Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-TEnuu5KllCc_Si3TBOuecZLkdM.roa
File: -TEnuu5KllCc_Si3TBOuecZLkdM.roa (raw, json)
Hash identifier: vWnnHjb9hqSptHKSZzOIs/bBaeX49SxkmlVK1ZIFW6k=
Subject key identifier: F9:31:27:BA:EE:4A:96:50:9C:FD:28:B7:4C:13:AE:79:C6:4B:91:D3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C37
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-TEnuu5KllCc_Si3TBOuecZLkdM.roa
Signing time: Sun 07 Feb 2021 11:35:18 +0000
ROA not before: Sun 07 Feb 2021 11:35:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.63.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F93127BAEE4A96509CFD28B74C13AE79C64B91D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:d5:68:2e:02:bf:05:50:bf:5b:d5:2f:36:
49:fa:d2:e9:38:11:de:16:bd:e7:25:d6:08:e0:3c:
96:17:5e:b0:b5:17:fe:53:a4:0c:c6:cc:ed:91:e1:
49:e7:96:f1:46:52:cf:fa:38:fb:d9:b2:01:8a:ef:
61:d0:19:b0:a0:84:4e:2d:98:19:6b:84:c1:1a:0d:
92:68:a5:f4:d4:77:6d:15:ed:07:11:2a:01:19:fa:
51:26:98:1b:e2:65:44:4f:43:2b:c8:fb:07:4b:2e:
c4:e5:14:cd:58:59:15:25:eb:ef:96:07:66:3c:14:
27:a6:39:a8:53:5c:32:bc:aa:05:a0:9e:94:c8:9e:
71:12:96:c5:b5:c6:7b:d9:87:76:37:0a:1a:92:aa:
af:c1:e7:2e:9a:1f:09:ba:56:82:7d:12:45:31:0c:
41:4f:60:d3:93:c4:52:f8:46:64:c5:d0:8e:17:0d:
bc:16:1b:9b:4d:d3:6d:e3:8f:b8:82:61:23:93:4a:
ce:45:60:d7:bd:2c:e7:30:ec:5a:70:15:ba:93:4a:
59:ff:04:bc:32:88:56:34:91:bb:66:40:b6:7d:03:
9b:d3:18:4d:a3:4e:16:72:ef:d4:07:b5:df:48:35:
af:c4:82:7d:7d:59:4b:26:7c:56:53:2a:be:2c:5f:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:27:BA:EE:4A:96:50:9C:FD:28:B7:4C:13:AE:79:C6:4B:91:D3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-TEnuu5KllCc_Si3TBOuecZLkdM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:19:39:50:f3:64:e1:83:81:91:40:4e:86:5f:90:2a:80:16:
43:7a:b9:76:4f:f8:9b:3f:b0:80:34:ea:65:5a:32:a0:cf:6d:
d5:e9:25:2d:f7:04:80:11:d6:2d:28:f0:9a:97:e2:bf:07:40:
b4:4e:3f:3f:97:9d:3e:f1:4c:f2:3d:bc:a7:7a:a5:11:cb:9a:
65:51:32:e6:2a:2f:2f:8b:92:c7:30:da:40:a1:e2:58:a6:cd:
3f:24:e8:87:f3:9a:0a:31:60:66:93:33:12:5d:31:c7:18:07:
5b:9c:a3:82:1f:59:56:5b:f7:40:e5:16:23:49:26:a0:17:3d:
51:b0:69:be:7b:7e:48:6f:b1:d6:da:f6:74:cc:17:d0:c9:7a:
fc:85:33:b9:b2:bf:ab:28:9b:41:02:81:96:6f:e8:78:81:ac:
4d:ab:78:dd:e2:23:1a:d2:43:52:48:b5:1f:35:b0:43:b8:ff:
6c:ca:5a:80:39:d4:ba:c6:c5:9c:34:fd:c9:04:f3:4c:60:94:
cd:e4:4e:f6:ca:62:a8:99:df:18:6d:c5:65:04:5f:38:78:33:
34:fb:55:42:bd:f5:a8:6c:85:85:2d:10:56:bc:01:35:e5:12:
e9:8b:50:07:49:64:13:d2:2f:a9:ec:eb:85:fd:ca:f5:c2:7b:
ad:6f:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:43 2023 by rpki-client on console-ams.rpki-client.org