Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/KqYxD4py7_nh0Dbnup7n79EuFPY.roa
File: KqYxD4py7_nh0Dbnup7n79EuFPY.roa (raw, json)
Hash identifier: zdildVw4kJYkesaMafDyLIsmv3JfwCQ9fICq2lGNLWQ=
Subject key identifier: 2A:A6:31:0F:8A:72:EF:F9:E1:D0:36:E7:BA:9E:E7:EF:D1:2E:14:F6
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0A7E
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/KqYxD4py7_nh0Dbnup7n79EuFPY.roa
Signing time: Thu 15 Sep 2022 02:50:03 +0000
ROA not before: Thu 15 Sep 2022 02:50:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131596
IP address blocks: 210.202.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686 (0xa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 15 02:50:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AA6310F8A72EFF9E1D036E7BA9EE7EFD12E14F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:6c:5d:00:eb:be:7e:cd:ea:e0:33:fe:f1:
2d:13:d9:98:2c:3a:a8:60:3f:10:a0:04:04:28:84:
a6:fe:3f:64:0f:05:b4:9c:b3:ae:94:26:b1:00:fa:
3b:a4:9f:72:ce:83:8a:a1:cd:9e:37:6e:5c:9d:3b:
2d:48:5c:ce:b8:df:90:a7:d2:9c:9c:8d:23:8e:12:
76:b1:a0:9b:7d:d2:ea:9f:9d:27:57:6a:78:fa:3f:
73:ce:f2:94:7f:b7:d6:e4:34:00:31:1f:e9:3d:cf:
72:3b:e4:09:b7:a7:3e:e7:2c:39:5a:98:bc:9c:c5:
be:18:91:d9:5c:d6:7e:7e:ba:2c:91:a3:92:80:49:
72:6c:01:8e:3e:42:22:75:a5:0b:85:4e:59:59:4f:
17:dd:d7:fd:29:37:60:a5:b7:8c:d6:20:c5:7d:f3:
3a:89:60:bf:67:84:5a:4f:58:dc:a2:07:57:b3:95:
95:f9:b2:31:f2:fc:c6:3d:46:c8:a7:ce:25:84:35:
5d:64:cc:8b:66:55:34:7d:2f:88:e8:f2:95:19:bc:
21:8c:cc:f7:7a:0b:d7:81:55:9c:14:2b:a3:23:55:
5e:f5:6b:66:d8:33:fc:72:86:07:af:82:6e:5a:78:
69:d0:a1:22:77:a5:d9:d9:f9:bf:09:01:49:29:b4:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:31:0F:8A:72:EF:F9:E1:D0:36:E7:BA:9E:E7:EF:D1:2E:14:F6
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/KqYxD4py7_nh0Dbnup7n79EuFPY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.56.0/21
Signature Algorithm: sha256WithRSAEncryption
31:93:06:42:83:ce:57:34:40:27:b9:7f:cf:53:17:40:8c:71:
72:ff:70:16:c4:6f:f5:56:e3:b9:55:18:d7:21:b3:2a:eb:f8:
79:fe:09:37:63:10:0c:cf:0d:18:43:36:fb:28:b3:ef:c1:c7:
c6:b2:e5:ec:6b:ca:83:30:c8:05:3e:c3:0d:4c:fd:60:9c:ea:
79:78:8e:f3:1e:08:56:79:7d:34:3a:be:09:43:5c:19:0d:3e:
b7:4b:3c:4a:e5:f9:98:6a:1e:1a:a0:36:d7:29:48:85:35:25:
1c:9e:61:39:69:69:73:34:61:eb:71:a2:14:38:92:71:60:3b:
d2:02:3d:17:99:42:e1:6a:2e:37:6b:09:9d:f6:25:17:87:35:
12:e5:8e:ae:90:a5:2d:a1:ce:dc:2c:c6:5f:2e:6b:b9:c8:5a:
d5:3e:41:af:2c:6c:48:6f:79:4f:c0:93:08:bb:8f:80:6d:b7:
91:0e:e7:9a:df:58:28:c4:c9:69:9e:c8:2e:e6:39:3c:a3:e7:
92:41:c6:0a:bc:ff:0f:3b:af:54:ef:0e:73:69:cb:2e:c2:72:
f2:dd:00:9d:32:b0:6a:aa:16:52:95:88:c1:a8:e4:bd:e1:c1:
fc:2d:b3:bd:b5:87:01:ee:6d:5f:99:5c:9b:ae:17:cd:e2:d0:
da:a4:bc:68
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMjA5MTUw
MjUwMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJBQTYzMTBGOEE3MkVG
RjlFMUQwMzZFN0JBOUVFN0VGRDEyRTE0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiC2xdAOu+fs3q4DP+8S0T2ZgsOqhgPxCgBAQohKb+P2QPBbSc
s66UJrEA+jukn3LOg4qhzZ43blydOy1IXM6435Cn0pycjSOOEnaxoJt90uqfnSdX
anj6P3PO8pR/t9bkNAAxH+k9z3I75Am3pz7nLDlamLycxb4Ykdlc1n5+uiyRo5KA
SXJsAY4+QiJ1pQuFTllZTxfd1/0pN2Clt4zWIMV98zqJYL9nhFpPWNyiB1ezlZX5
sjHy/MY9RsinziWENV1kzItmVTR9L4jo8pUZvCGMzPd6C9eBVZwUK6MjVV71a2bY
M/xyhgevgm5aeGnQoSJ3pdnZ+b8JAUkptJdHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUKqYxD4py7/nh0Dbnup7n79EuFPYwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9LcVl4RDRweTdfbmgwRGJudXA3
bjc5RXVGUFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0so4
MA0GCSqGSIb3DQEBCwUAA4IBAQAxkwZCg85XNEAnuX/PUxdAjHFy/3AWxG/1VuO5
VRjXIbMq6/h5/gk3YxAMzw0YQzb7KLPvwcfGsuXsa8qDMMgFPsMNTP1gnOp5eI7z
HghWeX00Or4JQ1wZDT63SzxK5fmYah4aoDbXKUiFNSUcnmE5aWlzNGHrcaIUOJJx
YDvSAj0XmULhai43awmd9iUXhzUS5Y6ukKUtoc7cLMZfLmu5yFrVPkGvLGxIb3lP
wJMIu4+AbbeRDuea31goxMlpnsgu5jk8o+eSQcYKvP8PO69U7w5zacsuwnLy3QCd
MrBqqhZSlYjBqOS94cH8LbO9tYcB7m1fmVybrhfN4tDapLxo
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org