Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/gxjaRSN2NC3r44E2MQj6rKIXJr8.roa
File: gxjaRSN2NC3r44E2MQj6rKIXJr8.roa (raw, json)
Hash identifier: 0YR7EyKRUIhMpt+5vM5Nyfzr4Sig5tNFoSrNK+Tu3Ag=
Subject key identifier: 83:18:DA:45:23:76:34:2D:EB:E3:81:36:31:08:FA:AC:A2:17:26:BF
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 07A0
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/gxjaRSN2NC3r44E2MQj6rKIXJr8.roa
Signing time: Tue 29 Sep 2020 10:07:17 +0000
ROA not before: Tue 29 Sep 2020 10:07:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 203.119.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 29 10:07:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8318DA452376342DEBE381363108FAACA21726BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:27:c5:c0:cc:ad:53:f4:5e:7f:6e:47:34:
bd:c4:6e:93:0a:9e:d9:8a:05:96:ea:b7:b8:da:52:
c3:82:79:d5:8d:a0:76:73:a0:1a:e7:1e:77:84:e4:
04:62:03:d5:98:52:5b:d6:8a:24:b9:1a:fb:1e:a3:
39:01:d5:1e:f9:96:81:28:e8:b4:47:40:27:e6:e4:
0c:69:bb:54:ac:99:ae:9c:78:17:67:5c:f1:eb:44:
19:f5:8e:f6:1a:8f:31:6e:1f:89:2e:3e:06:c5:c4:
86:0a:d0:58:e4:50:10:48:a7:2b:9d:b1:5e:22:31:
ce:25:f9:00:28:05:da:bf:46:4f:4c:be:ac:c3:4f:
1d:69:5f:c5:e5:96:1b:4a:b0:33:ea:bf:68:e3:b5:
06:21:b1:1b:94:56:cd:16:b7:13:36:82:d5:48:31:
ed:40:94:52:bb:6d:a8:b3:aa:d1:50:d8:8c:fa:a0:
4b:65:b1:48:1d:9d:83:89:bd:e0:42:4a:f1:b8:5b:
8a:5e:d2:ef:81:30:64:e1:f0:bb:24:09:65:51:7c:
36:ef:96:72:15:90:6c:73:3e:7b:d2:01:61:e1:70:
e5:7c:f0:8d:ef:ae:1c:7d:1b:16:17:84:7a:36:ee:
17:5d:3c:ba:7a:92:7f:90:c5:6d:c5:a9:96:ef:e8:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:DA:45:23:76:34:2D:EB:E3:81:36:31:08:FA:AC:A2:17:26:BF
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/gxjaRSN2NC3r44E2MQj6rKIXJr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8d:5f:49:d6:20:01:08:1d:5d:76:c1:65:e4:e3:ef:49:72:
c7:f0:c5:8e:e9:b6:11:d0:09:b7:67:02:a6:e1:44:3e:2f:c1:
2a:15:35:7a:fb:5f:66:c9:35:cb:7e:4d:a1:63:52:2a:77:cb:
29:c0:79:40:80:32:a8:5f:0d:89:26:9d:96:5f:0d:85:41:70:
85:08:8d:8c:3b:ee:7b:1e:ca:7c:35:4e:7c:5a:1b:0d:ad:26:
e9:6a:62:25:1f:ca:76:9c:96:16:9e:c7:cd:28:f4:63:18:ca:
76:3f:36:cd:79:8a:fb:66:ee:a2:46:63:f0:be:63:37:e3:fd:
37:39:ea:c0:20:b4:e3:93:c6:b6:f0:ed:f2:95:54:c2:03:6a:
f9:18:a1:6d:1e:5e:aa:08:51:ad:ee:7f:de:80:fa:45:4f:98:
c7:f4:7d:03:1e:16:74:a9:9e:d4:75:9c:70:8f:af:b6:3b:41:
c4:d1:3a:c1:fc:bf:b8:06:38:58:10:33:3a:4a:71:30:83:bf:
cc:7f:bf:d7:d9:49:50:38:dd:6a:a5:72:3d:b4:79:0b:43:95:
ed:fe:91:2e:29:39:25:eb:35:68:1b:1b:25:a4:0b:de:af:3f:
9c:61:c2:72:c4:40:e7:d0:eb:b4:45:58:9d:44:32:59:e4:97:
6e:65:bc:54
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDA5Mjkx
MDA3MTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgzMThEQTQ1MjM3NjM0
MkRFQkUzODEzNjMxMDhGQUFDQTIxNzI2QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9tifFwMytU/Ref25HNL3EbpMKntmKBZbqt7jaUsOCedWNoHZz
oBrnHneE5ARiA9WYUlvWiiS5GvseozkB1R75loEo6LRHQCfm5Axpu1Ssma6ceBdn
XPHrRBn1jvYajzFuH4kuPgbFxIYK0FjkUBBIpyudsV4iMc4l+QAoBdq/Rk9MvqzD
Tx1pX8XllhtKsDPqv2jjtQYhsRuUVs0WtxM2gtVIMe1AlFK7baizqtFQ2Iz6oEtl
sUgdnYOJveBCSvG4W4pe0u+BMGTh8LskCWVRfDbvlnIVkGxzPnvSAWHhcOV88I3v
rhx9GxYXhHo27hddPLp6kn+QxW3FqZbv6ForAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUgxjaRSN2NC3r44E2MQj6rKIXJr8wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9neGphUlNOMk5DM3I0NEUyTVFq
NnJLSVhKcjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy3de
MA0GCSqGSIb3DQEBCwUAA4IBAQC4jV9J1iABCB1ddsFl5OPvSXLH8MWO6bYR0Am3
ZwKm4UQ+L8EqFTV6+19myTXLfk2hY1Iqd8spwHlAgDKoXw2JJp2WXw2FQXCFCI2M
O+57Hsp8NU58WhsNrSbpamIlH8p2nJYWnsfNKPRjGMp2PzbNeYr7Zu6iRmPwvmM3
4/03OerAILTjk8a28O3ylVTCA2r5GKFtHl6qCFGt7n/egPpFT5jH9H0DHhZ0qZ7U
dZxwj6+2O0HE0TrB/L+4BjhYEDM6SnEwg7/Mf7/X2UlQON1qpXI9tHkLQ5Xt/pEu
KTkl6zVoGxslpAverz+cYcJyxEDn0Ou0RVidRDJZ5JduZbxU
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org