Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Exrsr11_YF8J6vQGV0B_Xad25Ks.roa
File: Exrsr11_YF8J6vQGV0B_Xad25Ks.roa (raw, json)
Hash identifier: YHeRLAlw8bc5ZT/lkDrZchs7NMwwpJ3ahrqUt9rMvTU=
Subject key identifier: 13:1A:EC:AF:5D:7F:60:5F:09:EA:F4:06:57:40:7F:5D:A7:76:E4:AB
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0797
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Exrsr11_YF8J6vQGV0B_Xad25Ks.roa
Signing time: Tue 29 Sep 2020 10:03:13 +0000
ROA not before: Tue 29 Sep 2020 10:03:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 210.67.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 10:03:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=131AECAF5D7F605F09EAF40657407F5DA776E4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:04:cd:9e:45:91:2d:f3:ef:6b:6e:e1:46:
ab:ed:85:3c:b1:ef:bf:bd:6c:88:f7:47:79:56:16:
2b:ec:e4:39:94:fa:0b:fd:0a:76:6c:0c:3f:c3:57:
d0:1f:d6:3a:7d:9d:cd:82:66:7c:45:7e:14:cc:e8:
18:c6:af:22:bc:66:54:e6:ea:a3:0e:75:19:5c:a7:
40:b5:99:bf:79:6b:42:2d:31:d6:5e:89:e6:c3:f4:
2a:8e:49:df:a6:13:9a:09:4e:1d:68:ef:69:60:7a:
ff:f7:69:a9:c3:eb:c9:d7:f6:30:66:89:13:66:28:
f6:3a:13:1b:3e:20:8d:c1:a4:87:c9:c4:91:a0:15:
d9:af:c4:9c:24:93:6a:de:ae:9e:0c:92:8d:36:f7:
ec:e9:44:d3:de:fb:68:b7:bb:cb:b7:5c:c2:a9:d3:
94:d5:52:21:1a:31:4c:07:93:39:7e:2e:57:9d:11:
66:c5:06:9c:e5:79:4e:dd:d0:ce:1f:22:a5:2c:9b:
b7:7f:c8:d8:bd:96:02:14:d6:47:2b:de:d5:81:cd:
11:70:74:97:21:b9:d6:fd:26:24:69:be:2c:89:7a:
ad:77:7e:f2:b0:11:09:ec:3f:31:4b:c3:da:44:e5:
a1:a3:5a:89:a7:28:64:55:33:e7:fe:dd:a8:81:87:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:EC:AF:5D:7F:60:5F:09:EA:F4:06:57:40:7F:5D:A7:76:E4:AB
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Exrsr11_YF8J6vQGV0B_Xad25Ks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:92:7d:d9:40:31:04:8e:09:06:99:41:87:52:d2:76:bd:d0:
4f:d3:94:fd:5f:f9:df:96:85:25:2d:95:d3:c0:f6:a6:62:94:
54:00:9f:dd:49:3f:9c:e6:3a:95:85:77:ff:c2:c5:c0:23:81:
dd:97:d1:8b:8c:1f:81:9c:dc:29:3f:c8:59:9f:db:64:5e:37:
95:14:4a:ed:69:cb:ed:9c:cd:12:d0:96:f0:33:f6:5b:40:57:
51:22:c9:1f:ba:64:94:88:9a:67:7c:9b:69:1e:92:21:e0:b3:
f7:5d:97:b4:8b:cf:64:dc:f7:e5:e6:72:89:2a:c3:fc:f0:09:
5f:65:4d:60:8b:78:b1:70:8b:03:3b:8b:15:8b:18:6b:60:f8:
24:19:16:68:30:c0:de:7c:40:51:7b:89:55:e7:e1:f6:61:97:
3f:a2:a3:78:a4:55:41:da:41:a6:50:0d:f4:6f:53:0a:94:6f:
1b:1d:cf:53:a9:7c:69:39:8f:88:72:11:d7:b8:7c:28:d5:a5:
53:c4:a4:7a:a8:36:24:77:1d:45:f7:57:3b:45:77:90:9b:e5:
d2:bd:d5:ff:d7:54:03:48:1d:27:1b:7d:cd:9d:47:1b:91:66:
eb:bf:bc:cc:9d:5e:c0:e4:5d:98:37:fc:7b:28:95:6a:70:1a:
29:ce:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org