Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/p-mz0hg_VC-UFdg4T1MLAn_jDBE.roa
File: p-mz0hg_VC-UFdg4T1MLAn_jDBE.roa (raw, json)
Hash identifier: BjItOhae4uwKUp1/1l/Y46gedlnkEdT3ELrgxyybG7w=
Subject key identifier: A7:E9:B3:D2:18:3F:54:2F:94:15:D8:38:4F:53:0B:02:7F:E3:0C:11
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07E5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/p-mz0hg_VC-UFdg4T1MLAn_jDBE.roa
Signing time: Tue 29 Sep 2020 10:06:36 +0000
ROA not before: Tue 29 Sep 2020 10:06:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 210.62.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A7E9B3D2183F542F9415D8384F530B027FE30C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:b2:10:2f:0a:2b:68:46:38:df:7f:e8:89:
c4:a1:25:d1:67:81:af:f3:74:2d:18:55:cd:d5:46:
98:d8:17:6b:0b:85:de:76:65:df:35:0f:a4:5f:fa:
cf:10:32:97:c5:8d:b8:82:ed:22:cb:c8:be:22:11:
5e:58:9f:30:67:ad:a2:66:c2:63:d2:26:31:32:c3:
11:e5:b2:a5:f0:ce:f7:6a:b7:1c:47:2e:61:a6:b2:
65:74:3e:a0:c0:e8:f9:c2:b1:7b:f3:3d:a1:48:b2:
28:84:06:79:47:0d:21:08:1f:10:14:9d:86:80:80:
1e:6c:85:50:66:0c:76:26:d2:7b:a7:99:f4:32:72:
e6:9b:ab:29:eb:11:26:bc:68:dc:c4:5c:a2:05:f9:
4f:79:16:8e:f1:49:d2:4b:e2:d2:d8:44:f8:e3:72:
50:a2:02:22:07:45:30:11:27:ce:4b:fe:87:f8:9d:
72:c3:dd:56:34:6f:e9:1a:a2:ef:aa:d4:47:ab:1b:
c0:33:21:23:74:3b:c2:60:8c:d4:4b:c9:7f:a8:3f:
7d:b5:3f:89:11:69:ea:9d:ae:9e:09:d4:21:e0:df:
3f:2b:44:ca:89:e0:42:6d:07:40:bc:c6:0b:90:4f:
61:ab:ad:aa:e1:4d:47:1d:67:f6:84:69:dd:1a:01:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:B3:D2:18:3F:54:2F:94:15:D8:38:4F:53:0B:02:7F:E3:0C:11
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/p-mz0hg_VC-UFdg4T1MLAn_jDBE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:d2:0f:98:c8:cc:34:17:c5:50:71:80:f6:97:16:c1:b9:9d:
62:c8:2b:c8:d5:0b:29:d9:10:0c:d3:43:9e:c0:11:03:e4:79:
87:0e:df:29:28:db:0f:22:37:05:fe:8e:c1:a8:d7:3b:be:f9:
df:70:d3:35:fd:8e:9c:c4:31:12:10:4e:1f:6f:18:f4:19:da:
58:ba:65:94:d4:04:85:86:ca:9d:9c:81:93:2d:d9:58:ac:ef:
12:86:a7:6d:22:3a:f7:91:a7:69:cc:9e:46:c9:4e:86:ca:d3:
e6:e8:64:a8:0a:76:b6:c4:f4:09:b1:4a:f6:2f:fb:d7:c0:fd:
a3:15:12:c2:18:10:67:64:ec:3c:97:38:f5:2d:94:1a:e6:f1:
24:59:9f:ab:32:da:0d:99:a3:5f:cc:54:a6:e8:58:7e:ef:46:
b7:d7:7e:a5:6b:fa:61:1f:1e:37:5b:2a:31:c4:b2:6b:02:85:
59:3e:74:f8:e6:04:84:b3:11:e3:10:2f:58:df:93:02:e6:f4:
67:8c:55:11:7a:9e:d8:93:56:f1:1a:23:9f:5a:05:7c:3b:7c:
d6:4f:1e:c9:b1:47:1f:ed:f9:46:5a:1b:df:79:c2:16:78:63:
f8:d0:99:77:5a:0e:4d:3d:4a:49:30:ae:02:b3:b1:92:09:3f:
ac:30:a6:c6
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMDA5Mjkx
MDA2MzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE3RTlCM0QyMTgzRjU0
MkY5NDE1RDgzODRGNTMwQjAyN0ZFMzBDMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuH7IQLworaEY433/oicShJdFnga/zdC0YVc3VRpjYF2sLhd52
Zd81D6Rf+s8QMpfFjbiC7SLLyL4iEV5YnzBnraJmwmPSJjEywxHlsqXwzvdqtxxH
LmGmsmV0PqDA6PnCsXvzPaFIsiiEBnlHDSEIHxAUnYaAgB5shVBmDHYm0nunmfQy
cuabqynrESa8aNzEXKIF+U95Fo7xSdJL4tLYRPjjclCiAiIHRTARJ85L/of4nXLD
3VY0b+kaou+q1EerG8AzISN0O8JgjNRLyX+oP321P4kRaeqdrp4J1CHg3z8rRMqJ
4EJtB0C8xguQT2GrrarhTUcdZ/aEad0aAYgpAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUp+mz0hg/VC+UFdg4T1MLAn/jDBEwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9wLW16MGhnX1ZDLVVGZGc0VDFN
TEFuX2pEQkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0j7g
MA0GCSqGSIb3DQEBCwUAA4IBAQAO0g+YyMw0F8VQcYD2lxbBuZ1iyCvI1Qsp2RAM
00OewBED5HmHDt8pKNsPIjcF/o7BqNc7vvnfcNM1/Y6cxDESEE4fbxj0GdpYumWU
1ASFhsqdnIGTLdlYrO8ShqdtIjr3kadpzJ5GyU6GytPm6GSoCna2xPQJsUr2L/vX
wP2jFRLCGBBnZOw8lzj1LZQa5vEkWZ+rMtoNmaNfzFSm6Fh+70a3136la/phHx43
WyoxxLJrAoVZPnT45gSEsxHjEC9Y35MC5vRnjFURep7Yk1bxGiOfWgV8O3zWTx7J
sUcf7flGWhvfecIWeGP40Jl3Wg5NPUpJMK4Cs7GSCT+sMKbG
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org