Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/N1NJgcVnnIArbsJsLUeJSvI0RKw.roa
File: N1NJgcVnnIArbsJsLUeJSvI0RKw.roa (raw, json)
Hash identifier: 06Wi4DOuSX4thfqQ6OWk7fzkOqC2IxvvdurjgKtRCTQ=
Subject key identifier: 37:53:49:81:C5:67:9C:80:2B:6E:C2:6C:2D:47:89:4A:F2:34:44:AC
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/N1NJgcVnnIArbsJsLUeJSvI0RKw.roa
Signing time: Thu 15 Sep 2022 02:37:43 +0000
ROA not before: Thu 15 Sep 2022 02:37:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 113.21.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=37534981C5679C802B6EC26C2D47894AF23444AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:d8:67:c7:b8:c2:0e:2d:18:37:27:fe:3c:
62:f4:65:43:46:d6:d6:39:34:ae:3f:99:bc:5f:b3:
16:06:44:f1:d1:32:29:b2:5d:fa:db:5f:2a:9a:c5:
54:b7:e7:3a:d8:61:58:73:a3:83:4c:c5:f2:e3:e5:
f3:b1:97:60:e9:19:65:f2:2e:ec:39:55:34:a1:9f:
d6:e4:23:8e:6c:de:cc:54:db:e4:6c:1c:9f:98:4a:
7d:6c:60:2d:f6:6f:d9:99:0b:e5:79:d5:94:c7:9b:
18:34:c7:e5:6c:6f:92:41:09:aa:66:ff:c7:ad:e6:
6a:3c:31:bd:33:d1:b5:73:90:73:f6:73:22:c9:72:
5a:c3:5d:fa:58:87:2d:cf:ea:c3:0a:33:ca:3e:51:
8d:e7:d6:2b:0f:61:b5:56:59:1d:39:8e:e4:a2:ea:
3d:59:cb:13:5c:d6:7c:31:3c:ef:99:65:1d:0c:5d:
17:60:59:02:dd:ec:ca:e3:0b:e2:8e:5d:54:23:fe:
19:4e:50:61:13:db:f6:bb:cc:c3:a0:00:7a:d7:c7:
8a:f7:73:bd:91:b8:cb:64:d6:f2:6a:4f:24:25:48:
e6:3e:e0:ee:49:fe:f6:e1:27:42:c5:85:68:4c:4c:
77:99:c5:c1:e7:86:75:dd:14:ed:d1:91:25:60:06:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:49:81:C5:67:9C:80:2B:6E:C2:6C:2D:47:89:4A:F2:34:44:AC
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/N1NJgcVnnIArbsJsLUeJSvI0RKw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.188.0/22
Signature Algorithm: sha256WithRSAEncryption
18:a8:53:81:c4:18:18:b0:c3:dc:56:5f:e0:39:0b:11:a8:5a:
8f:2c:79:2a:be:8a:99:fa:57:0a:a3:77:cf:b0:fb:32:f3:d7:
c7:28:50:fb:ba:c7:57:2a:ce:03:01:8e:fe:32:53:07:55:f3:
2f:b1:30:1b:9b:d5:08:35:60:67:c8:40:55:58:29:bf:90:26:
22:50:da:2e:9a:7e:6f:9b:92:8b:68:89:66:72:f9:7a:46:1b:
dd:52:a1:09:e5:a8:62:dd:aa:75:56:fd:36:cf:ea:08:5a:90:
d7:4b:fc:0f:dc:f0:ba:00:9b:17:08:93:5e:e2:74:23:37:9d:
82:00:b4:d1:cc:0f:80:a2:a3:ec:52:10:32:77:f9:07:d0:72:
bf:3e:38:30:33:b9:e6:14:0e:04:ca:6c:fc:a8:ab:bf:18:86:
e7:ea:dd:75:7c:77:f3:0a:cd:21:7d:0c:d4:4d:4d:43:b5:0b:
16:1a:e3:46:90:f2:e2:0b:32:ea:b4:91:2d:e3:9a:a7:9a:7f:
eb:8e:87:2c:ec:63:06:73:d5:a2:3a:69:3d:0f:fb:19:f9:7b:
de:b3:bd:17:55:2a:33:e6:43:83:4e:bc:82:89:a0:bd:fe:e7:
05:78:e9:78:9a:43:65:1d:2b:1a:89:10:22:14:e8:11:06:11:
9d:a6:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org