Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/uyn1hXofIzaMC8EpNFSWPjZogJk.roa
File: uyn1hXofIzaMC8EpNFSWPjZogJk.roa (raw, json)
Hash identifier: oH8oLDsY6zgoPk63U9eiMY8Q1QhCVQvMibOQaQL5BOA=
Subject key identifier: BB:29:F5:85:7A:1F:23:36:8C:0B:C1:29:34:54:96:3E:36:68:80:99
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07E0
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uyn1hXofIzaMC8EpNFSWPjZogJk.roa
Signing time: Tue 29 Sep 2020 10:06:34 +0000
ROA not before: Tue 29 Sep 2020 10:06:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38844
IP address blocks: 210.60.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016 (0x7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB29F5857A1F23368C0BC1293454963E36688099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:73:00:35:eb:78:7c:38:f5:97:bd:c7:dd:
ed:5e:34:f9:28:bd:dd:d1:98:29:77:46:7c:1b:28:
d7:f2:84:04:4b:6f:73:bd:d5:ca:9f:aa:23:7f:43:
60:26:78:01:dd:eb:5b:b6:fe:fb:f9:41:01:2b:48:
ed:32:3e:18:99:ca:ef:1c:0c:02:73:11:b0:b1:71:
9e:e7:0c:88:fc:a4:58:bd:00:ff:99:0c:9b:46:91:
76:fd:a3:9e:aa:96:b8:9e:e1:d8:79:48:7c:c3:62:
37:50:d8:ef:d5:24:47:80:38:e1:8b:60:13:cf:87:
68:26:d0:37:7e:86:fe:ea:1c:bd:d6:8b:cd:36:3d:
f4:9f:46:d4:ef:11:76:52:19:bd:fc:92:64:cc:bb:
88:fd:b2:01:75:f3:0f:fb:f7:28:a7:f1:96:45:f1:
f0:bb:f9:99:7a:47:1e:5b:3b:70:9d:8e:1b:86:b6:
ea:da:f7:5b:18:f2:c0:9d:3c:39:22:c1:30:99:1b:
c1:cc:48:0a:08:1a:a3:f6:6c:ab:0e:d0:df:ee:e8:
08:e1:e4:2b:71:65:08:65:86:14:74:7b:42:9d:71:
12:ea:1b:d1:4c:8b:d2:f1:62:15:d5:3b:f1:4b:46:
bc:24:97:c2:b7:5c:63:80:7c:1b:47:d6:9c:f0:f8:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:F5:85:7A:1F:23:36:8C:0B:C1:29:34:54:96:3E:36:68:80:99
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uyn1hXofIzaMC8EpNFSWPjZogJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4f:51:e6:22:21:f3:34:b9:35:59:8c:fd:e8:70:3b:1b:58:
76:a4:e3:ca:00:a6:d8:67:91:61:53:9d:a2:1a:d5:3d:6e:70:
ca:d6:55:46:60:e5:53:00:a0:3c:b1:0b:48:0e:d4:a4:55:b2:
c4:a8:04:66:ba:bb:7f:fd:eb:d2:58:bc:96:55:ab:c0:cb:39:
37:41:cd:53:2b:9e:29:4f:4e:7f:0e:ab:f8:66:4d:e7:0b:e1:
96:e2:8e:74:d4:2a:ab:71:28:6f:f7:d3:a6:26:9b:0a:c3:46:
cf:03:ed:a3:3a:14:29:48:fb:47:fb:a7:2d:58:e7:44:dd:5c:
01:bd:cd:72:a3:0b:37:df:a3:ae:e1:17:04:0d:9f:33:aa:35:
6d:c1:5c:1f:0d:17:bf:25:fa:43:8c:83:7c:3a:7f:5e:47:1d:
bb:1b:47:25:97:6a:fb:00:fa:a7:02:d9:c1:4f:91:ff:d2:ef:
df:d2:36:55:e5:a2:03:68:fb:f6:0c:57:9b:aa:ec:33:a2:92:
3d:1b:ba:d5:b1:b2:fd:f6:9d:e4:8a:86:36:21:dd:17:c6:d8:
cf:0c:3a:22:83:b2:ff:99:fe:9e:0c:ed:47:d8:d6:44:d3:0d:
62:a2:6d:fe:43:52:27:2e:d9:20:83:17:b3:93:09:9f:3f:b2:
68:52:ea:41
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMDA5Mjkx
MDA2MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJCMjlGNTg1N0ExRjIz
MzY4QzBCQzEyOTM0NTQ5NjNFMzY2ODgwOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCB3MANet4fDj1l73H3e1eNPkovd3RmCl3RnwbKNfyhARLb3O9
1cqfqiN/Q2AmeAHd61u2/vv5QQErSO0yPhiZyu8cDAJzEbCxcZ7nDIj8pFi9AP+Z
DJtGkXb9o56qlrie4dh5SHzDYjdQ2O/VJEeAOOGLYBPPh2gm0Dd+hv7qHL3Wi802
PfSfRtTvEXZSGb38kmTMu4j9sgF18w/79yin8ZZF8fC7+Zl6Rx5bO3CdjhuGtura
91sY8sCdPDkiwTCZG8HMSAoIGqP2bKsO0N/u6Ajh5CtxZQhlhhR0e0KdcRLqG9FM
i9LxYhXVO/FLRrwkl8K3XGOAfBtH1pzw+OuhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUuyn1hXofIzaMC8EpNFSWPjZogJkwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC91eW4xaFhvZkl6YU1DOEVwTkZT
V1BqWm9nSmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0jyV
MA0GCSqGSIb3DQEBCwUAA4IBAQBeT1HmIiHzNLk1WYz96HA7G1h2pOPKAKbYZ5Fh
U52iGtU9bnDK1lVGYOVTAKA8sQtIDtSkVbLEqARmurt//evSWLyWVavAyzk3Qc1T
K54pT05/Dqv4Zk3nC+GW4o501CqrcShv99OmJpsKw0bPA+2jOhQpSPtH+6ctWOdE
3VwBvc1yows336Ou4RcEDZ8zqjVtwVwfDRe/JfpDjIN8On9eRx27G0cll2r7APqn
AtnBT5H/0u/f0jZV5aIDaPv2DFebquwzopI9G7rVsbL99p3kioY2Id0XxtjPDDoi
g7L/mf6eDO1H2NZE0w1iom3+Q1InLtkggxezkwmfP7JoUupB
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org