Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mYorw_scDWfAmLXR77OKCS4pqzI.roa
File: mYorw_scDWfAmLXR77OKCS4pqzI.roa (raw, json)
Hash identifier: EP5GAkyyHmopo7c2sWSxH/1q38zbeKETW148YxlrcYM=
Subject key identifier: 99:8A:2B:C3:FB:1C:0D:67:C0:98:B5:D1:EF:B3:8A:09:2E:29:AB:32
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07F9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mYorw_scDWfAmLXR77OKCS4pqzI.roa
Signing time: Tue 29 Sep 2020 10:06:41 +0000
ROA not before: Tue 29 Sep 2020 10:06:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 210.60.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=998A2BC3FB1C0D67C098B5D1EFB38A092E29AB32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:19:78:5e:d0:16:93:60:2f:cc:33:c1:05:
f8:8c:de:ae:52:94:5f:e0:9d:0d:59:70:8e:d1:15:
03:3a:ce:00:34:3c:95:4f:26:21:44:02:88:e6:18:
57:bd:52:32:01:58:ab:2d:05:67:43:1c:ae:e0:2f:
33:a0:c7:12:42:87:e9:97:6b:0b:72:44:3d:99:aa:
ae:b6:ba:1c:53:a8:ad:f8:b6:ab:1a:e0:72:40:85:
99:bd:bf:73:b6:50:18:59:c4:0c:f6:d8:9d:b4:b2:
86:6d:01:35:c9:14:95:da:70:6e:f7:77:9d:ce:21:
5a:8f:c7:66:5d:27:51:df:ff:d5:fb:0b:48:8b:9c:
46:5e:49:e8:2c:5f:d3:1a:17:35:0b:b8:e1:56:d3:
82:13:b5:b4:6d:49:20:df:e2:3a:f6:3f:b4:dd:34:
4a:e2:be:84:a7:79:fe:59:a4:52:0b:e1:97:6e:9f:
c3:3f:b1:3f:42:bf:f1:97:7d:54:b9:37:6d:1f:de:
e6:e0:17:6d:f1:14:74:e5:39:1f:8b:24:d8:ed:c2:
7a:96:70:ec:2f:cc:85:a1:92:a4:68:c4:bf:87:01:
85:5c:ee:c2:2b:6a:04:1d:4d:fe:1a:dc:22:f4:1c:
94:2f:f6:bb:21:75:68:bc:cd:e0:5a:70:b4:7a:02:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:2B:C3:FB:1C:0D:67:C0:98:B5:D1:EF:B3:8A:09:2E:29:AB:32
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mYorw_scDWfAmLXR77OKCS4pqzI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:df:77:1b:52:7e:ff:f8:d7:0b:c8:eb:ec:42:57:20:e5:0a:
aa:62:ef:1a:fc:4f:63:98:f4:a7:ac:c4:c3:4d:98:69:d3:df:
52:1e:62:3e:f4:ec:dd:9f:d6:3e:11:6d:ab:ca:fb:51:98:b1:
f5:ce:49:04:a9:75:03:90:38:04:15:c3:cc:3c:84:b3:04:2c:
ae:99:48:40:1f:3a:7b:7e:4e:db:8e:61:84:a1:f3:fc:ad:90:
1c:80:4c:0c:23:22:e7:32:d8:31:40:d6:8c:64:38:14:b3:c7:
da:ee:d6:57:76:e1:63:d2:b8:fd:f4:a8:e6:cf:13:04:de:54:
c7:1a:b8:85:88:8c:88:18:18:52:c0:fd:ab:8a:62:5f:c1:aa:
3d:1e:bb:f0:1e:0e:63:a9:ff:c8:ce:c2:17:17:6e:74:e6:bc:
b2:16:98:70:94:a6:87:41:49:9e:f1:57:7e:79:c6:31:fb:6e:
8e:42:3b:14:f0:12:6c:40:e8:50:39:c9:12:c9:ec:35:bc:b8:
12:60:a1:51:6e:32:7f:b4:66:6b:f0:2a:91:61:c5:bb:99:8a:
98:f6:66:82:c7:fc:e5:45:b5:0b:c7:68:65:dc:3d:3d:b2:35:
be:f0:c8:2e:d9:44:27:c2:60:ff:0b:1e:30:46:8f:f8:1e:6c:
e7:26:8a:a6
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMDA5Mjkx
MDA2NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk5OEEyQkMzRkIxQzBE
NjdDMDk4QjVEMUVGQjM4QTA5MkUyOUFCMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqvhl4XtAWk2AvzDPBBfiM3q5SlF/gnQ1ZcI7RFQM6zgA0PJVP
JiFEAojmGFe9UjIBWKstBWdDHK7gLzOgxxJCh+mXawtyRD2Zqq62uhxTqK34tqsa
4HJAhZm9v3O2UBhZxAz22J20soZtATXJFJXacG73d53OIVqPx2ZdJ1Hf/9X7C0iL
nEZeSegsX9MaFzULuOFW04ITtbRtSSDf4jr2P7TdNErivoSnef5ZpFIL4Zdun8M/
sT9Cv/GXfVS5N20f3ubgF23xFHTlOR+LJNjtwnqWcOwvzIWhkqRoxL+HAYVc7sIr
agQdTf4a3CL0HJQv9rshdWi8zeBacLR6AhBZAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUmYorw/scDWfAmLXR77OKCS4pqzIwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9tWW9yd19zY0RXZkFtTFhSNzdP
S0NTNHBxekkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0jww
DQYJKoZIhvcNAQELBQADggEBAKDfdxtSfv/41wvI6+xCVyDlCqpi7xr8T2OY9Kes
xMNNmGnT31IeYj707N2f1j4RbavK+1GYsfXOSQSpdQOQOAQVw8w8hLMELK6ZSEAf
Ont+TtuOYYSh8/ytkByATAwjIucy2DFA1oxkOBSzx9ru1ld24WPSuP30qObPEwTe
VMcauIWIjIgYGFLA/auKYl/Bqj0eu/AeDmOp/8jOwhcXbnTmvLIWmHCUpodBSZ7x
V355xjH7bo5COxTwEmxA6FA5yRLJ7DW8uBJgoVFuMn+0ZmvwKpFhxbuZipj2ZoLH
/OVFtQvHaGXcPT2yNb7wyC7ZRCfCYP8LHjBGj/gebOcmiqY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org