Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/_Y5TUj_Xj65zyjAwJocQJmteUB4.roa
File: _Y5TUj_Xj65zyjAwJocQJmteUB4.roa (raw, json)
Hash identifier: 1/IurkuqFruXRWsXZUyNcjAHRwheRBtPp6HBm24jSPI=
Subject key identifier: FD:8E:53:52:3F:D7:8F:AE:73:CA:30:30:26:87:10:26:6B:5E:50:1E
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 090D
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/_Y5TUj_Xj65zyjAwJocQJmteUB4.roa
Signing time: Sun 07 Feb 2021 11:55:51 +0000
ROA not before: Sun 07 Feb 2021 11:55:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.247.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 7 11:55:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FD8E53523FD78FAE73CA3030268710266B5E501E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:82:1a:d6:0e:bd:d2:fd:39:42:b1:9d:41:
b1:75:f2:58:56:bc:a7:24:10:06:1a:6f:de:97:8a:
68:68:28:32:a3:06:a4:ae:5c:44:3e:8f:ff:0b:bb:
c4:3c:18:15:a7:1d:e4:ee:21:e5:b4:7a:17:f1:72:
64:18:de:40:ac:0f:5d:95:b8:23:ce:13:81:04:bf:
f5:63:c9:50:85:47:59:79:08:b1:84:21:74:0d:98:
56:27:ec:ec:a1:62:37:5d:27:b0:37:f8:dc:df:13:
bf:9a:81:52:ee:d9:d4:77:37:f3:d5:2c:11:5d:43:
b6:cd:60:37:83:97:71:52:08:ea:20:e4:27:9f:eb:
7c:5a:33:a2:9b:88:4b:1e:df:e1:be:21:ad:59:4d:
ca:a9:13:25:ba:23:2a:1b:28:c5:5f:56:b7:d4:0e:
17:f8:8e:95:ba:28:91:8b:da:a6:fb:6b:3c:14:e1:
ac:82:f7:02:ef:0a:45:21:8f:e2:35:1e:e9:e1:ba:
96:e4:ba:2f:c0:32:46:24:5f:93:da:71:70:16:51:
58:97:c4:f0:29:5c:c7:de:c8:a5:b2:c1:ae:6e:95:
5b:2d:57:84:ac:06:70:4d:26:58:45:a2:02:68:53:
48:a7:be:a3:f9:8e:9c:c9:fb:36:40:4c:b6:f6:9e:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:53:52:3F:D7:8F:AE:73:CA:30:30:26:87:10:26:6B:5E:50:1E
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/_Y5TUj_Xj65zyjAwJocQJmteUB4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.247.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:63:33:64:37:d5:bb:87:6e:47:ba:f6:6a:15:ba:79:f8:20:
bf:59:2a:f9:97:88:76:48:a5:d7:e1:0e:37:39:61:44:2c:6e:
6a:d7:ef:25:bb:5f:d6:da:c0:cd:8d:76:ae:7f:9b:6e:41:c5:
c1:8b:ed:2e:28:70:6c:09:21:8a:eb:e5:7c:04:57:69:a4:c1:
ff:d7:97:01:6c:49:cc:fe:29:33:cc:7a:e2:52:f2:11:c1:c4:
cd:17:8b:a0:c2:71:c4:59:95:0c:10:62:37:cb:63:3a:9d:a0:
46:3e:ee:8e:65:81:32:3f:bd:03:fb:10:37:e9:aa:64:16:e1:
a8:80:ae:ac:cd:c5:8b:79:c1:19:b8:77:e6:6d:f5:1a:e7:86:
71:d7:85:59:98:e4:42:f7:f6:4e:b3:2f:11:4f:59:0f:d1:a6:
5a:cf:11:9f:f5:75:a7:41:5d:60:74:30:6e:34:32:6f:10:9f:
df:9e:15:2f:89:49:49:6a:33:3a:c5:5b:ac:0a:86:14:67:94:
04:2a:14:69:73:8a:4f:81:1f:72:e6:e5:51:da:b5:10:40:2e:
43:64:11:51:f9:0d:d4:fe:82:53:49:70:b2:6e:29:46:c3:e2:
de:41:50:25:17:a3:8a:a8:c6:5d:1b:f0:d9:52:00:6c:b9:ae:
04:68:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org