Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oANaIP-BBmCndjQFxLDcevCsT5c.roa
File: oANaIP-BBmCndjQFxLDcevCsT5c.roa (raw, json)
Hash identifier: rD78myp7+Be/E1oi5oFi1HbTtheCEOCl2rL6MTf18ZM=
Subject key identifier: A0:03:5A:20:FF:81:06:60:A7:76:34:05:C4:B0:DC:7A:F0:AC:4F:97
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0961
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oANaIP-BBmCndjQFxLDcevCsT5c.roa
Signing time: Sun 07 Feb 2021 13:05:16 +0000
ROA not before: Sun 07 Feb 2021 13:05:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18424
IP address blocks: 103.30.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Feb 7 13:05:16 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A0035A20FF810660A7763405C4B0DC7AF0AC4F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:a6:1b:8c:12:2c:01:bb:0b:8e:35:dc:6c:
44:1c:bb:60:59:ac:30:e8:e4:24:2a:ad:2b:5b:45:
0a:9a:ea:3b:1c:b0:1f:46:ec:06:eb:b4:d9:a7:40:
03:6c:03:aa:b7:8d:2f:98:46:d8:22:e1:84:39:39:
52:90:ab:62:e4:58:37:8d:26:fd:a2:c6:9f:dd:31:
55:38:0a:cb:88:13:3c:f9:8e:63:0c:ab:4f:c6:68:
33:75:ae:e0:d6:71:52:59:80:db:dc:f7:ba:47:0a:
a8:e2:ea:b5:f5:27:5b:07:6b:4f:14:ea:07:8b:82:
c3:fb:25:8f:70:7d:63:cc:52:6a:6d:6e:39:3f:fa:
c4:68:bf:c9:ff:d6:2d:49:fd:66:28:4d:09:64:d6:
02:aa:99:b2:ba:2e:c0:2c:c3:a7:3e:05:0b:c1:45:
1b:82:91:cf:0e:cf:e5:cc:99:97:06:4c:c3:b2:79:
ef:26:6e:17:2f:2e:fb:af:11:5a:fa:89:78:c4:4c:
dc:13:c5:25:51:d3:0e:19:5e:55:8c:f1:2b:a2:13:
73:b7:04:c4:c5:27:35:aa:b0:dd:c7:df:7b:17:50:
33:6c:9d:94:75:de:ae:d4:be:56:98:d8:14:2f:c1:
32:44:cc:f9:dd:f9:05:b5:e9:7e:12:d6:f0:27:6f:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:5A:20:FF:81:06:60:A7:76:34:05:C4:B0:DC:7A:F0:AC:4F:97
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oANaIP-BBmCndjQFxLDcevCsT5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.46.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ee:32:d5:42:98:c5:c7:1a:2a:04:3f:41:f1:e9:14:9f:be:
58:63:2c:f1:bc:e8:fd:cd:8d:c6:4f:bd:38:91:e3:5e:db:a2:
0e:42:e9:83:be:72:9c:d6:b0:60:d2:35:29:29:1d:f6:a6:2b:
96:8a:ad:8e:3b:f3:2e:f8:fd:9b:75:01:2c:ca:96:37:2f:9f:
af:6d:94:2e:e5:c7:3a:3a:6f:26:b2:83:7d:5f:60:f9:6d:39:
b9:95:57:09:da:77:6e:8a:4b:da:de:60:31:ad:8b:6d:b6:17:
03:e3:e8:d6:77:63:7b:b7:c6:f9:ed:ae:55:6d:87:6e:8f:61:
05:ee:c6:37:49:36:a7:fb:7a:20:16:89:c0:6f:d4:29:c7:73:
b3:fc:1e:cf:af:11:6c:c8:d7:3a:dc:ee:2c:7a:e2:72:0c:06:
ad:0b:eb:26:60:da:57:75:45:01:11:dc:23:1f:68:a8:65:9e:
ec:c8:0f:27:da:89:43:3a:88:48:f2:53:62:9f:71:00:20:43:
15:8c:ef:cb:fe:f2:e3:e1:14:b7:9b:7e:e8:21:54:10:7b:3b:
d7:0b:29:30:ed:65:e6:9c:ea:ab:50:4e:9b:af:6d:41:cb:58:
9d:3b:bf:f0:dc:51:ce:47:86:a0:17:bd:9f:79:36:a2:a2:52:
2a:26:93:b0
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMTAyMDcx
MzA1MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEEwMDM1QTIwRkY4MTA2
NjBBNzc2MzQwNUM0QjBEQzdBRjBBQzRGOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg6qYbjBIsAbsLjjXcbEQcu2BZrDDo5CQqrStbRQqa6jscsB9G
7AbrtNmnQANsA6q3jS+YRtgi4YQ5OVKQq2LkWDeNJv2ixp/dMVU4CsuIEzz5jmMM
q0/GaDN1ruDWcVJZgNvc97pHCqji6rX1J1sHa08U6geLgsP7JY9wfWPMUmptbjk/
+sRov8n/1i1J/WYoTQlk1gKqmbK6LsAsw6c+BQvBRRuCkc8Oz+XMmZcGTMOyee8m
bhcvLvuvEVr6iXjETNwTxSVR0w4ZXlWM8SuiE3O3BMTFJzWqsN3H33sXUDNsnZR1
3q7UvlaY2BQvwTJEzPnd+QW16X4S1vAnby7PAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUoANaIP+BBmCndjQFxLDcevCsT5cwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL29BTmFJUC1CQm1D
bmRqUUZ4TERjZXZDc1Q1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnHi4wDQYJKoZIhvcNAQELBQADggEBAHHuMtVCmMXHGioEP0Hx6RSfvlhj
LPG86P3NjcZPvTiR417bog5C6YO+cpzWsGDSNSkpHfamK5aKrY478y74/Zt1ASzK
ljcvn69tlC7lxzo6byayg31fYPltObmVVwnad26KS9reYDGti222FwPj6NZ3Y3u3
xvntrlVth26PYQXuxjdJNqf7eiAWicBv1CnHc7P8Hs+vEWzI1zrc7ix64nIMBq0L
6yZg2ld1RQER3CMfaKhlnuzIDyfaiUM6iEjyU2KfcQAgQxWM78v+8uPhFLebfugh
VBB7O9cLKTDtZeac6qtQTpuvbUHLWJ07v/DcUc5HhqAXvZ95NqKiUiomk7A=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org