Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/6iAYRmW3cLVIkUtpAGygkSWezqQ.roa
File: 6iAYRmW3cLVIkUtpAGygkSWezqQ.roa (raw, json)
Hash identifier: bchTqd0Wse5H6udcGBwjF5ckLWA1Of2vjG//AjQtqBI=
Subject key identifier: EA:20:18:46:65:B7:70:B5:48:91:4B:69:00:6C:A0:91:25:9E:CE:A4
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/6iAYRmW3cLVIkUtpAGygkSWezqQ.roa
Signing time: Thu 15 Sep 2022 02:37:40 +0000
ROA not before: Thu 15 Sep 2022 02:37:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 61.56.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA20184665B770B548914B69006CA091259ECEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:76:52:87:e8:88:87:a4:a4:9b:13:fc:1c:
86:4e:da:f9:35:55:92:8a:56:44:47:d8:93:fc:0e:
db:fb:7e:cf:7b:1c:54:6b:54:69:bc:22:c5:c6:4e:
d2:54:d0:e3:65:3b:aa:e8:63:61:05:6a:4d:a4:ab:
58:38:e0:59:b9:c6:25:93:f8:6e:d1:e8:2a:3f:f7:
07:6c:01:40:0e:7a:52:7c:b3:3a:36:ed:ea:7d:33:
4d:96:33:72:24:08:dd:55:c7:05:c5:6b:c1:2d:11:
07:8f:78:90:6b:91:93:43:0d:09:17:56:34:da:3c:
c5:a5:64:05:b5:05:3d:3f:6e:85:ca:02:8d:4b:4d:
25:46:12:c0:46:2c:91:d5:21:8f:76:12:0e:41:ad:
06:86:a6:bd:05:65:1c:82:69:dc:5e:db:63:2f:cb:
52:b2:ba:5e:43:73:77:9f:ea:bc:d2:b0:f0:db:cf:
eb:00:f7:d0:f9:69:89:07:cb:38:a4:b4:5b:c9:87:
22:c9:ef:6f:26:d7:78:df:9c:31:42:af:aa:6d:6c:
ae:51:c0:e2:50:dc:15:94:79:f4:28:4a:13:12:53:
05:1a:93:c8:9e:82:7b:34:b8:b1:e8:67:f2:32:5d:
06:96:45:c0:b6:01:58:5e:2c:8d:8e:3b:be:2f:bc:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:18:46:65:B7:70:B5:48:91:4B:69:00:6C:A0:91:25:9E:CE:A4
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/6iAYRmW3cLVIkUtpAGygkSWezqQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:9e:45:2a:61:23:64:8c:cf:a4:ed:e4:86:a4:95:40:8f:02:
02:1e:a0:98:a6:d9:b9:d1:91:0d:b2:72:e4:5e:68:ee:85:7f:
43:8e:f0:af:09:51:ae:bd:b1:ca:85:a6:58:42:af:3f:a4:74:
f5:57:30:3a:fd:e5:04:5d:d8:5d:75:01:d9:4a:44:19:d6:82:
ef:c9:67:da:68:97:5c:a7:7d:e4:67:54:ef:9f:ae:8f:87:20:
c8:ac:84:f6:79:fb:a6:61:93:e2:ed:52:f1:90:17:a5:07:fd:
4c:e5:44:ab:be:a6:21:4c:96:7e:a5:83:e2:93:76:72:1e:3f:
b8:45:52:f1:8d:85:cb:fc:99:0e:73:c0:cd:3d:a7:95:47:cd:
0b:b3:4e:d2:05:0c:a4:c6:72:32:68:73:1e:c4:c4:8b:21:8a:
68:55:0b:d3:fa:b3:7d:4f:86:23:9c:6b:61:93:74:a8:ae:b1:
c7:e1:be:1a:ed:b8:bc:ad:19:5d:a0:cd:e4:f0:e2:37:bb:ad:
f5:27:fe:de:9f:3f:84:dc:5b:65:b8:5e:9c:f7:54:26:c4:4a:
e3:b3:e8:75:2f:c9:cb:6a:11:cf:12:38:23:3c:3a:3c:49:c1:
c5:36:09:5f:46:d7:9f:66:c5:14:ab:f7:87:e9:ab:46:b1:17:
33:9b:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org