Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/yVYUI_lZXPDns8Cl14A5s_jp0xE.roa
File: yVYUI_lZXPDns8Cl14A5s_jp0xE.roa (raw, json)
Hash identifier: WXYbuwcDMo8RSZQnK66cv4UqCMBV19ZSSYyQYBo24+s=
Subject key identifier: C9:56:14:23:F9:59:5C:F0:E7:B3:C0:A5:D7:80:39:B3:F8:E9:D3:11
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0996
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/yVYUI_lZXPDns8Cl14A5s_jp0xE.roa
Signing time: Wed 29 Sep 2021 02:53:18 +0000
ROA not before: Wed 29 Sep 2021 02:53:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 61.67.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 02:53:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C9561423F9595CF0E7B3C0A5D78039B3F8E9D311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:e1:71:90:9f:70:88:9f:f4:14:23:a4:3d:
fe:24:ed:68:44:e6:a3:0f:e9:c4:54:d7:85:09:ca:
b2:72:99:e9:34:62:42:58:9f:5a:36:bb:f9:77:9f:
af:4d:fe:4a:ea:72:a2:2f:25:06:86:39:f1:b7:14:
36:f5:db:b0:ce:fc:6c:a7:04:bb:10:05:7b:8a:8e:
2b:70:04:c7:00:55:ce:03:67:b4:1a:d1:d2:34:45:
17:84:a0:75:01:db:08:3f:8a:b6:24:72:8d:35:57:
f0:96:29:30:41:a1:10:a1:a4:4a:67:6a:20:16:e4:
cf:f4:5a:c1:d5:4c:0a:e1:34:e6:4a:c2:9d:60:fd:
3a:a1:14:8b:b6:29:ab:4e:93:6f:a9:6e:af:7c:ea:
d1:64:27:37:05:69:87:2b:7c:04:49:4d:37:d7:21:
bc:46:6a:3c:b2:4b:1a:d5:d9:0f:b1:f3:6a:1f:3e:
62:46:03:8b:48:f6:49:d6:47:5d:4f:db:64:e9:22:
d9:48:6a:2e:2d:cd:7f:23:98:e1:92:02:69:61:5f:
e0:e7:72:e1:9b:42:34:e9:df:f6:29:87:59:13:55:
b8:4c:aa:4c:bc:d2:60:5f:43:e3:b4:c6:f7:33:e4:
44:19:f5:cd:50:4e:8e:4f:1c:1d:92:cf:39:aa:09:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:56:14:23:F9:59:5C:F0:E7:B3:C0:A5:D7:80:39:B3:F8:E9:D3:11
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/yVYUI_lZXPDns8Cl14A5s_jp0xE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:9d:3d:fd:00:35:75:c5:c5:ba:66:e9:05:f6:db:67:cf:fe:
89:30:d7:d0:df:16:df:2e:bc:3a:67:cf:9d:a5:46:98:e5:73:
36:28:2d:c1:29:2f:14:0c:d9:f3:ee:05:55:f5:63:0b:86:ed:
1f:96:a5:bf:ff:ec:55:3f:4d:d0:e2:e5:e9:a1:97:a6:c0:86:
a0:b2:fc:b4:83:11:1e:ae:14:1a:89:c9:71:4d:10:05:c4:91:
99:29:f1:45:fd:6d:52:ac:47:ec:37:51:fa:7b:be:c0:1d:47:
28:23:36:94:41:c3:b2:9a:f4:ff:f9:4e:88:9c:ff:fb:b5:2d:
bf:9a:7a:8a:19:5c:a8:55:2b:d5:13:b4:fa:7f:7c:aa:8b:17:
2d:03:f1:1a:22:f1:6b:dd:c1:46:da:54:78:73:76:6f:00:01:
b7:58:d4:bb:81:a8:f1:ab:c4:66:1e:96:7c:bb:2a:94:3b:5e:
d3:18:e6:0c:8c:5a:b5:f8:b3:a4:71:aa:a5:1b:39:54:2e:4e:
9e:3c:17:49:07:ac:0b:46:5e:b3:4b:4f:be:af:77:71:04:e1:
35:4e:fb:4c:0b:a8:45:43:fa:c0:74:2e:6a:e8:f3:b4:30:13:
69:7c:c2:6c:4b:8b:66:02:68:36:9a:a4:54:54:5a:95:8a:0f:
ad:99:fd:4a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMTA5Mjkw
MjUzMThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM5NTYxNDIzRjk1OTVD
RjBFN0IzQzBBNUQ3ODAzOUIzRjhFOUQzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvRuFxkJ9wiJ/0FCOkPf4k7WhE5qMP6cRU14UJyrJymek0YkJY
n1o2u/l3n69N/krqcqIvJQaGOfG3FDb127DO/GynBLsQBXuKjitwBMcAVc4DZ7Qa
0dI0RReEoHUB2wg/irYkco01V/CWKTBBoRChpEpnaiAW5M/0WsHVTArhNOZKwp1g
/TqhFIu2KatOk2+pbq986tFkJzcFaYcrfARJTTfXIbxGajyySxrV2Q+x82ofPmJG
A4tI9knWR11P22TpItlIai4tzX8jmOGSAmlhX+DncuGbQjTp3/Yph1kTVbhMqky8
0mBfQ+O0xvcz5EQZ9c1QTo5PHB2SzzmqCR9DAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUyVYUI/lZXPDns8Cl14A5s/jp0xEwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAveVZZVUlfbFpYUERuczhDbDE0QTVz
X2pwMHhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1DIDAN
BgkqhkiG9w0BAQsFAAOCAQEAnp09/QA1dcXFumbpBfbbZ8/+iTDX0N8W3y68OmfP
naVGmOVzNigtwSkvFAzZ8+4FVfVjC4btH5alv//sVT9N0OLl6aGXpsCGoLL8tIMR
Hq4UGonJcU0QBcSRmSnxRf1tUqxH7DdR+nu+wB1HKCM2lEHDspr0//lOiJz/+7Ut
v5p6ihlcqFUr1RO0+n98qosXLQPxGiLxa93BRtpUeHN2bwABt1jUu4Go8avEZh6W
fLsqlDte0xjmDIxatfizpHGqpRs5VC5OnjwXSQesC0Zes0tPvq93cQThNU77TAuo
RUP6wHQuaujztDATaXzCbEuLZgJoNpqkVFRalYoPrZn9Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org