Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/2segfbJs05mEd3Jj5cWKNjacHMo.roa
File: 2segfbJs05mEd3Jj5cWKNjacHMo.roa (raw, json)
Hash identifier: n4zUMDN48zLaEsAmO+e6dM0E3Kc934cT7rX9PAmKEUE=
Subject key identifier: DA:C7:A0:7D:B2:6C:D3:99:84:77:72:63:E5:C5:8A:36:36:9C:1C:CA
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0780
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/2segfbJs05mEd3Jj5cWKNjacHMo.roa
Signing time: Tue 29 Sep 2020 09:59:57 +0000
ROA not before: Tue 29 Sep 2020 09:59:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131596
IP address blocks: 61.58.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 29 09:59:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DAC7A07DB26CD39984777263E5C58A36369C1CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:8b:22:ac:1c:d6:69:44:17:a8:3d:6a:9b:
e6:c5:dd:16:09:d4:33:53:eb:a9:10:5d:97:ee:d8:
2c:4a:96:92:03:4a:b1:19:4c:1a:ef:6f:5e:fc:03:
c7:64:74:3b:3e:7a:12:35:57:87:f6:cc:be:a7:6f:
20:ee:12:38:da:ac:8d:72:15:c8:8b:68:37:13:6f:
a2:4e:a5:a1:fd:91:74:16:57:9b:1f:37:d3:9f:10:
91:03:52:a5:1f:f1:8d:10:7b:39:09:8c:d5:a3:12:
8b:92:fa:0b:3c:6a:d9:48:8e:33:f7:ed:f1:53:41:
fc:b5:af:59:5c:d3:76:e3:f2:00:b4:15:fa:77:8d:
44:91:1b:24:5f:1f:aa:2c:43:24:c4:76:d1:73:b6:
46:f8:37:77:87:13:b6:64:7f:19:fa:23:b1:45:46:
d6:45:ed:bc:0e:1b:f0:4e:9e:87:18:85:d5:27:b8:
be:83:18:c9:96:fc:fa:23:2b:ed:dd:ad:42:c5:6c:
a5:02:54:8d:53:29:b9:50:c4:a7:c7:51:ec:8e:07:
74:0d:21:33:dd:8d:73:d2:5a:99:d7:2a:e5:a3:88:
4e:de:10:ab:4b:e4:b5:26:26:b0:e2:44:be:8b:61:
04:6b:26:85:55:d3:28:07:9c:12:11:cb:fa:2b:58:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:A0:7D:B2:6C:D3:99:84:77:72:63:E5:C5:8A:36:36:9C:1C:CA
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/2segfbJs05mEd3Jj5cWKNjacHMo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.72.0/21
Signature Algorithm: sha256WithRSAEncryption
43:41:c5:83:e0:6f:f8:6f:7d:d4:02:1e:42:f6:03:6f:ff:ed:
32:b4:f5:0d:37:10:d9:ec:3d:d4:83:c3:81:2e:25:5f:05:01:
3a:cc:84:78:23:71:52:dd:ff:98:eb:fa:68:34:30:b7:8c:4e:
9d:6e:b9:6e:d0:f0:32:ab:df:df:93:04:88:5f:78:f4:86:d9:
31:c7:10:a8:5d:0c:9f:ec:20:7c:40:cd:c4:a5:4e:e2:f0:45:
d3:d8:29:b7:54:ef:83:3e:7c:8a:a7:2e:56:48:9b:c9:63:d0:
53:cd:a4:04:e8:18:e8:e4:05:f4:cf:9a:d0:a3:48:e0:44:07:
8e:03:76:1c:c4:d8:d7:54:77:dd:0e:d9:d9:c6:91:73:79:7a:
b6:81:e7:92:af:e7:0f:65:a4:f7:f2:bc:3d:43:87:2c:cd:ef:
a8:bd:50:96:d7:5a:29:62:e0:9a:65:33:b3:5b:f9:0d:54:9f:
61:d2:7f:81:78:f6:6f:69:ba:d8:5f:8e:e3:8a:cb:aa:64:f2:
98:0e:62:7f:fe:b0:6a:1b:ec:a1:e7:c8:cd:e7:98:8b:7f:82:
f2:4a:22:c3:89:75:b8:84:23:0a:89:08:d6:cd:1a:db:b2:35:
fd:d8:77:00:6f:52:02:99:7b:8b:6e:6a:27:23:75:4f:1c:2e:
ce:3e:10:3a
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMDA5Mjkw
OTU5NTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERBQzdBMDdEQjI2Q0Qz
OTk4NDc3NzI2M0U1QzU4QTM2MzY5QzFDQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCldosirBzWaUQXqD1qm+bF3RYJ1DNT66kQXZfu2CxKlpIDSrEZ
TBrvb178A8dkdDs+ehI1V4f2zL6nbyDuEjjarI1yFciLaDcTb6JOpaH9kXQWV5sf
N9OfEJEDUqUf8Y0QezkJjNWjEouS+gs8atlIjjP37fFTQfy1r1lc03bj8gC0Ffp3
jUSRGyRfH6osQyTEdtFztkb4N3eHE7Zkfxn6I7FFRtZF7bwOG/BOnocYhdUnuL6D
GMmW/PojK+3drULFbKUCVI1TKblQxKfHUeyOB3QNITPdjXPSWpnXKuWjiE7eEKtL
5LUmJrDiRL6LYQRrJoVV0ygHnBIRy/orWKhlAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU2segfbJs05mEd3Jj5cWKNjacHMowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS8yc2VnZmJKczA1bUVkM0pqNWNX
S05qYWNITW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPTpI
MA0GCSqGSIb3DQEBCwUAA4IBAQBDQcWD4G/4b33UAh5C9gNv/+0ytPUNNxDZ7D3U
g8OBLiVfBQE6zIR4I3FS3f+Y6/poNDC3jE6dbrlu0PAyq9/fkwSIX3j0htkxxxCo
XQyf7CB8QM3EpU7i8EXT2Cm3VO+DPnyKpy5WSJvJY9BTzaQE6Bjo5AX0z5rQo0jg
RAeOA3YcxNjXVHfdDtnZxpFzeXq2geeSr+cPZaT38rw9Q4csze+ovVCW11opYuCa
ZTOzW/kNVJ9h0n+BePZvabrYX47jisuqZPKYDmJ//rBqG+yh58jN55iLf4LySiLD
iXW4hCMKiQjWzRrbsjX92HcAb1ICmXuLbmonI3VPHC7OPhA6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org