Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/XxkinA05i8SJwlgXMoJWRXFEkCE.roa
File: XxkinA05i8SJwlgXMoJWRXFEkCE.roa (raw, json)
Hash identifier: wdbGkAecTUJBSBCqe0IRlzFUO53QJYzjcPLKKPhImq8=
Subject key identifier: 5F:19:22:9C:0D:39:8B:C4:89:C2:58:17:32:82:56:45:71:44:90:21
Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Certificate serial: F5
Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/XxkinA05i8SJwlgXMoJWRXFEkCE.roa
Signing time: Sat 14 Jan 2023 03:39:22 +0000
ROA not before: Sat 14 Jan 2023 03:39:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131642
IP address blocks: 103.180.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Validity
Not Before: Jan 14 03:39:22 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F19229C0D398BC489C258173282564571449021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:57:c5:73:e7:c6:d1:f2:6d:c4:49:f0:a2:
61:ff:39:4a:27:25:87:4a:f8:76:90:a2:81:00:98:
d5:ff:5c:10:04:1f:d1:2a:44:e9:3f:cf:5b:15:8e:
99:5a:b3:1a:d1:47:1c:79:11:41:ae:7f:09:73:3e:
19:19:45:53:45:53:22:93:65:ec:e5:fb:3b:26:92:
51:de:b6:2a:c3:f0:30:51:61:b1:47:ce:74:4d:b9:
28:60:c7:e7:ae:0a:f1:15:57:72:e4:cd:1d:84:61:
c8:04:15:54:69:95:af:d2:87:3f:ec:1f:96:0f:f8:
3c:bf:60:c2:42:ad:9e:a5:57:d1:e6:5d:fb:cb:89:
c5:a4:06:0e:79:30:20:ea:07:8a:73:90:a3:bf:64:
6c:ed:56:4c:ac:f3:fd:5c:20:37:ee:1b:d1:45:42:
6e:e9:ec:cf:23:9f:94:f8:40:8b:98:c3:b5:42:f4:
0f:67:f5:39:7c:79:43:99:b8:a1:4b:c2:49:fa:c8:
f5:74:80:d7:d1:85:7c:8a:d4:95:89:1e:00:50:f3:
91:ae:a7:33:60:27:90:1d:80:6c:ed:f9:ea:d7:f5:
4c:59:15:2f:5b:97:dd:f8:c9:d6:31:99:93:70:76:
e9:95:34:ec:ab:33:f8:53:30:36:45:e8:f7:c3:0d:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:22:9C:0D:39:8B:C4:89:C2:58:17:32:82:56:45:71:44:90:21
X509v3 Authority Key Identifier:
keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/XxkinA05i8SJwlgXMoJWRXFEkCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.20.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:16:fd:5d:6a:c8:b9:d3:53:14:f4:8c:57:f0:34:f2:06:b3:
75:91:72:03:97:dd:cf:cd:bb:ac:cb:ec:4d:76:10:14:35:63:
62:b9:ab:db:85:59:5d:d9:5b:d5:a7:fa:ce:b0:9b:f6:29:31:
5d:3a:3b:35:a5:c6:23:6e:47:44:b4:c4:b3:33:23:13:db:56:
76:f7:53:04:b0:11:47:23:44:b1:08:02:20:2b:83:dc:17:3d:
95:35:0f:87:6d:c5:64:54:16:e7:ec:4a:4c:e0:ef:fb:61:36:
89:73:cf:ca:04:f8:62:6e:1c:c2:c3:16:fd:40:d0:9e:03:bd:
bf:16:26:00:d3:c8:0a:6d:ac:2c:e9:3f:0d:31:28:7e:ce:f2:
c7:62:01:aa:5f:cb:54:a6:40:03:be:bb:b7:2e:3b:b7:0f:6e:
32:40:dc:03:36:ad:7f:ec:28:3b:b6:79:73:f1:80:f9:d9:e4:
9f:d4:2c:37:68:c5:a3:72:97:6e:92:81:a6:0f:11:55:4f:63:
e3:e4:d3:03:07:e8:8e:b7:25:a6:4f:39:69:fa:6a:d8:02:00:
d2:76:7f:02:97:93:29:ed:cd:58:a8:f4:b9:75:b3:92:76:6e:
09:fe:9a:17:87:9b:59:f0:3d:2b:30:0c:81:a9:b0:5b:79:ee:
01:95:ee:53
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI2
MDY5NkQ2ODc3M0FFMkU1MzJGMENENUQxMEZEQzBDODI3M0VBNTAeFw0yMzAxMTQw
MzM5MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVGMTkyMjlDMEQzOThC
QzQ4OUMyNTgxNzMyODI1NjQ1NzE0NDkwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqb1fFc+fG0fJtxEnwomH/OUonJYdK+HaQooEAmNX/XBAEH9Eq
ROk/z1sVjplasxrRRxx5EUGufwlzPhkZRVNFUyKTZezl+zsmklHetirD8DBRYbFH
znRNuShgx+euCvEVV3LkzR2EYcgEFVRpla/Shz/sH5YP+Dy/YMJCrZ6lV9HmXfvL
icWkBg55MCDqB4pzkKO/ZGztVkys8/1cIDfuG9FFQm7p7M8jn5T4QIuYw7VC9A9n
9Tl8eUOZuKFLwkn6yPV0gNfRhXyK1JWJHgBQ85GupzNgJ5AdgGzt+erX9UxZFS9b
l934ydYxmZNwdumVNOyrM/hTMDZF6PfDDQiXAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUXxkinA05i8SJwlgXMoJWRXFEkCEwHwYDVR0jBBgwFoAUm2BpbWh3OuLlMvDN
XRD9wMgnPqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL20y
QnBiV2gzT3VMbE12RE5YUkQ5d01nblBxVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
bTJCcGJXaDNPdUxsTXZETlhSRDl3TWduUHFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL1h4a2luQTA1aThTSndsZ1hNb0pXUlhG
RWtDRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntBQwDQYJ
KoZIhvcNAQELBQADggEBADwW/V1qyLnTUxT0jFfwNPIGs3WRcgOX3c/Nu6zL7E12
EBQ1Y2K5q9uFWV3ZW9Wn+s6wm/YpMV06OzWlxiNuR0S0xLMzIxPbVnb3UwSwEUcj
RLEIAiArg9wXPZU1D4dtxWRUFufsSkzg7/thNolzz8oE+GJuHMLDFv1A0J4Dvb8W
JgDTyAptrCzpPw0xKH7O8sdiAapfy1SmQAO+u7cuO7cPbjJA3AM2rX/sKDu2eXPx
gPnZ5J/ULDdoxaNyl26SgaYPEVVPY+Pk0wMH6I63JaZPOWn6atgCANJ2fwKXkynt
zVio9Ll1s5J2bgn+mheHm1nwPSswDIGpsFt57gGV7lM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org