Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tvvQVbduc5AbQFctw1eqweq9eGs.roa
File: tvvQVbduc5AbQFctw1eqweq9eGs.roa (raw, json)
Hash identifier: LxZLU72rTaOTYDRGFCP/mMGG62lygYWeEnj1qn7IypM=
Subject key identifier: B6:FB:D0:55:B7:6E:73:90:1B:40:57:2D:C3:57:AA:C1:EA:BD:78:6B
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tvvQVbduc5AbQFctw1eqweq9eGs.roa
Signing time: Thu 15 Sep 2022 02:37:44 +0000
ROA not before: Thu 15 Sep 2022 02:37:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 61.56.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6FBD055B76E73901B40572DC357AAC1EABD786B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:e5:bf:2b:c8:3c:d1:c6:bf:81:ca:ac:1a:
5c:4b:a4:5e:72:f6:86:36:29:dd:27:5a:2a:21:03:
9d:a1:a7:ed:08:4b:7c:4d:02:c4:3a:e4:09:c6:ec:
e3:ab:d8:ce:dd:9f:56:ae:60:5e:01:bf:9f:d9:8b:
b0:d4:29:5c:38:77:82:ce:12:1e:95:54:5e:58:29:
30:13:fc:90:a9:53:eb:ee:ba:3c:e8:f6:48:19:dd:
a8:26:f4:0a:07:e7:69:74:48:db:4a:bc:92:2a:03:
f5:e9:c6:9d:d3:8e:93:ac:50:d3:16:e6:09:2e:b9:
4b:41:c0:26:fa:97:38:89:30:fc:af:a8:77:37:12:
51:1f:fd:ed:0f:8d:dd:36:1a:8c:4b:ee:ef:e6:4b:
b9:06:ca:69:6e:b3:72:c4:ac:8d:56:73:e4:8b:e6:
71:47:62:7a:ad:f9:63:b5:f2:8e:38:77:6c:99:10:
a5:5e:f1:58:9d:ce:fd:cf:13:5a:9e:5a:6d:fa:0f:
a1:96:46:86:23:c0:17:f8:98:80:d2:bf:74:1f:f1:
04:df:68:0e:04:25:9a:48:31:32:f5:b4:2d:a6:0f:
00:52:46:67:13:8f:3e:7f:32:f9:60:ac:04:fc:45:
c5:c5:6d:01:4c:ad:c9:20:bc:88:47:95:ea:df:94:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:D0:55:B7:6E:73:90:1B:40:57:2D:C3:57:AA:C1:EA:BD:78:6B
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tvvQVbduc5AbQFctw1eqweq9eGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.88.0/21
Signature Algorithm: sha256WithRSAEncryption
79:83:e8:93:68:f6:44:8d:a7:bd:ec:d5:b8:da:ed:10:1e:b8:
0c:77:8c:0e:07:0d:1c:7e:65:3b:e2:42:42:6f:71:02:68:dc:
d4:e5:cb:b5:0f:de:c3:db:08:61:10:0c:a1:d3:71:1d:cc:01:
75:a8:40:5c:ea:6d:ec:cc:31:11:57:c1:8b:f2:8c:05:81:cd:
66:52:b1:e6:a6:17:f0:cb:99:c5:b8:79:33:28:f5:05:53:f3:
6d:a0:af:07:cf:18:52:09:e4:36:17:fb:09:78:2b:12:ac:c4:
f7:cc:6a:e4:3d:22:87:95:9a:30:d8:c9:87:23:fc:1c:fd:50:
0a:94:28:74:05:f2:99:2a:7b:d1:7e:58:85:b2:a9:ee:25:8f:
6a:13:b0:02:87:82:93:7e:99:3b:79:16:8c:59:97:06:0e:ac:
5f:1b:8c:77:4b:dc:75:4f:8a:31:fc:63:0f:d6:ca:94:d5:d2:
41:39:0a:07:1f:a4:b8:e3:d5:07:a8:38:d8:fb:85:f6:95:0e:
36:6c:68:3c:9f:26:35:8b:a0:8c:3e:7e:a2:78:9e:81:81:e4:
5b:19:bf:d8:f7:10:84:c7:41:bf:ff:84:82:d7:27:d2:e9:1a:
09:38:06:cc:31:70:7a:3e:74:11:a1:68:65:44:68:8a:31:a3:
92:33:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org