Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7e0w7pI_F75hB4DWwbh73pd-aXc.roa
File: 7e0w7pI_F75hB4DWwbh73pd-aXc.roa (raw, json)
Hash identifier: awzTMDMj5+cxwwWg4Hg/3NMeMzc+067B5sgXb9FZKlo=
Subject key identifier: ED:ED:30:EE:92:3F:17:BE:61:07:80:D6:C1:B8:7B:DE:97:7E:69:77
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1084
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7e0w7pI_F75hB4DWwbh73pd-aXc.roa
Signing time: Thu 13 Oct 2022 08:51:31 +0000
ROA not before: Thu 13 Oct 2022 08:51:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131621
IP address blocks: 182.173.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4228 (0x1084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Oct 13 08:51:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EDED30EE923F17BE610780D6C1B87BDE977E6977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:dc:26:95:94:0b:8f:e4:0c:7f:7b:c8:a9:
92:30:06:08:7b:37:cc:8d:d8:d8:9c:8c:cb:65:a2:
0c:50:fa:fa:f6:2a:c4:ad:a9:12:a2:50:58:3d:7c:
04:78:94:62:c8:3c:6d:4b:15:84:a1:a4:7c:5c:5a:
37:0a:ad:e1:34:3e:0b:3a:86:54:77:9d:94:ec:77:
b4:7e:ee:d6:2a:c3:99:c6:0b:d0:76:b6:06:22:da:
1f:66:6a:20:9a:cc:db:ff:d1:c5:e0:7c:35:d8:b0:
2c:59:15:00:61:8e:45:0c:41:17:a9:c2:b5:ea:fb:
22:84:01:e4:76:04:f7:46:37:c2:de:54:3b:f1:11:
c4:29:7e:6b:07:2e:80:c2:f9:2a:de:23:71:7f:11:
f7:3d:f9:ba:9d:c1:56:76:5e:f1:e3:6f:5e:a1:7c:
d3:11:24:b4:fa:93:98:72:7c:99:f2:c8:db:2f:c4:
8f:4c:9a:fc:c5:f0:c9:a9:e2:eb:26:66:6c:05:e5:
2c:b2:c3:78:d0:3e:54:38:12:eb:e1:9b:73:18:07:
74:da:44:60:0b:44:91:e3:f0:65:23:bf:fc:75:20:
f9:c4:46:0f:a5:79:5b:8b:bb:d6:39:ca:1b:5b:0f:
3a:19:ea:35:4b:0e:5d:8a:51:43:5b:de:63:ad:a2:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:30:EE:92:3F:17:BE:61:07:80:D6:C1:B8:7B:DE:97:7E:69:77
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7e0w7pI_F75hB4DWwbh73pd-aXc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.173.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d3:4a:a7:db:e7:90:24:fd:e9:c2:0b:dc:e8:83:fd:49:c8:
57:6a:90:de:29:7f:d5:12:db:3c:65:9a:99:3a:b3:9c:e6:9b:
c7:e6:48:70:3b:75:02:17:e6:1c:14:0c:4e:97:0a:2b:e0:d8:
98:c8:2c:b3:80:8c:7c:c5:c7:70:35:76:25:9c:a2:d4:4b:2c:
09:c6:b7:78:f1:15:28:02:82:b0:01:44:f4:e4:ca:50:f9:21:
49:f2:a6:35:60:62:ba:c2:9a:aa:74:4d:18:4c:2b:d6:b2:d0:
b6:ee:2f:82:78:57:a4:c4:50:8b:46:e5:05:f2:e4:57:1e:e5:
67:d8:22:05:03:94:de:b7:c8:ad:d0:17:11:c3:cf:99:01:e3:
65:ab:82:b4:69:4c:0e:78:a8:f6:02:fd:d5:15:b8:83:06:b2:
84:1a:48:ad:48:03:71:a1:10:07:8a:3e:01:86:6e:21:67:ad:
cd:c5:27:82:f6:34:c4:22:26:b9:d4:57:eb:9f:68:70:37:94:
16:c7:da:56:9b:d3:2f:7d:7e:37:ac:fb:0b:a5:a5:a0:67:00:
68:4f:c1:a1:02:5d:f8:ae:28:60:fb:33:85:e1:02:3a:31:6d:
9e:7f:8d:cc:aa:a4:47:2b:06:62:26:ed:83:59:a7:d6:9a:93:
52:27:bc:89
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMjEwMTMw
ODUxMzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVERUQzMEVFOTIzRjE3
QkU2MTA3ODBENkMxQjg3QkRFOTc3RTY5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1+NwmlZQLj+QMf3vIqZIwBgh7N8yN2NicjMtlogxQ+vr2KsSt
qRKiUFg9fAR4lGLIPG1LFYShpHxcWjcKreE0Pgs6hlR3nZTsd7R+7tYqw5nGC9B2
tgYi2h9maiCazNv/0cXgfDXYsCxZFQBhjkUMQRepwrXq+yKEAeR2BPdGN8LeVDvx
EcQpfmsHLoDC+SreI3F/Efc9+bqdwVZ2XvHjb16hfNMRJLT6k5hyfJnyyNsvxI9M
mvzF8Mmp4usmZmwF5Syyw3jQPlQ4Euvhm3MYB3TaRGALRJHj8GUjv/x1IPnERg+l
eVuLu9Y5yhtbDzoZ6jVLDl2KUUNb3mOtoqqFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU7e0w7pI/F75hB4DWwbh73pd+aXcwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy83ZTB3N3BJX0Y3NWhCNERXd2Jo
NzNwZC1hWGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtq0B
MA0GCSqGSIb3DQEBCwUAA4IBAQCb00qn2+eQJP3pwgvc6IP9SchXapDeKX/VEts8
ZZqZOrOc5pvH5khwO3UCF+YcFAxOlwor4NiYyCyzgIx8xcdwNXYlnKLUSywJxrd4
8RUoAoKwAUT05MpQ+SFJ8qY1YGK6wpqqdE0YTCvWstC27i+CeFekxFCLRuUF8uRX
HuVn2CIFA5Tet8it0BcRw8+ZAeNlq4K0aUwOeKj2Av3VFbiDBrKEGkitSANxoRAH
ij4Bhm4hZ63NxSeC9jTEIia51Ffrn2hwN5QWx9pWm9MvfX43rPsLpaWgZwBoT8Gh
Al34rihg+zOF4QI6MW2ef43MqqRHKwZiJu2DWafWmpNSJ7yJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org