Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/tMFc7NfS-ULzig29r23rZSYw3sM.roa
File: tMFc7NfS-ULzig29r23rZSYw3sM.roa (raw, json)
Hash identifier: TsVImq3wXHgBrSu/GWDVNsaDOjMHiumEQpJEoILN2HA=
Subject key identifier: B4:C1:5C:EC:D7:D2:F9:42:F3:8A:0D:BD:AF:6D:EB:65:26:30:DE:C3
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09E4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tMFc7NfS-ULzig29r23rZSYw3sM.roa
Signing time: Sun 07 Feb 2021 12:39:24 +0000
ROA not before: Sun 07 Feb 2021 12:39:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131150
IP address blocks: 163.32.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:39:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4C15CECD7D2F942F38A0DBDAF6DEB652630DEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:01:2d:50:e4:86:e6:f5:48:12:2c:3a:5f:6b:
c7:47:0b:0a:41:88:8d:8a:11:52:49:86:00:4e:75:
e9:e7:48:3e:c7:95:12:19:77:eb:c7:78:b6:c4:63:
1f:e9:cf:d8:ae:f6:5e:22:d6:71:af:1d:51:e2:ec:
10:f3:6d:4c:2b:82:45:27:23:66:49:15:f3:71:06:
9c:9b:b1:58:77:a3:4e:6e:df:64:ff:81:fa:81:a8:
78:0e:9a:8a:3a:ca:ef:a3:0d:e7:1e:99:e4:9a:39:
1a:c2:13:13:dc:b6:a5:30:15:7e:d0:38:5f:f1:de:
32:ca:f4:05:ef:c4:cf:3a:15:f0:82:3e:48:40:a2:
88:45:44:08:24:e5:50:c5:cf:11:db:4e:2b:a8:b3:
1f:33:57:b0:d7:09:29:b7:a9:ec:a1:46:d5:91:c8:
c9:d1:18:99:f1:5a:ee:c2:ae:07:73:3a:f5:de:3c:
95:c3:b4:61:5b:c1:3b:c7:e3:69:d7:ad:20:0a:87:
41:f3:b5:ff:59:0c:4c:ee:e9:f9:5e:47:e8:6b:c4:
b9:a3:3c:c5:fc:0b:56:e4:d8:80:92:85:28:81:2a:
dd:30:8d:88:dd:ab:8c:ee:e7:44:95:d6:ba:3e:8c:
20:8d:2c:be:d7:00:3d:18:5b:d9:14:35:ff:df:3f:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:5C:EC:D7:D2:F9:42:F3:8A:0D:BD:AF:6D:EB:65:26:30:DE:C3
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tMFc7NfS-ULzig29r23rZSYw3sM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:17:84:f8:3e:fb:80:74:ab:89:c0:69:19:c4:10:bf:39:e2:
61:74:25:99:8c:ee:d9:83:7c:29:5b:f0:6f:0b:db:5d:fd:e5:
e2:04:43:25:0a:7c:c9:dc:9c:b0:62:1f:54:16:94:d6:bf:c1:
c9:d9:69:69:63:c4:ee:12:4f:dd:57:16:ec:1b:e6:8c:ac:37:
27:88:8b:71:3b:1f:ca:b5:1e:c7:bb:0e:8d:43:0d:06:c7:da:
59:35:7d:19:07:8f:c5:d1:89:12:3b:34:22:c3:d7:99:73:e3:
53:7c:3b:f2:59:1b:a9:d5:ab:e5:41:7a:cf:e1:49:ef:6b:e0:
3b:40:e2:85:5e:d6:bf:09:44:80:74:0f:32:70:dd:6b:8e:a8:
28:05:ae:7c:1d:90:06:99:95:66:63:08:dc:4e:a1:23:60:a2:
90:ca:9b:4d:04:77:4d:e7:5a:d9:bc:85:29:ea:3f:a8:12:b5:
10:7b:4c:2f:fc:bb:a3:36:ec:51:12:6d:81:f9:f5:5a:c6:21:
5f:ec:6d:13:cb:73:31:63:9f:4f:e8:81:45:af:48:73:8c:9d:
f7:75:c1:53:e6:a0:37:52:63:9b:13:18:b3:81:73:31:17:84:
d4:97:ef:ac:00:ca:35:96:86:2e:95:79:3d:3e:5e:6b:61:58:
10:92:dd:86
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMTAyMDcx
MjM5MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI0QzE1Q0VDRDdEMkY5
NDJGMzhBMERCREFGNkRFQjY1MjYzMERFQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuAS1Q5Ibm9UgSLDpfa8dHCwpBiI2KEVJJhgBOdennSD7HlRIZ
d+vHeLbEYx/pz9iu9l4i1nGvHVHi7BDzbUwrgkUnI2ZJFfNxBpybsVh3o05u32T/
gfqBqHgOmoo6yu+jDecemeSaORrCExPctqUwFX7QOF/x3jLK9AXvxM86FfCCPkhA
oohFRAgk5VDFzxHbTiuosx8zV7DXCSm3qeyhRtWRyMnRGJnxWu7CrgdzOvXePJXD
tGFbwTvH42nXrSAKh0Hztf9ZDEzu6fleR+hrxLmjPMX8C1bk2ICShSiBKt0wjYjd
q4zu50SV1ro+jCCNLL7XAD0YW9kUNf/fP7ExAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUtMFc7NfS+ULzig29r23rZSYw3sMwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC90TUZjN05mUy1VTHppZzI5cjIz
clpTWXczc00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoyC8
MA0GCSqGSIb3DQEBCwUAA4IBAQA7F4T4PvuAdKuJwGkZxBC/OeJhdCWZjO7Zg3wp
W/BvC9td/eXiBEMlCnzJ3JywYh9UFpTWv8HJ2WlpY8TuEk/dVxbsG+aMrDcniItx
Ox/KtR7Huw6NQw0Gx9pZNX0ZB4/F0YkSOzQiw9eZc+NTfDvyWRup1avlQXrP4Unv
a+A7QOKFXta/CUSAdA8ycN1rjqgoBa58HZAGmZVmYwjcTqEjYKKQyptNBHdN51rZ
vIUp6j+oErUQe0wv/LujNuxREm2B+fVaxiFf7G0Ty3MxY59P6IFFr0hzjJ33dcFT
5qA3UmObExizgXMxF4TUl++sAMo1loYulXk9Pl5rYVgQkt2G
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org