Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/mISmJZqYeFTUb5DgFRMaKkrUd10.roa
File: mISmJZqYeFTUb5DgFRMaKkrUd10.roa (raw, json)
Hash identifier: gklP3IbJKjoY8fs17w0faiGSGV1+XwKxRCocaMKq9pY=
Subject key identifier: 98:84:A6:25:9A:98:78:54:D4:6F:90:E0:15:13:1A:2A:4A:D4:77:5D
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 079A
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/mISmJZqYeFTUb5DgFRMaKkrUd10.roa
Signing time: Tue 29 Sep 2020 10:03:13 +0000
ROA not before: Tue 29 Sep 2020 10:03:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.56.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 10:03:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9884A6259A987854D46F90E015131A2A4AD4775D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:89:24:15:7d:45:24:31:20:bc:ec:89:16:
9a:fa:d6:22:2b:76:38:e1:7a:72:21:07:12:e5:29:
d7:83:2a:ac:64:bc:74:70:10:dc:a1:c9:66:8c:ee:
b6:55:c9:0d:32:48:b5:2d:5a:5d:bf:0f:c6:20:8a:
c6:dd:14:ba:00:ba:40:77:06:2d:45:05:3f:2a:51:
1c:88:06:22:e6:37:89:50:2c:5b:4f:7f:69:d7:f9:
a1:04:34:41:82:72:bd:dd:fd:65:33:ee:b7:8f:a2:
4d:5e:e2:da:2a:86:9b:10:38:25:f6:47:48:9d:ab:
48:bf:0b:c2:60:60:f0:8c:8b:f4:31:d3:5a:cd:ce:
23:bb:88:f4:43:d3:57:8e:b7:fe:a6:fd:88:bb:0e:
0b:84:d0:32:b6:55:c5:e1:6c:d0:86:7e:02:8e:45:
84:22:5b:75:d3:ed:fb:3d:8e:85:f3:9a:4c:7f:70:
72:b9:b4:c2:4a:6b:e3:9b:20:b3:f4:85:4a:dd:5e:
cb:be:e4:30:80:50:cc:77:c0:fe:4d:de:91:56:cf:
92:c0:2e:dd:af:f2:39:73:82:60:79:49:c0:08:ce:
6c:4b:f2:bb:01:05:99:0c:f7:ea:37:98:89:b9:4e:
07:0a:75:9e:d7:cb:3a:24:13:9f:19:9a:c9:4c:ca:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:A6:25:9A:98:78:54:D4:6F:90:E0:15:13:1A:2A:4A:D4:77:5D
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/mISmJZqYeFTUb5DgFRMaKkrUd10.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1b:e2:10:75:2c:81:df:1b:ea:86:3f:ef:92:ce:b0:31:2f:
26:0e:d5:93:33:b4:29:9c:94:92:fa:34:c9:22:e0:95:43:9f:
2f:f3:b0:72:7a:63:e9:df:ee:91:dc:49:5d:b7:11:be:47:4b:
02:ac:d6:20:9a:05:6d:32:c5:16:e9:9f:83:c2:4e:18:81:44:
48:b7:da:0d:21:6f:ac:bc:70:bd:59:f1:81:95:be:53:b3:a0:
90:06:b1:3f:19:bf:d8:0c:f8:0b:c1:96:aa:4a:16:ca:e1:36:
fe:17:82:21:e1:14:25:e6:ae:e5:8b:aa:34:83:23:d9:57:f2:
c3:d0:90:9b:42:14:1d:70:41:2c:6a:ad:20:e9:11:cf:57:80:
e0:fb:38:f3:3b:a0:4c:86:41:09:d5:c1:fb:b3:f1:d6:e5:b0:
f9:0f:72:8a:69:ee:67:09:74:fe:53:5e:60:6c:51:37:28:c6:
53:a1:f0:b9:bc:77:e3:59:cd:ec:c8:37:fb:02:bd:03:0a:4a:
8b:74:84:70:63:e5:98:8a:aa:c0:ab:98:b1:41:9c:4c:78:51:
5c:d8:30:d9:13:2f:02:11:87:6a:9c:7e:e8:74:73:ca:fb:db:
b4:bd:8d:82:29:a2:7d:a2:21:2b:e8:6e:85:d3:0a:dd:c8:ed:
31:41:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org