Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uktcKQap-HRMOnzoXiem83rJIM4.roa
File: uktcKQap-HRMOnzoXiem83rJIM4.roa (raw, json)
Hash identifier: EKvAeXCtyqE5k5K41yJw9US0OMjz6f1PrA5sPm/LfvY=
Subject key identifier: BA:4B:5C:29:06:A9:F8:74:4C:3A:7C:E8:5E:27:A6:F3:7A:C9:20:CE
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0966
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uktcKQap-HRMOnzoXiem83rJIM4.roa
Signing time: Wed 29 Sep 2021 02:42:52 +0000
ROA not before: Wed 29 Sep 2021 02:42:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131149
IP address blocks: 103.17.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Sep 29 02:42:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BA4B5C2906A9F8744C3A7CE85E27A6F37AC920CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:b7:2b:33:45:a8:9f:8b:d3:3a:57:b8:5e:
23:b9:76:dd:a2:fe:65:6e:79:b9:59:09:7b:a7:e2:
dd:dc:71:4a:74:40:ff:fe:f8:45:79:79:cd:66:04:
be:52:fa:0d:ee:6b:0e:55:ab:93:c6:1b:3a:8b:d3:
01:55:03:b2:2b:2c:fa:dc:2d:5d:87:6f:1c:2a:d6:
49:53:4f:c2:68:fc:e4:f8:a2:37:8e:27:2f:2e:5a:
ac:f5:91:1f:c8:ec:2f:b9:b6:4c:31:78:e8:d7:79:
9c:66:b1:bc:18:33:78:59:6c:8c:b6:b1:f8:7e:58:
05:b7:9d:1d:a8:ae:9e:a1:5b:15:23:67:c5:c7:94:
90:bd:46:e5:13:d6:76:e6:be:48:84:af:c7:11:cb:
3c:ef:5b:ae:88:3a:7a:30:da:8d:07:b5:52:5e:c2:
10:01:d9:fc:97:95:9d:4b:53:a3:97:70:30:a2:a8:
e4:c1:76:ff:21:7d:00:f2:d2:18:48:17:a2:6b:97:
0d:c8:35:f6:be:5d:4e:4b:5f:79:ab:4d:26:14:3c:
a7:b0:50:db:52:74:a8:7e:4b:5a:92:07:06:52:76:
a7:d9:51:39:19:39:40:ad:f8:62:5d:1c:ad:af:94:
fd:9a:30:2a:45:68:2d:53:90:6a:2a:6b:a9:b8:b7:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:5C:29:06:A9:F8:74:4C:3A:7C:E8:5E:27:A6:F3:7A:C9:20:CE
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uktcKQap-HRMOnzoXiem83rJIM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.8.0/22
Signature Algorithm: sha256WithRSAEncryption
50:da:27:cf:4a:6b:37:2d:c2:8e:f1:0e:65:f1:1b:95:d4:79:
ef:91:33:ae:33:85:be:32:53:97:3b:41:89:8e:ff:4e:99:9f:
66:c1:27:8b:da:26:25:f7:7f:42:10:18:e5:b7:31:ca:a3:a8:
ca:3e:b7:6f:28:d6:de:f3:d2:cd:6d:b8:30:f5:c0:48:bf:22:
89:97:cb:cb:da:ee:ad:1e:d3:c4:c4:37:d9:bd:e4:bf:ce:82:
b8:03:08:29:c5:78:59:f1:b9:bd:d8:12:0c:4e:f0:51:4a:72:
15:a3:62:2e:49:12:5e:c5:35:3b:e1:fe:60:4e:07:2e:78:34:
3c:33:e9:55:9f:f1:b2:76:67:67:16:f9:88:5a:a0:bc:43:c5:
d3:8d:25:08:d5:1b:1c:22:b2:c5:25:9b:b3:7a:89:8d:73:25:
d9:83:1a:7b:fb:2d:21:86:21:03:24:bd:2d:24:fc:25:f8:73:
f9:8b:1a:08:a5:27:50:c0:d8:af:97:4d:cf:ad:57:cf:5c:7a:
1b:f3:44:e2:4e:78:7d:e7:92:8d:52:ed:1c:a0:56:2c:b4:d4:
14:b5:e1:2a:4a:9b:81:9e:ee:b2:f1:6f:18:ee:35:71:28:48:
e1:2d:f6:4a:55:ee:36:13:f0:8d:ef:5f:55:79:ce:e1:24:ec:
84:c3:6d:7e
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB
NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yMTA5Mjkw
MjQyNTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJBNEI1QzI5MDZBOUY4
NzQ0QzNBN0NFODVFMjdBNkYzN0FDOTIwQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE+LcrM0Won4vTOle4XiO5dt2i/mVueblZCXun4t3ccUp0QP/+
+EV5ec1mBL5S+g3uaw5Vq5PGGzqL0wFVA7IrLPrcLV2Hbxwq1klTT8Jo/OT4ojeO
Jy8uWqz1kR/I7C+5tkwxeOjXeZxmsbwYM3hZbIy2sfh+WAW3nR2orp6hWxUjZ8XH
lJC9RuUT1nbmvkiEr8cRyzzvW66IOnow2o0HtVJewhAB2fyXlZ1LU6OXcDCiqOTB
dv8hfQDy0hhIF6Jrlw3INfa+XU5LX3mrTSYUPKewUNtSdKh+S1qSBwZSdqfZUTkZ
OUCt+GJdHK2vlP2aMCpFaC1TkGoqa6m4txc7AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUuktcKQap+HRMOnzoXiem83rJIM4wHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe
Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI
RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi91a3RjS1FhcC1IUk1P
bnpvWGllbTgzckpJTTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZxEIMA0GCSqGSIb3DQEBCwUAA4IBAQBQ2ifPSms3LcKO8Q5l8RuV1HnvkTOu
M4W+MlOXO0GJjv9OmZ9mwSeL2iYl939CEBjltzHKo6jKPrdvKNbe89LNbbgw9cBI
vyKJl8vL2u6tHtPExDfZveS/zoK4AwgpxXhZ8bm92BIMTvBRSnIVo2IuSRJexTU7
4f5gTgcueDQ8M+lVn/GydmdnFvmIWqC8Q8XTjSUI1RscIrLFJZuzeomNcyXZgxp7
+y0hhiEDJL0tJPwl+HP5ixoIpSdQwNivl03PrVfPXHob80TiTnh955KNUu0coFYs
tNQUteEqSpuBnu6y8W8Y7jVxKEjhLfZKVe42E/CN719Vec7hJOyEw21+
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org