4:33:4C:EC:F0:DF:0E:6D
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0B8A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kJi3dZuRj5NcXybSxDNM7PDfDm0.roa
Signing time: Thu 15 Sep 2022 02:41:17 +0000
ROA not before: Thu 15 Sep 2022 02:41:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9264
IP address blocks: 140.109.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 15 02:41:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9098B7759B918F935C5F26D2C4334CECF0DF0E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:99:6c:9b:c0:cb:bb:6e:44:8a:4a:c9:83:
44:17:24:a4:68:a1:77:51:28:10:1f:61:e5:d7:25:
78:25:5f:f7:cf:6b:c9:42:14:7c:b1:66:09:3e:23:
8e:b3:a4:a7:58:4a:4c:d7:f6:fb:3b:6b:a1:4a:91:
14:fd:28:cd:6b:9f:8a:0a:eb:0d:9c:2c:1a:fe:22:
32:3d:bd:0a:61:02:9d:fc:05:d4:81:ad:b3:f3:76:
4b:6f:f2:c3:11:30:11:90:ab:1f:3e:8d:6a:fb:77:
00:6c:6f:79:4e:ca:b4:0b:f2:da:fd:a2:3c:bb:a7:
e2:2b:30:6c:82:d4:1d:1d:dd:dc:c8:3e:10:a1:e3:
ff:40:21:45:a2:36:a3:08:0d:17:69:b0:12:b2:5d:
ed:99:d7:1e:71:88:ab:ea:1a:bf:63:75:89:7f:a4:
1a:59:0b:ae:24:46:44:ce:16:47:6d:75:b5:ca:6e:
2f:07:3d:10:0c:16:7c:fa:77:5e:c4:2f:85:7d:11:
fb:89:08:01:a2:eb:f7:bd:cb:92:26:87:db:b9:a0:
b2:9e:d3:42:1c:62:d3:b9:90:05:a6:76:fe:d9:92:
18:ff:e1:6b:bc:4f:93:02:97:20:a3:ca:ce:92:75:
c4:4b:4f:8e:00:8c:5c:1d:d4:92:47:32:70:40:a6:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:B7:75:9B:91:8F:93:5C:5F:26:D2:C4:33:4C:EC:F0:DF:0E:6D
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kJi3dZuRj5NcXybSxDNM7PDfDm0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:35:20:f4:66:96:c7:fd:e7:e1:95:01:8c:e4:0f:fb:9f:13:
06:5f:ff:42:35:a4:fc:0a:13:8b:b6:73:d4:2f:e8:d0:8d:89:
a3:3c:f0:cc:d7:c8:9c:ca:40:13:1a:58:a0:27:41:9b:7c:18:
4f:d3:0b:e0:c6:a4:77:e5:52:32:a2:d3:09:ac:19:a7:7f:65:
f9:da:63:88:e0:c1:d9:d8:e1:ef:1a:d7:55:72:1a:d3:6a:d5:
98:52:33:a2:ff:a9:27:a7:88:21:d9:c8:f9:64:68:e0:3a:6f:
6b:29:1a:af:9f:fb:60:b3:02:e0:74:ea:e1:1b:c7:25:6d:00:
6c:69:73:c0:19:c8:ef:bd:5a:ce:da:d7:1c:d5:cd:bc:b0:dc:
54:f5:19:1e:fd:83:ea:1a:07:47:ef:82:cd:ef:6b:e3:c5:de:
77:5e:3e:cf:a9:78:15:65:39:7c:4e:5c:3e:ee:74:a0:02:3b:
39:41:06:1f:29:51:7a:4c:2c:ba:7e:9a:e0:26:fc:ab:9e:da:
02:ac:ce:6f:c0:ed:1a:74:41:87:3f:a1:94:6d:c7:d3:55:f9:
49:e4:69:c8:38:77:83:38:3b:a1:19:08:3e:76:32:65:3c:66:
89:25:ac:c3:13:e2:36:b1:76:2e:27:40:ad:b1:d2:5a:a0:ec:
ea:a6:dd:ba
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICC4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yMjA5MTUw
MjQxMTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkwOThCNzc1OUI5MThG
OTM1QzVGMjZEMkM0MzM0Q0VDRjBERjBFNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2Bplsm8DLu25EikrJg0QXJKRooXdRKBAfYeXXJXglX/fPa8lC
FHyxZgk+I46zpKdYSkzX9vs7a6FKkRT9KM1rn4oK6w2cLBr+IjI9vQphAp38BdSB
rbPzdktv8sMRMBGQqx8+jWr7dwBsb3lOyrQL8tr9ojy7p+IrMGyC1B0d3dzIPhCh
4/9AIUWiNqMIDRdpsBKyXe2Z1x5xiKvqGr9jdYl/pBpZC64kRkTOFkdtdbXKbi8H
PRAMFnz6d17EL4V9EfuJCAGi6/e9y5Imh9u5oLKe00IcYtO5kAWmdv7Zkhj/4Wu8
T5MClyCjys6SdcRLT44AjFwd1JJHMnBAps8lAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUkJi3dZuRj5NcXybSxDNM7PDfDm0wHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9rSmkzZFp1Umo1TmNYeWJTeERO
TTdQRGZEbTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjG0w
DQYJKoZIhvcNAQELBQADggEBAE01IPRmlsf95+GVAYzkD/ufEwZf/0I1pPwKE4u2
c9Qv6NCNiaM88MzXyJzKQBMaWKAnQZt8GE/TC+DGpHflUjKi0wmsGad/ZfnaY4jg
wdnY4e8a11VyGtNq1ZhSM6L/qSeniCHZyPlkaOA6b2spGq+f+2CzAuB06uEbxyVt
AGxpc8AZyO+9Ws7a1xzVzbyw3FT1GR79g+oaB0fvgs3va+PF3ndePs+peBVlOXxO
XD7udKACOzlBBh8pUXpMLLp+muAm/Kue2gKszm/A7Rp0QYc/oZRtx9NV+Unkacg4
d4M4O6EZCD52MmU8ZoklrMMT4jaxdi4nQK2x0lqg7Oqm3bo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org