Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/GqmIlQPil8XZ-01_BKJ10eIjVaU.roa
File: GqmIlQPil8XZ-01_BKJ10eIjVaU.roa (raw, json)
Hash identifier: s7leHV4XxuJbkTr5rZ1NBidRm7qRoQzIVD1KMAhjyt0=
Subject key identifier: 1A:A9:88:95:03:E2:97:C5:D9:FB:4D:7F:04:A2:75:D1:E2:23:55:A5
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 07A2
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/GqmIlQPil8XZ-01_BKJ10eIjVaU.roa
Signing time: Tue 29 Sep 2020 10:03:16 +0000
ROA not before: Tue 29 Sep 2020 10:03:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.56.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 10:03:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1AA9889503E297C5D9FB4D7F04A275D1E22355A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:c8:b7:45:f0:e6:8b:de:95:2b:76:26:ab:
d9:1d:89:eb:62:58:7a:a2:e4:8a:bf:90:7b:50:72:
1e:e8:b9:9f:cf:0e:2e:0a:e9:03:43:82:f6:09:b1:
4e:4e:38:30:2d:ad:04:7d:1a:ad:fe:82:5a:b1:fe:
6f:df:71:75:e1:8a:4a:16:dd:de:8b:27:6c:03:f8:
b1:17:9a:d8:c2:e8:1a:b6:4b:5c:0e:79:05:38:69:
9a:39:3a:22:fd:8a:d0:d4:e8:ff:ce:8e:a2:8e:2f:
69:f2:ea:0a:2c:d0:2b:5a:46:51:88:d3:18:4d:4e:
02:b2:f8:dd:46:8e:16:8b:8e:21:40:92:4b:c2:6e:
62:c1:94:61:28:02:7c:40:80:26:fc:01:4a:95:b1:
aa:4a:62:78:1f:99:f2:46:a2:ba:76:b3:f5:d7:5f:
47:e4:55:09:a2:61:66:6b:98:33:90:b8:4e:23:5e:
e4:38:8c:4d:78:80:b5:9b:9d:a8:b9:39:c6:90:5f:
44:44:74:5d:9d:e0:03:2f:61:21:ba:73:b1:74:60:
2c:bf:95:d0:cb:04:91:56:f1:c2:8d:2b:28:03:5d:
29:8d:3e:15:b4:d4:47:ad:d8:31:3e:80:a7:6f:b0:
11:5d:f2:54:35:78:e4:db:4d:25:9f:71:97:77:f3:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:88:95:03:E2:97:C5:D9:FB:4D:7F:04:A2:75:D1:E2:23:55:A5
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/GqmIlQPil8XZ-01_BKJ10eIjVaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.65.0/24
Signature Algorithm: sha256WithRSAEncryption
83:06:d6:1a:d4:39:eb:46:97:6a:df:40:d6:4f:91:93:14:97:
d6:a3:e3:70:0a:07:0e:17:f9:e2:2b:1b:c0:db:94:dc:64:f2:
70:a8:04:3e:9c:b8:61:4a:62:a6:6a:3d:63:4a:98:b5:bb:2d:
1e:89:f8:21:3d:fa:db:0a:df:03:17:79:4d:dd:50:8d:fe:61:
32:62:27:49:1d:d8:a8:9c:ca:eb:f4:ba:9a:c6:17:b9:07:3c:
71:59:7f:87:7b:e8:20:85:b2:ca:2c:27:5d:93:37:c0:6b:ac:
4a:f8:11:8f:16:3d:30:08:d3:ea:ab:5d:42:d5:9c:fa:fc:32:
ad:c5:f8:b2:ee:07:b5:13:f9:5c:b3:bc:e6:2b:58:58:08:5b:
a7:d2:97:8f:f9:3e:a5:9f:a4:40:2a:48:eb:96:16:83:a2:c6:
e2:73:fd:44:4a:2c:ff:dd:86:8a:1d:2a:8c:6d:08:2e:0b:5f:
43:f8:e2:5a:9c:ae:d3:6b:d1:99:7a:37:f2:c2:c1:37:44:a1:
b4:ac:80:8a:53:36:55:3e:78:49:9f:ae:50:e6:02:1f:92:e1:
ad:56:76:d5:fc:18:2c:8b:b8:06:87:85:82:00:62:cb:e2:34:
a2:fc:bc:b7:a0:29:85:85:c4:2b:92:c7:4c:e0:56:be:84:31:
12:23:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org