Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/T-J0y6EnI1uyvPonLLaKNNNxI1g.roa
File: T-J0y6EnI1uyvPonLLaKNNNxI1g.roa (raw, json)
Hash identifier: dargDDvM0N3ygx13ptS9ruqASETc8J6DoDBVqUlrlYk=
Subject key identifier: 4F:E2:74:CB:A1:27:23:5B:B2:BC:FA:27:2C:B6:8A:34:D3:71:23:58
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/T-J0y6EnI1uyvPonLLaKNNNxI1g.roa
Signing time: Thu 15 Sep 2022 02:51:02 +0000
ROA not before: Thu 15 Sep 2022 02:51:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.58.157.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 15 02:51:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4FE274CBA127235BB2BCFA272CB68A34D3712358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:6d:90:c7:23:c5:fc:ea:c4:2a:a6:cf:0f:
43:c9:67:cf:84:68:ce:0a:db:f1:a5:41:00:7c:17:
71:24:70:d1:0c:02:51:d3:ff:77:d6:51:46:20:fc:
d2:ad:5e:97:6b:97:24:1d:e0:f6:b9:66:75:94:9f:
4b:55:0a:c6:6d:0b:ae:ca:7f:76:fe:61:e6:aa:50:
1b:35:33:ae:16:dc:07:db:bc:b9:b7:18:1b:43:fe:
6f:86:98:99:38:60:63:aa:0c:a9:5f:df:29:c6:9f:
1c:27:0e:70:a0:c6:3d:cc:5f:12:5d:25:b3:40:f1:
87:e9:49:87:3c:16:f6:00:b2:2b:3f:b8:46:42:22:
15:bb:53:2d:75:2d:52:53:76:96:d0:4b:e3:53:34:
a3:01:4f:c6:45:17:15:b6:7f:1b:9b:5c:69:d2:36:
cc:cd:32:fd:10:fa:0d:46:db:5a:7e:d6:bf:6c:69:
f6:5d:6b:90:2a:87:1b:21:44:f6:6e:69:0d:27:b3:
c8:a9:c4:bd:2f:ff:a2:a4:71:b4:c9:40:2c:f5:25:
8e:ae:e7:2b:9a:77:68:6c:11:7a:fd:eb:f0:de:c4:
4e:b7:ff:d7:bb:42:e4:04:12:af:57:7b:47:7d:8e:
00:c9:ce:38:03:f8:a7:c2:99:6b:47:9d:f7:d4:4d:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:74:CB:A1:27:23:5B:B2:BC:FA:27:2C:B6:8A:34:D3:71:23:58
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/T-J0y6EnI1uyvPonLLaKNNNxI1g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
75:02:12:c6:9f:5f:05:a7:c3:7c:dd:a1:bb:d6:af:aa:83:17:
af:e1:f0:d1:cc:cc:f0:ca:a0:c3:9f:d0:f4:4a:37:41:b5:74:
c4:f7:e7:9b:ea:e0:cd:7d:25:8f:f7:8f:4a:21:61:c8:c0:d9:
62:66:60:29:ce:19:dc:31:a6:31:ed:87:dc:15:f9:96:0e:b5:
23:68:b0:58:52:d3:49:c8:3c:13:ae:19:e7:be:9c:b0:b2:c4:
5b:3c:04:da:ad:5a:a5:f2:1e:e6:cc:47:ed:7f:2b:bd:dc:71:
41:f7:eb:fb:c2:4b:30:48:2d:c5:25:3e:a9:dc:fc:08:d3:e1:
42:b4:b1:2e:c9:1f:e7:a3:99:b6:af:c3:37:9a:58:da:f2:9f:
e1:a3:4c:eb:78:2f:71:72:65:c4:2b:9c:f1:7a:bb:e9:54:8a:
1e:7e:5d:9a:78:82:7a:cb:50:7a:0d:3f:f1:ab:a0:a0:25:03:
bf:68:93:9a:20:54:86:23:6c:5b:ef:80:fb:9d:75:2a:4b:67:
be:2d:79:d8:28:c4:2b:81:20:60:cf:60:0d:09:cd:d7:8b:aa:
73:a8:b8:69:8a:6f:29:c8:3c:d7:d8:d5:c3:7e:a6:73:e8:fd:
92:65:75:ac:91:da:4d:cc:65:45:05:0d:e4:a5:ba:dd:9b:1c:
dc:c2:57:6e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMjA5MTUw
MjUxMDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRGRTI3NENCQTEyNzIz
NUJCMkJDRkEyNzJDQjY4QTM0RDM3MTIzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1r22QxyPF/OrEKqbPD0PJZ8+EaM4K2/GlQQB8F3EkcNEMAlHT
/3fWUUYg/NKtXpdrlyQd4Pa5ZnWUn0tVCsZtC67Kf3b+YeaqUBs1M64W3AfbvLm3
GBtD/m+GmJk4YGOqDKlf3ynGnxwnDnCgxj3MXxJdJbNA8YfpSYc8FvYAsis/uEZC
IhW7Uy11LVJTdpbQS+NTNKMBT8ZFFxW2fxubXGnSNszNMv0Q+g1G21p+1r9safZd
a5AqhxshRPZuaQ0ns8ipxL0v/6KkcbTJQCz1JY6u5yuad2hsEXr96/DexE63/9e7
QuQEEq9Xe0d9jgDJzjgD+KfCmWtHnffUTbnLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUT+J0y6EnI1uyvPonLLaKNNNxI1gwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvVC1KMHk2RW5JMXV5dlBvbkxMYUtO
Tk54STFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD06nTAN
BgkqhkiG9w0BAQsFAAOCAQEAdQISxp9fBafDfN2hu9avqoMXr+Hw0czM8Mqgw5/Q
9Eo3QbV0xPfnm+rgzX0lj/ePSiFhyMDZYmZgKc4Z3DGmMe2H3BX5lg61I2iwWFLT
Scg8E64Z576csLLEWzwE2q1apfIe5sxH7X8rvdxxQffr+8JLMEgtxSU+qdz8CNPh
QrSxLskf56OZtq/DN5pY2vKf4aNM63gvcXJlxCuc8Xq76VSKHn5dmniCestQeg0/
8augoCUDv2iTmiBUhiNsW++A+511Kktnvi152CjEK4EgYM9gDQnN14uqc6i4aYpv
Kcg819jVw36mc+j9kmV1rJHaTcxlRQUN5KW63Zsc3MJXbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org