Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/1Z0uOk88IVii3zox4ND8g_ugI6E.roa
File: 1Z0uOk88IVii3zox4ND8g_ugI6E.roa (raw, json)
Hash identifier: DonRenSkJFIJ8dn1/a+czLUAqBp7MpMtav03XBGHVGs=
Subject key identifier: D5:9D:2E:3A:4F:3C:21:58:A2:DF:3A:31:E0:D0:FC:83:FB:A0:23:A1
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09C0
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/1Z0uOk88IVii3zox4ND8g_ugI6E.roa
Signing time: Wed 29 Sep 2021 02:36:45 +0000
ROA not before: Wed 29 Sep 2021 02:36:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 61.56.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D59D2E3A4F3C2158A2DF3A31E0D0FC83FBA023A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:46:b4:42:b0:d4:b8:da:72:df:63:e2:99:
53:c3:b7:66:76:30:cc:3d:23:31:83:b4:4f:fa:34:
07:2d:33:8a:df:0e:e2:b2:95:9b:1f:4a:f1:65:ed:
ea:4d:4a:49:b7:33:c9:80:8a:0c:de:07:08:2c:bc:
92:13:07:bf:dc:24:70:ed:d2:4c:20:8a:b4:82:90:
99:40:be:fa:0b:e8:75:cc:52:bb:f8:9b:7e:c7:73:
37:e8:5a:45:05:23:66:5f:a4:24:36:f8:75:68:e7:
d8:31:b3:c9:58:92:b0:77:5c:2e:6f:cb:4d:5e:16:
44:dd:f4:d1:9b:48:3e:20:1d:cf:62:e3:db:96:1e:
d7:94:d0:74:d6:2f:fb:52:e6:05:15:c7:86:7f:0a:
50:00:f1:26:b0:db:c8:f3:c5:77:2f:aa:db:e7:71:
21:af:ed:89:9f:80:22:43:3f:84:86:11:7c:e3:b3:
fd:e8:b0:66:63:9c:25:9a:5f:03:23:7c:ee:3a:c1:
6b:50:e3:56:7c:1c:14:34:e1:88:98:95:7c:f7:1d:
f9:e2:64:1f:90:dd:d1:ce:54:10:f2:ca:4d:a5:41:
0f:65:a0:a8:7e:8c:9b:7f:27:11:ff:04:c8:bb:08:
43:50:e2:5e:17:e6:81:70:ca:93:6b:dd:0b:14:9c:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:2E:3A:4F:3C:21:58:A2:DF:3A:31:E0:D0:FC:83:FB:A0:23:A1
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/1Z0uOk88IVii3zox4ND8g_ugI6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.86.0/24
Signature Algorithm: sha256WithRSAEncryption
73:00:c8:53:1c:99:e4:72:8b:d8:de:a3:38:30:61:40:3c:30:
d7:ae:9a:4b:bd:ac:3a:6a:e0:24:b4:3d:bc:78:01:3a:ed:1f:
96:f1:f4:42:5d:cd:72:ed:b8:87:22:0d:17:80:78:2d:44:2a:
d4:6a:bb:39:e6:80:82:63:24:fd:a3:a0:c4:12:7b:66:92:21:
c2:c3:fb:55:79:32:d5:d3:b7:64:ea:de:d3:f0:d6:36:c1:52:
83:9e:5c:df:13:12:b2:87:21:7a:5e:db:10:d7:5c:7a:e4:64:
b2:0a:60:be:41:63:58:0d:68:5e:55:67:91:05:d5:b9:79:74:
19:66:a2:66:75:ee:2a:65:76:9e:8b:e7:11:3e:26:59:ec:4d:
08:ca:6b:12:01:90:e6:dc:94:55:65:2c:cd:9b:f3:81:4e:ab:
f6:73:cc:34:42:3e:37:66:1f:42:2e:1e:b4:91:10:ed:7e:d2:
58:77:80:6d:d8:55:30:ca:0f:f3:55:a3:1f:ae:f0:a5:ab:bb:
5b:dc:92:40:36:78:45:56:72:f1:6c:34:50:9e:6b:62:cf:7e:
b4:59:3e:cd:7c:4a:bd:87:58:c7:30:91:98:78:e4:c8:0e:a1:
3b:e3:38:6f:15:65:92:49:d0:94:ee:c7:b5:6a:a1:0e:24:e5:
a6:64:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org