Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/Sj-cl5kURcvuRotGju1qnxShgAQ.roa
File: Sj-cl5kURcvuRotGju1qnxShgAQ.roa (raw, json)
Hash identifier: PNPNWvw+ktHKwmtFxpvTgiYxob/uIzAuhLJsmR+9zp0=
Subject key identifier: 4A:3F:9C:97:99:14:45:CB:EE:46:8B:46:8E:ED:6A:9F:14:A1:80:04
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 0299
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/Sj-cl5kURcvuRotGju1qnxShgAQ.roa
Signing time: Thu 15 Sep 2022 02:38:04 +0000
ROA not before: Thu 15 Sep 2022 02:38:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38042
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 15 02:38:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4A3F9C97991445CBEE468B468EED6A9F14A18004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:0f:51:96:b9:ac:cf:81:6a:38:7d:78:69:
a4:4c:1a:52:43:77:23:71:3f:f3:fc:07:89:64:b2:
d9:ec:a9:c7:c9:b3:60:3e:05:8c:15:62:2b:8d:78:
91:b6:cc:e5:22:5f:b6:d9:fd:1c:29:3e:a4:03:3d:
c7:76:4b:f8:4b:b3:71:1a:3a:ee:25:08:88:13:be:
46:62:33:95:ae:de:d4:6c:66:85:65:0c:f1:9a:1b:
90:3f:7a:65:ec:e3:ea:0a:69:e9:4f:8c:01:8b:7a:
e8:60:79:ca:01:74:20:b8:14:32:0f:66:81:b1:5b:
eb:69:94:02:c1:b7:ec:17:ea:d5:e8:13:4f:88:ed:
f4:63:96:54:0b:fd:78:e5:42:fe:d6:46:59:b7:c1:
8e:e9:45:29:ea:f8:9b:d8:78:b4:f4:32:75:64:9e:
71:87:7d:36:8e:a9:6c:b4:ec:d5:29:42:4e:93:09:
81:37:27:f2:a2:d8:ea:70:97:81:47:1e:1c:65:5a:
ff:91:4e:80:b5:a5:f1:0f:80:b4:25:75:9c:b0:99:
6b:a6:a8:2e:40:f3:fb:38:43:66:01:de:92:b4:a7:
9e:12:53:cf:5f:ea:6c:2f:74:c5:e7:2b:59:6c:a6:
20:c3:19:e1:88:df:36:50:ff:6b:0e:28:1b:16:fe:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:9C:97:99:14:45:CB:EE:46:8B:46:8E:ED:6A:9F:14:A1:80:04
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/Sj-cl5kURcvuRotGju1qnxShgAQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:1a:7b:c1:d0:23:c7:bb:f5:07:b3:08:c7:bc:30:2a:0a:28:
8d:3b:b1:1e:4b:77:36:f9:63:36:f9:3d:de:9c:e2:30:b9:27:
dc:e4:31:94:65:85:7c:27:c5:a0:61:59:86:66:44:87:78:ad:
18:80:ab:92:90:84:0a:99:9e:87:ac:de:1c:c7:3f:e7:5c:8d:
10:d9:74:c7:70:b8:f4:6f:85:f4:e6:2f:a3:cd:f5:6e:ca:5c:
5a:ef:d8:54:7e:84:a7:02:d1:bb:a3:93:06:23:b6:0c:55:7c:
97:65:79:bb:93:3e:1e:39:80:ce:88:03:a3:57:61:e0:c1:8b:
2e:e6:bc:bf:33:41:d7:71:ff:5e:f7:62:08:04:da:22:8d:e8:
b1:a4:6b:44:c6:bf:a6:d1:25:f1:5c:f6:76:91:96:aa:3a:8a:
c0:84:76:d6:27:b7:25:ad:e8:d7:09:be:1b:92:c0:8c:c8:74:
bf:83:91:e0:37:dd:d8:8b:50:f3:10:b1:55:a2:ca:26:81:29:
45:5c:70:ac:43:03:86:9b:a2:11:4e:3e:f1:ac:31:6b:d9:9e:
26:c6:6e:03:46:47:9a:b6:cc:01:a4:b1:06:fe:34:47:56:64:
9b:74:b4:02:f7:09:7b:c0:86:07:57:56:1f:4b:ef:bf:1b:52:
20:3c:84:cc
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICApkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC
QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yMjA5MTUw
MjM4MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRBM0Y5Qzk3OTkxNDQ1
Q0JFRTQ2OEI0NjhFRUQ2QTlGMTRBMTgwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGgg9Rlrmsz4FqOH14aaRMGlJDdyNxP/P8B4lkstnsqcfJs2A+
BYwVYiuNeJG2zOUiX7bZ/RwpPqQDPcd2S/hLs3EaOu4lCIgTvkZiM5Wu3tRsZoVl
DPGaG5A/emXs4+oKaelPjAGLeuhgecoBdCC4FDIPZoGxW+tplALBt+wX6tXoE0+I
7fRjllQL/XjlQv7WRlm3wY7pRSnq+JvYeLT0MnVknnGHfTaOqWy07NUpQk6TCYE3
J/Ki2Opwl4FHHhxlWv+RToC1pfEPgLQldZywmWumqC5A8/s4Q2YB3pK0p54SU89f
6mwvdMXnK1lspiDDGeGI3zZQ/2sOKBsW/h8bAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUSj+cl5kURcvuRotGju1qnxShgAQwHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ
uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3
dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL1NqLWNsNWtVUmN2dVJvdEdqdTFxbnhT
aGdBUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ
KoZIhvcNAQELBQADggEBAJ4ae8HQI8e79QezCMe8MCoKKI07sR5Ldzb5Yzb5Pd6c
4jC5J9zkMZRlhXwnxaBhWYZmRId4rRiAq5KQhAqZnoes3hzHP+dcjRDZdMdwuPRv
hfTmL6PN9W7KXFrv2FR+hKcC0bujkwYjtgxVfJdlebuTPh45gM6IA6NXYeDBiy7m
vL8zQddx/173YggE2iKN6LGka0TGv6bRJfFc9naRlqo6isCEdtYntyWt6NcJvhuS
wIzIdL+DkeA33diLUPMQsVWiyiaBKUVccKxDA4abohFOPvGsMWvZnibGbgNGR5q2
zAGksQb+NEdWZJt0tAL3CXvAhgdXVh9L778bUiA8hMw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org