Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/f36UYtIRpWaq-V608AidfiaivQE.roa
File: f36UYtIRpWaq-V608AidfiaivQE.roa (raw, json)
Hash identifier: ooWYb5kqtXi/0/7YeH6vXVndZ+VsFKhQNmBDQZBcvYY=
Subject key identifier: 7F:7E:94:62:D2:11:A5:66:AA:F9:5E:B4:F0:08:9D:7E:26:A2:BD:01
Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Certificate serial: 03
Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/f36UYtIRpWaq-V608AidfiaivQE.roa
Signing time: Fri 09 Dec 2022 02:34:48 +0000
ROA not before: Fri 09 Dec 2022 02:34:48 +0000
ROA not after: Tue 05 Dec 2023 15:30:19 +0000
asID: 131657
IP address blocks: 103.51.88.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Validity
Not Before: Dec 9 02:34:48 2022 GMT
Not After : Dec 5 15:30:19 2023 GMT
Subject: CN=7F7E9462D211A566AAF95EB4F0089D7E26A2BD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:60:14:d1:76:29:7b:bb:be:9d:2d:8d:b5:
84:67:34:8f:b4:61:ec:73:f9:11:12:ee:e5:85:f8:
4f:46:fb:df:c0:c3:9a:5d:4a:3c:e0:c3:2c:15:3c:
55:e1:7e:30:ed:27:f1:56:73:c3:02:15:8a:f6:3f:
b8:c8:de:61:b8:be:49:ff:68:3e:f2:88:94:6a:c3:
a8:fc:82:06:ea:2f:ac:06:44:1b:49:08:94:f4:fe:
74:44:6c:72:42:57:c9:b8:5d:0f:97:73:c0:14:24:
02:3e:82:83:85:c7:97:94:85:32:03:b1:4e:ce:81:
a4:bc:84:6c:d1:b7:f9:55:37:3e:25:68:10:6c:9a:
f9:96:b6:fb:b6:ec:fc:5e:ab:9e:95:69:0d:d9:21:
07:c4:47:25:33:d9:1a:bd:2d:0e:2c:e8:1d:0f:be:
03:c3:32:9b:17:fd:32:47:ac:7c:4d:4c:14:22:4e:
3a:4e:0e:e3:de:4f:15:87:b8:92:f0:bf:cf:af:f4:
43:54:9f:2d:dd:d6:0d:20:d0:0b:0e:96:9f:08:6e:
20:32:e1:d6:ca:79:38:fb:7a:92:04:c5:a4:a7:4a:
ad:95:ac:fc:ef:6e:5c:a4:61:c8:65:5a:e9:02:aa:
06:8d:33:8c:34:1a:99:42:76:86:d4:3f:d9:3a:bf:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:94:62:D2:11:A5:66:AA:F9:5E:B4:F0:08:9D:7E:26:A2:BD:01
X509v3 Authority Key Identifier:
keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/f36UYtIRpWaq-V608AidfiaivQE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.88.0/23
Signature Algorithm: sha256WithRSAEncryption
20:4f:c5:ee:c3:fa:39:25:b7:c1:7d:c6:f4:c4:4e:d3:31:f3:
15:36:0d:f4:91:df:a4:18:21:2c:50:0e:0d:cb:eb:38:26:f8:
24:42:5f:0c:e3:51:4a:1b:af:35:03:17:e0:6e:97:f7:64:1b:
b8:b7:57:ee:a8:70:86:f0:35:a6:f2:2e:13:9d:01:cb:14:d1:
f2:1a:0e:f6:cd:b2:99:32:1a:6e:bb:be:e9:b8:2e:55:8e:02:
96:25:3c:12:9a:fd:73:3e:46:6d:55:09:33:e8:96:01:77:68:
7e:a0:b3:3d:08:d5:0a:e3:b2:cc:37:4c:6c:3e:5a:c6:93:7e:
40:d8:96:3e:93:49:12:d2:74:07:14:2f:27:8d:b3:ec:a3:9f:
62:8f:06:90:19:a8:24:cd:d5:a2:21:f7:ee:9d:32:b0:dd:d0:
3a:af:ca:50:69:be:68:b9:89:aa:11:b0:a2:6c:4c:35:a7:ba:
a1:08:a3:51:3e:50:46:14:08:3b:44:b8:32:fe:ee:2f:d1:d3:
f0:13:a7:23:23:6e:42:3c:f0:b6:e9:4e:9d:07:b3:19:b7:8b:
80:97:ae:cb:05:c7:51:cd:98:f1:87:16:6c:41:b2:f8:c2:72:
f7:c3:31:33:3c:04:22:f5:5e:c0:1c:41:6b:b7:d3:83:30:b9:
c2:7e:8f:37
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QkZD
RkFBMjEwNjc0MkIyQzA5OUUzRjRDMkE1MDQyOEU1Q0Q2MkQzMB4XDTIyMTIwOTAy
MzQ0OFoXDTIzMTIwNTE1MzAxOVowMzExMC8GA1UEAxMoN0Y3RTk0NjJEMjExQTU2
NkFBRjk1RUI0RjAwODlEN0UyNkEyQkQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsPYBTRdil7u76dLY21hGc0j7Rh7HP5ERLu5YX4T0b738DDml1K
PODDLBU8VeF+MO0n8VZzwwIVivY/uMjeYbi+Sf9oPvKIlGrDqPyCBuovrAZEG0kI
lPT+dERsckJXybhdD5dzwBQkAj6Cg4XHl5SFMgOxTs6BpLyEbNG3+VU3PiVoEGya
+Za2+7bs/F6rnpVpDdkhB8RHJTPZGr0tDizoHQ++A8Mymxf9MkesfE1MFCJOOk4O
495PFYe4kvC/z6/0Q1SfLd3WDSDQCw6WnwhuIDLh1sp5OPt6kgTFpKdKrZWs/O9u
XKRhyGVa6QKqBo0zjDQamUJ2htQ/2Tq/kjMCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBR/fpRi0hGlZqr5XrTwCJ1+JqK9ATAfBgNVHSMEGDAWgBSb/PqiEGdCssCZ4/TC
pQQo5c1i0zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9URUNIRFJJ
VkVOL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvbV96Nm9oQm5RckxBbWVQMHdxVUVLT1hOWXRNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERSSVZFTi9mMzZVWXRJUnBX
YXEtVjYwOEFpZGZpYWl2UUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBZzNYMA0GCSqGSIb3DQEBCwUAA4IBAQAgT8Xuw/o5JbfBfcb0xE7TMfMV
Ng30kd+kGCEsUA4Ny+s4JvgkQl8M41FKG681Axfgbpf3ZBu4t1fuqHCG8DWm8i4T
nQHLFNHyGg72zbKZMhpuu77puC5VjgKWJTwSmv1zPkZtVQkz6JYBd2h+oLM9CNUK
47LMN0xsPlrGk35A2JY+k0kS0nQHFC8njbPso59ijwaQGagkzdWiIffunTKw3dA6
r8pQab5ouYmqEbCibEw1p7qhCKNRPlBGFAg7RLgy/u4v0dPwE6cjI25CPPC26U6d
B7MZt4uAl67LBcdRzZjxhxZsQbL4wnL3wzEzPAQi9V7AHEFrt9ODMLnCfo83
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org