Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/Qry5U32xEA2dm39K2RT-5tbvFO4.roa
File: Qry5U32xEA2dm39K2RT-5tbvFO4.roa (raw, json)
Hash identifier: s2FDQvt969/cskGAT4dX8TqMipA04zGiPBCm0gz8xog=
Subject key identifier: 42:BC:B9:53:7D:B1:10:0D:9D:9B:7F:4A:D9:14:FE:E6:D6:EF:14:EE
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0C18
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/Qry5U32xEA2dm39K2RT-5tbvFO4.roa
Signing time: Thu 15 Sep 2022 02:37:04 +0000
ROA not before: Thu 15 Sep 2022 02:37:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 103.138.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 15 02:37:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=42BCB9537DB1100D9D9B7F4AD914FEE6D6EF14EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:15:34:95:0a:81:85:aa:da:d8:dc:58:2b:
5a:37:82:8e:9d:4f:af:86:0a:bb:33:8e:aa:cf:09:
bf:9f:6d:51:cc:0e:ff:2d:2b:e3:07:7a:07:81:08:
6d:37:33:85:7c:3a:16:4b:35:71:02:3e:ed:f5:f0:
c6:c0:77:72:7f:29:24:2b:70:f7:1b:f0:61:e8:61:
ed:35:2e:9c:13:5d:3b:b9:3f:53:eb:4d:c1:50:f7:
04:cd:36:fb:3b:11:de:91:a4:62:93:33:c3:69:62:
9d:09:26:22:55:8c:ad:e6:5b:21:2f:32:aa:32:2c:
37:df:78:29:b5:d8:56:72:ba:ae:1f:f0:d5:9d:41:
c6:3f:a5:ec:60:11:86:48:9b:78:30:1c:7f:69:cb:
a0:29:14:1f:ae:da:84:b4:8a:f1:10:a0:78:59:94:
d9:02:04:d6:0e:90:37:0a:96:be:12:01:a1:b3:69:
9f:8a:84:39:ff:37:83:e3:7e:b1:e8:e2:bb:9e:83:
60:66:20:31:c7:c2:85:15:94:41:cb:17:5d:71:31:
ed:86:ea:f2:cb:03:8c:e0:be:b1:51:51:c0:ea:5d:
e2:e4:7e:9a:3c:23:39:be:06:55:28:5d:ff:a6:88:
98:94:2f:c9:55:27:26:cc:c9:2e:83:a0:b2:93:b4:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:B9:53:7D:B1:10:0D:9D:9B:7F:4A:D9:14:FE:E6:D6:EF:14:EE
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/Qry5U32xEA2dm39K2RT-5tbvFO4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ad:d4:03:7b:0f:1f:80:1f:0e:ee:36:7a:f7:c3:94:dd:a9:
5b:6e:df:a6:e8:93:96:ab:2d:d0:06:82:ea:72:76:77:1b:c3:
e0:a3:4f:5b:fe:6f:ff:89:2f:d0:fc:93:4a:fb:89:d4:2c:eb:
39:1b:44:48:6d:8c:1b:b2:2c:0c:96:cb:8d:b4:12:e8:70:e6:
00:92:e0:1f:1b:1a:c4:f3:13:89:65:3d:cc:b1:ba:20:80:ac:
34:b7:28:39:ac:9c:80:54:a4:81:53:ee:31:bd:43:50:e5:02:
b7:28:d6:c3:ec:83:9b:d2:aa:73:5a:65:2a:ff:0e:0e:41:4f:
61:fb:a6:72:86:78:3e:bb:cb:60:b8:80:c1:15:c1:ba:ed:4e:
ae:98:c8:64:23:2b:ee:58:42:a1:8d:63:1d:86:6b:dd:b0:32:
15:88:c0:e3:18:c3:13:a8:c2:a5:d2:b9:94:61:04:c2:07:18:
e1:99:ce:eb:87:9c:70:e6:e5:67:e4:d9:55:dd:bc:9a:18:90:
23:d6:87:5d:72:51:02:08:bf:e1:20:d1:5b:2b:13:a1:55:e3:
47:31:51:02:58:3f:f3:45:84:3e:c5:ee:a8:97:1e:fd:50:76:
d4:6a:e9:24:39:1b:c1:5c:5c:63:12:4d:94:6d:bf:e6:78:72:
0d:f6:57:14
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex
QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yMjA5MTUw
MjM3MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQyQkNCOTUzN0RCMTEw
MEQ5RDlCN0Y0QUQ5MTRGRUU2RDZFRjE0RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFaBU0lQqBhara2NxYK1o3go6dT6+GCrszjqrPCb+fbVHMDv8t
K+MHegeBCG03M4V8OhZLNXECPu318MbAd3J/KSQrcPcb8GHoYe01LpwTXTu5P1Pr
TcFQ9wTNNvs7Ed6RpGKTM8NpYp0JJiJVjK3mWyEvMqoyLDffeCm12FZyuq4f8NWd
QcY/pexgEYZIm3gwHH9py6ApFB+u2oS0ivEQoHhZlNkCBNYOkDcKlr4SAaGzaZ+K
hDn/N4PjfrHo4rueg2BmIDHHwoUVlEHLF11xMe2G6vLLA4zgvrFRUcDqXeLkfpo8
Izm+BlUoXf+miJiUL8lVJybMyS6DoLKTtCo/AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUQry5U32xEA2dm39K2RT+5tbvFO4wHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc
GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB
U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS9Rcnk1VTMyeEVBMmRt
MzlLMlJULTV0YnZGTzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ4pqMA0GCSqGSIb3DQEBCwUAA4IBAQA/rdQDew8fgB8O7jZ698OU3albbt+m
6JOWqy3QBoLqcnZ3G8Pgo09b/m//iS/Q/JNK+4nULOs5G0RIbYwbsiwMlsuNtBLo
cOYAkuAfGxrE8xOJZT3MsboggKw0tyg5rJyAVKSBU+4xvUNQ5QK3KNbD7IOb0qpz
WmUq/w4OQU9h+6Zyhng+u8tguIDBFcG67U6umMhkIyvuWEKhjWMdhmvdsDIViMDj
GMMTqMKl0rmUYQTCBxjhmc7rh5xw5uVn5NlV3byaGJAj1oddclECCL/hINFbKxOh
VeNHMVECWD/zRYQ+xe6olx79UHbUaukkORvBXFxjEk2Ubb/meHIN9lcU
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org