Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/08Z5wygfQEtmCcVCM3KiUwc54sk.roa
File: 08Z5wygfQEtmCcVCM3KiUwc54sk.roa (raw, json)
Hash identifier: v/LDO6LH1vGpXNuz+9kofayNB9ZKLF4MPz5Jh3lX8+w=
Subject key identifier: D3:C6:79:C3:28:1F:40:4B:66:09:C5:42:33:72:A2:53:07:39:E2:C9
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 07A1
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/08Z5wygfQEtmCcVCM3KiUwc54sk.roa
Signing time: Tue 29 Sep 2020 10:03:15 +0000
ROA not before: Tue 29 Sep 2020 10:03:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.56.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 10:03:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D3C679C3281F404B6609C5423372A2530739E2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:c6:45:cc:d9:ec:20:41:81:85:c7:99:5f:
bc:9d:00:37:cf:36:b7:77:7f:5d:0e:0e:a9:5b:2c:
2e:e6:50:c7:0b:cb:c7:1b:d9:7c:ac:7f:53:cc:72:
ef:8c:15:08:ce:99:d3:b3:d6:23:bd:c5:a9:a6:b3:
9c:09:93:59:21:29:48:d6:d4:72:e3:cd:6a:4a:16:
86:f4:6f:43:18:1f:5c:fe:f3:9f:04:2f:e7:b0:1d:
f9:ff:3b:cb:e9:86:9f:80:16:18:5f:d9:ea:c1:7b:
63:55:a9:6e:62:d1:39:25:1d:03:5f:21:56:39:87:
ef:a2:c3:80:5d:c8:b7:50:7e:c1:88:6b:13:4c:96:
55:ff:43:48:a4:47:03:d9:1d:40:29:6d:10:bc:b9:
22:4b:19:32:62:0b:34:cc:98:75:ad:a4:5c:a8:b6:
91:00:e8:34:f6:29:9d:b6:a4:b0:c6:c7:45:c3:0f:
49:7c:55:37:a2:f7:5b:89:9a:9c:c6:4c:dc:55:3e:
5a:b3:6d:75:22:41:bb:de:63:f8:e1:f3:86:f3:dc:
0f:cc:44:1c:42:77:5d:63:48:b2:e8:99:69:cc:b4:
e3:1b:49:38:e8:f1:8b:2f:99:bd:9f:e1:26:36:c3:
9e:d2:0f:c0:22:90:d7:f4:62:4a:2e:41:65:da:23:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:79:C3:28:1F:40:4B:66:09:C5:42:33:72:A2:53:07:39:E2:C9
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/08Z5wygfQEtmCcVCM3KiUwc54sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.64.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:20:7c:41:7b:f6:a2:be:f5:72:21:83:4b:f1:cd:73:22:0f:
fd:bf:12:fa:fe:4c:26:73:cb:74:b8:38:d8:4f:3d:60:5e:84:
1b:cb:ab:49:b0:e2:f9:f4:54:c6:8a:8c:3e:48:9a:02:80:05:
53:7e:f9:ae:8d:29:05:bb:81:af:b4:50:85:dd:60:7f:e5:e6:
00:ec:a9:12:a0:10:a9:b6:0d:cf:a7:05:6f:75:4c:02:07:cc:
01:67:db:f7:73:6d:c9:31:d7:cb:66:d2:0a:6d:f2:85:8f:e2:
75:03:23:d5:f2:8d:c4:7d:7a:15:f3:db:3b:ef:65:a3:54:cc:
54:77:03:ce:61:d4:6c:ea:3a:b6:05:a2:c3:d2:a4:cb:a2:b8:
4f:88:f1:24:86:65:e3:84:6e:a4:b1:58:31:5e:07:b4:6a:a3:
a8:21:a0:b2:4f:51:e7:bc:37:f8:2b:fa:73:c9:f5:d7:d1:ab:
52:fe:35:8e:ac:30:0a:96:1f:0a:d7:bb:86:e6:7e:36:bc:40:
f6:31:71:70:bd:73:ba:63:3d:1b:0b:83:d7:ce:10:b7:d9:a0:
e1:8e:c1:a9:18:11:f0:c7:60:bd:24:98:da:8e:ec:ae:e0:ae:
c5:a9:50:42:dd:0d:52:6c:c3:52:d2:22:6d:1e:41:54:64:e2:
7d:32:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org