Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lt6_kBljXXqZ_jzW0OISGLsritw.roa
File: lt6_kBljXXqZ_jzW0OISGLsritw.roa (raw, json)
Hash identifier: m5Bj/Z5pZ+8+AWW2SUj8pPukhtJHuRcqOTf7FmCbrmA=
Subject key identifier: 96:DE:BF:90:19:63:5D:7A:99:FE:3C:D6:D0:E2:12:18:BB:2B:8A:DC
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09BC
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lt6_kBljXXqZ_jzW0OISGLsritw.roa
Signing time: Wed 29 Sep 2021 02:36:44 +0000
ROA not before: Wed 29 Sep 2021 02:36:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 61.247.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2492 (0x9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=96DEBF9019635D7A99FE3CD6D0E21218BB2B8ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:a5:db:2c:cb:1e:0c:7a:9a:59:4d:91:6b:
3c:bf:aa:6d:03:96:4b:b1:4b:ae:f6:71:5e:88:ba:
84:15:4c:eb:96:a1:d6:97:60:a2:1c:c5:9d:a5:ac:
32:dc:9d:03:2a:eb:ed:88:55:e2:ef:65:a5:ab:76:
65:f6:4d:c0:4a:cf:cd:3e:7f:91:46:b1:d2:c1:21:
44:01:a1:86:96:cb:f5:2d:68:6a:12:a6:df:43:d8:
11:96:64:a5:c0:c3:39:39:50:f2:ce:ec:4c:77:a9:
c5:25:00:f5:c0:86:ca:13:3c:29:4f:e3:57:5e:d0:
16:75:38:78:88:b4:80:5c:88:a5:97:75:62:1c:bf:
bb:8e:dc:4c:f5:5a:1b:0c:1d:01:a5:f3:9f:d4:ca:
c8:a3:55:a5:d2:a5:d5:05:e7:2b:bd:f5:5c:9e:67:
49:5f:71:6b:83:b6:61:df:97:13:df:7b:91:5b:ca:
ea:eb:f4:50:ca:4d:6a:19:d0:55:3e:1b:4c:4a:f9:
f5:24:b5:08:fd:8c:86:18:ce:e1:06:2a:3f:26:a3:
9d:89:e5:73:3e:27:b2:7d:2f:03:db:61:a3:5c:c4:
28:0d:52:af:91:23:d4:43:b2:60:08:25:86:52:12:
93:dd:40:ac:b5:e5:9d:ca:1c:05:67:0d:9e:4d:ea:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:BF:90:19:63:5D:7A:99:FE:3C:D6:D0:E2:12:18:BB:2B:8A:DC
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lt6_kBljXXqZ_jzW0OISGLsritw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.247.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:4f:74:53:02:49:1d:6a:99:9b:71:18:11:fb:1c:81:eb:ce:
f1:d8:6c:5c:0c:0c:27:fc:15:8e:0c:8a:f6:c4:1b:49:08:0b:
6b:d9:1a:8f:24:04:53:4f:e1:e9:a6:22:9e:ea:b0:51:d0:bd:
fd:f6:52:5d:bb:2d:12:bc:d5:24:65:ec:ef:e9:4f:cb:20:22:
48:b5:3c:f3:37:ad:b2:d4:62:bc:c0:0b:3f:0e:97:ed:35:59:
d9:c8:df:47:ab:c1:6d:31:2e:d7:ba:e8:60:55:df:84:de:ba:
c8:a1:99:2b:43:20:db:2a:cd:b9:8a:e3:52:10:fb:e1:12:ac:
f4:d3:4e:a4:5b:8b:4b:0f:72:e1:a0:52:64:57:02:b7:e2:06:
65:de:b6:e4:15:0e:c1:50:ae:0e:1d:6c:2f:bf:ab:26:03:db:
55:09:9d:10:91:57:08:64:5b:66:ec:49:57:74:97:01:d1:3e:
2b:49:e1:a6:77:24:06:52:1e:5d:d6:7a:13:19:fb:aa:a5:bc:
a3:62:38:56:bb:02:15:57:0f:fa:c9:e4:b3:dc:ed:08:91:8c:
7f:98:1a:0a:cf:69:80:22:0b:65:bf:56:70:f5:98:69:1a:dc:
07:80:b5:61:37:75:02:17:8f:80:00:a3:67:c1:31:01:42:b0:
1e:83:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org