Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/As1MrQ9x_ADL4sA-ifz9nNJt40k.roa
File: As1MrQ9x_ADL4sA-ifz9nNJt40k.roa (raw, json)
Hash identifier: bJorliJdPZheWK5zU0gB34sY/4T0g7XOq2S9z+GMaUk=
Subject key identifier: 02:CD:4C:AD:0F:71:FC:00:CB:E2:C0:3E:89:FC:FD:9C:D2:6D:E3:49
Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial: 1101
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/As1MrQ9x_ADL4sA-ifz9nNJt40k.roa
Signing time: Wed 01 Feb 2023 05:33:03 +0000
ROA not before: Wed 01 Feb 2023 05:33:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 103.132.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4353 (0x1101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Validity
Not Before: Feb 1 05:33:03 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=02CD4CAD0F71FC00CBE2C03E89FCFD9CD26DE349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:84:40:e1:c2:dc:3f:52:16:cb:1e:84:13:
7e:c8:04:c9:3f:40:5b:26:eb:47:f7:59:7f:82:65:
f7:b8:1b:7f:40:ae:e9:e9:4c:48:9d:2a:93:34:77:
44:9d:fe:e7:ca:23:10:dd:2d:57:87:60:30:f5:78:
5a:80:dd:01:ae:9e:55:c9:71:29:e5:ca:92:0e:35:
97:7d:fc:fb:c2:aa:c5:f8:6f:44:98:7d:3e:0a:aa:
87:84:52:2d:f9:15:41:be:1e:e2:7d:57:1e:b9:98:
a6:f6:81:86:d1:6f:73:8f:7d:8f:0b:01:e9:bc:db:
7f:1e:de:91:e1:ce:ea:2d:ff:62:19:b6:9c:65:42:
bf:e7:97:2a:b5:44:7b:f0:13:59:a1:4e:f2:8b:51:
11:ac:2c:f9:98:52:27:b1:92:87:cd:93:bb:ec:6c:
3c:56:8f:d7:38:a7:d9:e3:91:dd:c3:a5:7b:ec:2d:
5f:1f:e6:cc:8c:39:91:07:7d:13:2e:62:16:ba:e6:
fa:00:9d:5e:c8:0a:02:2f:ab:5d:aa:e4:66:83:9d:
13:17:00:0d:35:45:fc:cf:fc:d1:1e:13:ff:e9:b9:
0d:7a:2a:e7:8d:4c:bb:68:4e:f2:51:be:71:2b:5a:
01:32:26:6f:aa:4e:72:74:10:58:f2:65:47:85:1c:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CD:4C:AD:0F:71:FC:00:CB:E2:C0:3E:89:FC:FD:9C:D2:6D:E3:49
X509v3 Authority Key Identifier:
keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/As1MrQ9x_ADL4sA-ifz9nNJt40k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:63:37:1e:2f:4e:08:58:be:62:43:36:40:73:8a:cd:a3:05:
f3:f2:b4:90:ff:34:b4:14:7a:2e:99:4c:68:06:1b:1a:8d:89:
0a:df:ed:71:bb:1a:a2:09:e6:06:6c:73:a2:3a:aa:5d:cc:c4:
4d:fb:08:e3:ed:c4:c0:7e:3d:00:5a:c8:66:ff:1a:89:19:ce:
a0:15:8b:05:05:a2:e8:39:34:6e:e7:3f:f3:44:19:b9:8b:64:
ae:76:17:b5:06:1f:d0:f9:f1:d5:97:95:5b:5b:09:b4:de:eb:
a1:26:40:12:59:91:b2:32:90:f0:bd:e2:9b:8b:f6:f6:17:33:
4e:05:e8:c6:df:b1:b8:57:0b:27:7d:4d:3b:8d:ba:85:66:1d:
dd:2d:11:16:d6:cd:b6:3d:ad:d3:85:42:b5:51:4d:b4:75:cf:
27:d5:00:25:6f:b0:1b:10:2d:34:27:68:83:cb:20:91:14:ef:
69:48:21:e8:70:03:1a:18:0a:a4:74:f8:e1:00:82:fc:27:94:
eb:62:aa:9f:6d:96:ce:5c:4e:79:14:c5:c6:17:a7:31:d4:36:
ac:74:ee:a1:83:88:c2:68:33:b4:d8:71:a9:a6:9c:7c:51:ee:
86:32:0a:cb:4a:d4:cd:d7:63:a6:c8:28:2a:6c:49:48:d0:cf:
37:b7:3b:b6
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E2
QkU4RkFENzhFOTVDNDY5MEVEOTk5OTFGQTc5REY3NUYzRDMzNzAeFw0yMzAyMDEw
NTMzMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAyQ0Q0Q0FEMEY3MUZD
MDBDQkUyQzAzRTg5RkNGRDlDRDI2REUzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj9IRA4cLcP1IWyx6EE37IBMk/QFsm60f3WX+CZfe4G39Arunp
TEidKpM0d0Sd/ufKIxDdLVeHYDD1eFqA3QGunlXJcSnlypIONZd9/PvCqsX4b0SY
fT4KqoeEUi35FUG+HuJ9Vx65mKb2gYbRb3OPfY8LAem8238e3pHhzuot/2IZtpxl
Qr/nlyq1RHvwE1mhTvKLURGsLPmYUiexkofNk7vsbDxWj9c4p9njkd3DpXvsLV8f
5syMOZEHfRMuYha65voAnV7ICgIvq12q5GaDnRMXAA01RfzP/NEeE//puQ16KueN
TLtoTvJRvnErWgEyJm+qTnJ0EFjyZUeFHK25AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUAs1MrQ9x/ADL4sA+ifz9nNJt40kwHwYDVR0jBBgwFoAUOmvo+teOlcRpDtmZ
kfp533Xz0zcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFNNQy9P
bXZvLXRlT2xjUnBEdG1aa2ZwNTMzWHowemMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L09tdm8tdGVPbGNScER0bVprZnA1MzNYejB6Yy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RTTUMvQXMxTXJROXhfQURMNHNBLWlmejlu
Tkp0NDBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeEnDAN
BgkqhkiG9w0BAQsFAAOCAQEAoWM3Hi9OCFi+YkM2QHOKzaMF8/K0kP80tBR6LplM
aAYbGo2JCt/tcbsaognmBmxzojqqXczETfsI4+3EwH49AFrIZv8aiRnOoBWLBQWi
6Dk0buc/80QZuYtkrnYXtQYf0Pnx1ZeVW1sJtN7roSZAElmRsjKQ8L3im4v29hcz
TgXoxt+xuFcLJ31NO426hWYd3S0RFtbNtj2t04VCtVFNtHXPJ9UAJW+wGxAtNCdo
g8sgkRTvaUgh6HADGhgKpHT44QCC/CeU62Kqn22WzlxOeRTFxhenMdQ2rHTuoYOI
wmgztNhxqaacfFHuhjIKy0rUzddjpsgoKmxJSNDPN7c7tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org