Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/c0cY4W1LQUYIUrP-YSOIqHLFDAY.roa
File: c0cY4W1LQUYIUrP-YSOIqHLFDAY.roa (raw, json)
Hash identifier: gHo6KyFj44GXC5Rd1vQtEfqKjakqQ0klspwW+lPUW4U=
Subject key identifier: 73:47:18:E1:6D:4B:41:46:08:52:B3:FE:61:23:88:A8:72:C5:0C:06
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 099E
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/c0cY4W1LQUYIUrP-YSOIqHLFDAY.roa
Signing time: Wed 29 Sep 2021 02:53:20 +0000
ROA not before: Wed 29 Sep 2021 02:53:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 211.73.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 02:53:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=734718E16D4B41460852B3FE612388A872C50C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:17:d7:33:75:48:7c:13:85:24:ac:71:15:d5:
62:5c:24:65:0b:cb:04:4d:a2:71:4c:6a:ff:be:04:
be:cc:65:6d:ee:95:01:b8:d7:ce:fa:bf:53:1f:ba:
00:21:a8:8a:aa:fc:25:fa:07:f3:a1:dd:af:5d:91:
63:e5:c8:7c:bb:6d:80:1c:a5:6e:34:d2:95:54:1f:
aa:db:58:5d:c6:ff:10:1d:fc:c3:28:36:46:a1:27:
4f:17:eb:79:3e:d9:f7:c5:53:c0:07:83:8b:0e:96:
35:d5:20:d1:3b:d9:f4:89:c0:99:21:6a:8b:04:43:
10:1e:3f:de:b5:96:0d:7c:f6:d7:3c:1d:fb:f7:dc:
a1:0a:3d:4a:28:7b:ca:5e:25:ed:21:60:c1:4c:9b:
a1:0e:37:40:2a:3c:26:10:f8:a8:68:de:bf:01:5e:
2e:d7:e2:47:c5:7c:01:c8:91:d5:f1:25:10:83:d5:
7e:6b:1c:6c:0a:60:32:2d:8b:90:be:af:d5:9d:02:
d3:10:ea:ae:42:6e:a8:ec:de:35:c1:8d:22:04:77:
97:f9:a6:a4:41:d8:2a:c3:b7:4f:a7:40:13:b7:26:
58:2e:e7:ee:ab:c7:28:2d:30:89:80:a7:c9:d7:09:
c5:b6:ab:38:b4:a3:6d:13:47:89:f9:ec:f1:86:fc:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:18:E1:6D:4B:41:46:08:52:B3:FE:61:23:88:A8:72:C5:0C:06
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/c0cY4W1LQUYIUrP-YSOIqHLFDAY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.160.0/19
Signature Algorithm: sha256WithRSAEncryption
93:6d:ae:7d:8d:69:80:e6:84:b3:29:8e:76:ae:8d:ef:e7:b5:
6b:2b:51:0b:17:08:d3:bd:a6:e5:cd:a6:5d:05:32:ad:82:fd:
42:86:1a:2d:06:40:dc:7c:b9:93:c6:48:ed:b7:f6:8d:a2:89:
9f:d4:9b:0f:f5:b9:cb:2a:a6:9d:61:f7:50:d0:4d:39:9c:3d:
d7:fa:03:52:2b:fa:69:03:2a:fe:6d:f8:28:62:d4:5d:4e:c0:
03:ee:70:d4:c5:8b:06:bf:77:ff:a2:8a:5c:aa:77:ac:82:73:
35:fb:10:bf:b4:14:ab:ef:d3:3f:b7:c0:2c:e6:e9:fe:34:c9:
80:92:cb:3a:65:5c:0e:65:95:b7:bb:c9:5a:8c:d3:a5:ee:02:
85:ba:f4:e3:35:82:f3:32:63:ce:01:ce:47:67:c8:e7:be:7e:
67:cf:08:cc:f8:58:14:8d:c9:7d:98:b7:b1:d6:a9:98:da:35:
3d:22:44:62:ac:3e:cd:be:6d:0e:68:75:96:2b:5c:1e:1f:e9:
91:90:0b:8f:80:fb:f4:cf:5c:02:5a:01:27:81:7f:dd:2b:6f:
34:af:05:f8:ef:4f:aa:11:fa:f3:26:22:6b:75:9e:ff:d9:bc:
af:e6:67:d7:14:0d:c2:c5:3d:89:f5:27:9e:07:60:f0:9c:d2:
b9:f1:86:8e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMTA5Mjkw
MjUzMjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDczNDcxOEUxNkQ0QjQx
NDYwODUyQjNGRTYxMjM4OEE4NzJDNTBDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0F9czdUh8E4UkrHEV1WJcJGULywRNonFMav++BL7MZW3ulQG4
1876v1MfugAhqIqq/CX6B/Oh3a9dkWPlyHy7bYAcpW400pVUH6rbWF3G/xAd/MMo
NkahJ08X63k+2ffFU8AHg4sOljXVINE72fSJwJkhaosEQxAeP961lg189tc8Hfv3
3KEKPUooe8peJe0hYMFMm6EON0AqPCYQ+Kho3r8BXi7X4kfFfAHIkdXxJRCD1X5r
HGwKYDIti5C+r9WdAtMQ6q5Cbqjs3jXBjSIEd5f5pqRB2CrDt0+nQBO3Jlgu5+6r
xygtMImAp8nXCcW2qzi0o20TR4n57PGG/OMBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUc0cY4W1LQUYIUrP+YSOIqHLFDAYwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvYzBjWTRXMUxRVVlJVXJQLVlTT0lx
SExGREFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNJoDAN
BgkqhkiG9w0BAQsFAAOCAQEAk22ufY1pgOaEsymOdq6N7+e1aytRCxcI072m5c2m
XQUyrYL9QoYaLQZA3Hy5k8ZI7bf2jaKJn9SbD/W5yyqmnWH3UNBNOZw91/oDUiv6
aQMq/m34KGLUXU7AA+5w1MWLBr93/6KKXKp3rIJzNfsQv7QUq+/TP7fALObp/jTJ
gJLLOmVcDmWVt7vJWozTpe4Chbr04zWC8zJjzgHOR2fI575+Z88IzPhYFI3JfZi3
sdapmNo1PSJEYqw+zb5tDmh1litcHh/pkZALj4D79M9cAloBJ4F/3StvNK8F+O9P
qhH68yYia3We/9m8r+Zn1xQNwsU9ifUnngdg8JzSufGGjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org