Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/tkwokXBe6aPNtvcVWwvey71lyoo.roa
File: tkwokXBe6aPNtvcVWwvey71lyoo.roa (raw, json)
Hash identifier: X1BGGfzeXQekc9wue0Uw85NgOC2f1Fi0PNHGpZ6RfoE=
Subject key identifier: B6:4C:28:91:70:5E:E9:A3:CD:B6:F7:15:5B:0B:DE:CB:BD:65:CA:8A
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 08DF
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/tkwokXBe6aPNtvcVWwvey71lyoo.roa
Signing time: Sun 07 Feb 2021 11:53:57 +0000
ROA not before: Sun 07 Feb 2021 11:53:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131596
IP address blocks: 210.202.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 7 11:53:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B64C2891705EE9A3CDB6F7155B0BDECBBD65CA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:95:9b:12:80:bc:92:19:25:42:83:56:77:
c6:2f:5f:f4:af:29:3c:03:d9:5a:6b:cf:ce:11:68:
b8:ec:e6:79:5c:58:e6:c3:82:3d:d0:a7:78:21:94:
94:02:fd:8f:f7:8a:95:d8:2d:3f:51:2e:82:51:67:
06:ab:7f:d0:e0:38:1d:d5:de:e4:dc:86:62:32:df:
0f:ed:f5:f8:3d:ee:48:15:d8:08:da:a9:24:79:ee:
8c:2f:99:6e:4e:e3:c4:9e:9c:95:2b:23:f4:fb:92:
af:30:47:a9:1b:f5:2e:0e:4d:af:97:fe:48:36:3e:
6e:10:3c:22:a5:48:96:90:d3:dd:80:c5:c9:99:9e:
04:5e:8d:33:92:ee:bb:0e:5b:b1:94:d5:f7:46:3c:
2a:93:12:80:0d:4f:65:87:0c:2f:7b:5b:70:90:88:
e9:04:80:9c:be:06:10:fd:2d:e5:13:e2:4f:47:7c:
5b:0c:12:9b:3c:d5:76:60:9e:9c:27:29:23:6e:00:
08:e2:7d:bd:fb:30:c8:71:85:91:38:f8:9c:eb:90:
6d:27:89:9b:9e:8b:17:e6:3d:82:24:a7:11:16:b0:
2c:94:9c:32:ed:cb:d0:23:2e:b1:f4:b6:c3:37:db:
96:d5:c2:27:3e:9f:ca:52:80:83:a3:ef:d2:2f:e5:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:28:91:70:5E:E9:A3:CD:B6:F7:15:5B:0B:DE:CB:BD:65:CA:8A
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/tkwokXBe6aPNtvcVWwvey71lyoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.56.0/21
Signature Algorithm: sha256WithRSAEncryption
90:38:00:ab:2f:ae:0b:e8:48:9b:29:7c:af:58:a1:4e:84:73:
51:5d:a9:00:0b:65:ce:bc:f9:42:d1:e2:cb:7a:2c:e0:a1:74:
cd:f6:bb:29:ce:aa:f4:64:9d:65:c5:51:19:50:64:54:47:34:
06:2d:c6:e7:79:c0:67:d6:e3:06:61:0e:7a:01:8d:a3:b5:06:
fc:83:ab:81:db:e0:3b:60:6a:bd:d4:f8:ad:07:5f:e8:22:04:
af:74:1e:27:8b:21:b9:20:84:71:55:33:86:dc:ea:3a:e9:cf:
0b:e0:ce:bb:59:e5:df:7b:00:0f:f0:a1:30:51:cd:00:47:4f:
75:9e:f6:39:57:85:c2:c1:b5:ef:be:37:5d:68:41:5b:fe:65:
c3:4f:cf:fb:94:25:30:90:90:08:22:25:c7:96:a1:51:07:71:
76:49:be:31:b3:69:40:32:a9:a6:2f:cf:ee:57:44:1a:6b:64:
a7:00:ab:f1:d8:65:bb:97:2e:9c:63:a3:76:91:76:9b:d3:8e:
52:b3:63:f9:e3:79:c4:37:3a:8d:af:82:f6:07:b8:1c:98:d9:
1d:cc:59:67:4c:c6:e7:ac:b5:fa:3e:ab:9c:77:c9:31:b2:2e:
13:d4:56:6b:8a:88:03:62:46:0d:25:0f:a8:d3:6a:36:d1:2b:
08:c3:ae:64
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMTAyMDcx
MTUzNTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI2NEMyODkxNzA1RUU5
QTNDREI2RjcxNTVCMEJERUNCQkQ2NUNBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCc5ZWbEoC8khklQoNWd8YvX/SvKTwD2Vprz84RaLjs5nlcWObD
gj3Qp3ghlJQC/Y/3ipXYLT9RLoJRZwarf9DgOB3V3uTchmIy3w/t9fg97kgV2Aja
qSR57owvmW5O48SenJUrI/T7kq8wR6kb9S4OTa+X/kg2Pm4QPCKlSJaQ092AxcmZ
ngRejTOS7rsOW7GU1fdGPCqTEoANT2WHDC97W3CQiOkEgJy+BhD9LeUT4k9HfFsM
Eps81XZgnpwnKSNuAAjifb37MMhxhZE4+JzrkG0niZueixfmPYIkpxEWsCyUnDLt
y9AjLrH0tsM325bVwic+n8pSgIOj79Iv5YGxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUtkwokXBe6aPNtvcVWwvey71lyoowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS90a3dva1hCZTZhUE50dmNWV3d2
ZXk3MWx5b28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0so4
MA0GCSqGSIb3DQEBCwUAA4IBAQCQOACrL64L6EibKXyvWKFOhHNRXakAC2XOvPlC
0eLLeizgoXTN9rspzqr0ZJ1lxVEZUGRURzQGLcbnecBn1uMGYQ56AY2jtQb8g6uB
2+A7YGq91PitB1/oIgSvdB4niyG5IIRxVTOG3Oo66c8L4M67WeXfewAP8KEwUc0A
R091nvY5V4XCwbXvvjddaEFb/mXDT8/7lCUwkJAIIiXHlqFRB3F2Sb4xs2lAMqmm
L8/uV0Qaa2SnAKvx2GW7ly6cY6N2kXab045Ss2P543nENzqNr4L2B7gcmNkdzFln
TMbnrLX6Pqucd8kxsi4T1FZriogDYkYNJQ+o02o20SsIw65k
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org