Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/s0TPlA5--8JPJnWDPum_wR6Y8Dc.roa
File: s0TPlA5--8JPJnWDPum_wR6Y8Dc.roa (raw, json)
Hash identifier: CwLiqst9UU5cQ+DsWiWbCHwTnTid61R1+04cuJUlhsI=
Subject key identifier: B3:44:CF:94:0E:7E:FB:C2:4F:26:75:83:3E:E9:BF:C1:1E:98:F0:37
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09FA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/s0TPlA5--8JPJnWDPum_wR6Y8Dc.roa
Signing time: Sun 07 Feb 2021 12:39:46 +0000
ROA not before: Sun 07 Feb 2021 12:39:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38844
IP address blocks: 210.60.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:39:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B344CF940E7EFBC24F2675833EE9BFC11E98F037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:35:41:f4:ec:93:c8:90:35:1f:52:d9:02:
0f:ab:7c:12:52:e8:6c:c4:4b:0c:c9:77:b8:8e:f8:
23:f4:72:ee:44:98:80:2d:c8:9a:08:00:78:f1:d4:
18:e5:a5:c5:86:ff:40:07:73:8b:ba:53:72:49:9f:
16:7c:65:ee:e7:08:51:26:ae:59:d5:83:ea:29:44:
fb:48:c0:93:cd:47:6d:fe:f1:0e:fc:2c:6c:d3:90:
ca:35:20:7f:16:7e:db:65:56:ce:b9:2b:72:65:75:
e8:bb:fb:f8:d8:6b:41:32:f5:d4:66:71:16:85:f2:
1d:9d:65:dd:85:92:6c:0b:62:eb:4e:ff:b1:a6:e9:
91:d5:a0:5c:e9:dc:e2:02:ba:21:bc:64:4f:7f:d3:
dd:e7:37:a4:cb:ca:ef:42:4f:36:2d:34:d4:f9:fd:
9c:b0:9b:7e:13:a7:f1:9d:1f:2b:6b:f4:36:c1:6e:
18:89:a6:ab:33:36:b4:c2:03:2c:ef:21:78:e5:3b:
82:1b:e3:8f:ef:ab:a5:4d:85:27:97:ab:5b:04:68:
b5:68:ad:3d:96:2b:2d:10:79:46:a5:d6:d5:8e:00:
ec:f6:7c:1b:27:e2:a4:37:c7:ee:3c:41:e2:d7:33:
94:5a:6b:3d:98:a2:ec:7f:90:06:c1:c3:34:51:18:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:44:CF:94:0E:7E:FB:C2:4F:26:75:83:3E:E9:BF:C1:1E:98:F0:37
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/s0TPlA5--8JPJnWDPum_wR6Y8Dc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.150.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:27:27:7f:4f:f8:7d:c3:62:f2:86:48:07:58:dc:80:41:
c6:b8:d4:1e:ec:79:93:dc:63:19:e8:bb:71:ec:92:00:87:99:
50:77:e4:0e:75:8d:43:fb:65:06:93:a0:e9:9a:17:24:9d:1c:
d5:6a:bb:d8:31:7c:e6:15:ce:04:8d:ab:cd:fe:7e:fd:a8:d2:
82:72:e6:7d:20:a3:8f:f3:da:09:be:78:0f:c6:38:b7:e0:b8:
62:e2:c1:b3:25:cc:52:fd:17:be:19:4f:34:6c:17:6d:63:f5:
c3:a3:8f:06:11:49:9c:1e:a1:50:45:73:47:28:32:aa:fa:c5:
5b:93:de:f0:c3:85:ba:7d:6e:70:7c:2c:cd:8f:03:c7:9f:2e:
54:f8:f5:27:2c:54:34:9d:b8:f0:8b:94:b1:c0:b8:8f:9c:a1:
d8:16:86:9b:1e:7d:7a:d7:07:05:b0:2c:89:54:4d:b6:2c:52:
e7:94:a3:60:aa:05:82:d2:70:99:81:ce:b5:91:51:a6:30:9c:
0f:b6:80:3e:4f:4e:8d:85:f7:ab:65:28:61:48:e8:e2:4e:1b:
58:92:a8:6d:45:a0:8f:75:8c:e7:2e:81:dc:f8:d2:18:60:43:
9a:74:f6:77:19:c9:a4:ef:4c:ab:ec:45:21:ee:30:1d:78:3f:
81:0a:41:d2
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMTAyMDcx
MjM5NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIzNDRDRjk0MEU3RUZC
QzI0RjI2NzU4MzNFRTlCRkMxMUU5OEYwMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIazVB9OyTyJA1H1LZAg+rfBJS6GzESwzJd7iO+CP0cu5EmIAt
yJoIAHjx1BjlpcWG/0AHc4u6U3JJnxZ8Ze7nCFEmrlnVg+opRPtIwJPNR23+8Q78
LGzTkMo1IH8WfttlVs65K3Jldei7+/jYa0Ey9dRmcRaF8h2dZd2FkmwLYutO/7Gm
6ZHVoFzp3OICuiG8ZE9/093nN6TLyu9CTzYtNNT5/Zywm34Tp/GdHytr9DbBbhiJ
pqszNrTCAyzvIXjlO4Ib44/vq6VNhSeXq1sEaLVorT2WKy0QeUal1tWOAOz2fBsn
4qQ3x+48QeLXM5Raaz2Youx/kAbBwzRRGGEVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUs0TPlA5++8JPJnWDPum/wR6Y8DcwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9zMFRQbEE1LS04SlBKbldEUHVt
X3dSNlk4RGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0jyW
MA0GCSqGSIb3DQEBCwUAA4IBAQBlSycnf0/4fcNi8oZIB1jcgEHGuNQe7HmT3GMZ
6Ltx7JIAh5lQd+QOdY1D+2UGk6DpmhcknRzVarvYMXzmFc4EjavN/n79qNKCcuZ9
IKOP89oJvngPxji34Lhi4sGzJcxS/Re+GU80bBdtY/XDo48GEUmcHqFQRXNHKDKq
+sVbk97ww4W6fW5wfCzNjwPHny5U+PUnLFQ0nbjwi5SxwLiPnKHYFoabHn161wcF
sCyJVE22LFLnlKNgqgWC0nCZgc61kVGmMJwPtoA+T06NhferZShhSOjiThtYkqht
RaCPdYznLoHc+NIYYEOadPZ3Gcmk70yr7EUh7jAdeD+BCkHS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org