Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IBoeQjUraifiRrfzsVmXHh-R7gs.roa
File: IBoeQjUraifiRrfzsVmXHh-R7gs.roa (raw, json)
Hash identifier: jbZz/S/g3kaZyKXy3O1PoLzJL2YkLgaHKLi/pjqAr5M=
Subject key identifier: 20:1A:1E:42:35:2B:6A:27:E2:46:B7:F3:B1:59:97:1E:1F:91:EE:0B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CBB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IBoeQjUraifiRrfzsVmXHh-R7gs.roa
Signing time: Sun 07 Feb 2021 12:48:07 +0000
ROA not before: Sun 07 Feb 2021 12:48:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131597
IP address blocks: 218.35.64.0/19 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3259 (0xcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 12:48:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=201A1E42352B6A27E246B7F3B159971E1F91EE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:00:b1:7c:68:c6:61:bd:b7:f3:db:c1:b4:a6:
3e:73:15:ad:23:f7:8b:b1:b4:9d:5d:91:72:ca:0d:
c0:03:21:5e:63:85:e7:0b:82:9e:2d:3e:88:80:08:
2b:e2:01:3e:6c:3e:5c:25:cd:09:00:70:40:02:c6:
50:f2:a7:84:e0:13:78:df:fd:73:7a:d6:fb:20:4e:
3a:3a:c0:fa:b8:32:e4:6d:60:6d:c3:ba:53:60:6d:
da:33:ad:ed:26:15:fa:4d:aa:1c:85:71:07:05:bf:
5d:a2:e0:28:fa:b4:4c:ad:b7:bc:34:1e:85:2e:c2:
b8:59:b5:82:3f:67:a6:c2:90:aa:08:22:2a:84:da:
96:16:3d:80:7e:0d:76:cd:e8:15:5a:17:92:3f:fa:
10:61:f0:64:42:4d:7d:b1:8c:23:64:71:87:7b:41:
5f:3c:f6:29:01:73:c2:7f:ac:34:e1:5a:8d:77:df:
d6:a9:df:1a:38:ab:c8:2c:10:6c:ee:b9:72:e9:e2:
bb:33:63:00:53:8a:14:c8:de:a6:32:13:cb:b8:dd:
da:ef:50:80:73:c9:5c:3c:ad:f9:5d:be:11:4d:9b:
bf:41:d4:cc:1e:d6:c4:62:3c:ef:29:15:b0:37:aa:
cf:b6:bf:3d:a3:48:ef:13:33:1e:8b:12:f7:d9:5e:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:1E:42:35:2B:6A:27:E2:46:B7:F3:B1:59:97:1E:1F:91:EE:0B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IBoeQjUraifiRrfzsVmXHh-R7gs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.64.0/19
Signature Algorithm: sha256WithRSAEncryption
94:20:5d:12:81:3b:a5:e4:aa:0b:fc:38:83:ef:f2:07:05:bf:
87:73:bc:25:75:15:aa:0f:d6:c3:ed:87:04:4f:fd:1b:7c:c1:
42:dd:9c:f4:06:97:5c:d1:fb:51:df:aa:ae:04:db:ed:8c:f7:
b5:d5:0e:5a:8f:60:ff:83:79:28:37:7a:64:5d:f2:8e:06:56:
d3:2d:46:34:3f:14:22:56:4d:55:d5:3f:7d:2f:a0:94:43:be:
bd:b1:4f:f1:68:b5:ae:4b:01:49:9a:70:ee:f4:e4:fd:f4:46:
1a:2c:16:ce:8a:6c:43:c8:df:0e:50:ae:b9:e0:bc:fa:2d:e3:
b0:ff:41:2e:a7:3b:c0:49:5f:7b:cc:2d:aa:b8:22:9b:e8:88:
96:cc:76:44:6a:5f:59:f7:98:72:09:b4:13:a4:61:cc:07:9c:
28:b4:f1:71:cb:0c:39:05:05:cb:a1:ff:00:de:97:7f:d7:1b:
d1:f5:78:c9:8e:61:2c:11:91:05:3b:c8:7f:5c:b6:bd:2b:55:
d1:f2:34:92:cc:29:b8:9f:ea:63:d4:3c:6a:e8:aa:cc:73:17:
00:2a:3b:0a:56:c3:db:ba:9e:82:5c:92:47:00:97:1f:36:a7:
c4:8f:12:d9:09:41:d7:b3:c9:d0:ab:97:14:da:3b:60:01:ff:
41:ba:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org