Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/OnlFv_jq2A8cANLVRRiiTlTT694.roa
File: OnlFv_jq2A8cANLVRRiiTlTT694.roa (raw, json)
Hash identifier: F1VIaJQJmYCkehoVD3z58sQjWeCkhqwPPaTImg6xvwA=
Subject key identifier: 3A:79:45:BF:F8:EA:D8:0F:1C:00:D2:D5:45:18:A2:4E:54:D3:EB:DE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CD1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OnlFv_jq2A8cANLVRRiiTlTT694.roa
Signing time: Sun 07 Feb 2021 13:00:32 +0000
ROA not before: Sun 07 Feb 2021 13:00:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 13:00:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3A7945BFF8EAD80F1C00D2D54518A24E54D3EBDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:08:3e:61:a8:0c:5a:5f:43:b9:16:68:b8:
53:b2:2e:e0:88:ee:c8:85:f6:61:fe:0c:0a:42:72:
2a:93:69:a2:09:a4:d9:82:7a:27:14:88:45:ed:0e:
71:06:c2:46:5d:8b:5d:2d:85:7b:ea:8c:ab:92:69:
74:c5:89:fb:2c:89:4d:b5:8e:83:3f:0a:e4:68:ac:
0d:66:ed:10:87:d4:c0:a4:41:8b:99:19:f6:e3:06:
0e:7d:ec:04:05:3c:67:a8:5b:b0:ac:9c:bc:e7:34:
e3:b3:20:61:d1:a7:f3:57:e4:d3:8e:f7:ce:87:e0:
12:22:53:36:82:09:8c:f0:30:92:c1:c4:a5:f3:1f:
30:6a:a6:78:30:6d:66:c0:18:7b:42:91:1c:25:18:
4c:dc:11:0b:5a:6b:9b:56:0b:a9:7a:24:1f:e5:b8:
69:3b:a2:0e:23:8e:60:2a:d4:07:0e:1f:7b:5d:32:
2e:2c:76:42:79:f5:95:15:7a:78:80:bf:f4:cd:97:
06:75:6c:7c:46:b6:8d:03:ca:95:ac:c8:03:39:fe:
b5:76:b6:30:75:a2:aa:41:be:f7:3f:87:54:c1:0d:
bc:58:31:96:eb:76:d3:b1:35:b5:e2:89:69:ed:6a:
36:6e:66:7e:0d:2b:66:34:6b:41:85:8a:ab:0b:b1:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:45:BF:F8:EA:D8:0F:1C:00:D2:D5:45:18:A2:4E:54:D3:EB:DE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OnlFv_jq2A8cANLVRRiiTlTT694.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.216.0/22
Signature Algorithm: sha256WithRSAEncryption
56:1b:37:03:42:43:59:8a:a4:0a:f3:1a:5e:1b:b0:90:57:04:
89:11:01:09:8e:54:5e:f0:c0:c6:e8:14:e3:ab:3e:f5:55:ee:
5d:1c:5e:fc:79:30:48:8f:0e:58:94:8b:13:bb:95:93:02:48:
85:c3:63:50:c0:1d:14:cf:c8:63:8e:9b:46:0c:64:d0:43:8c:
50:71:2c:b7:bc:68:36:92:aa:96:cd:10:d3:e2:15:75:6b:76:
bd:e4:4c:65:06:43:4d:3a:29:84:e6:71:d2:55:08:92:b3:af:
8e:24:66:3a:db:37:38:73:1d:cf:ee:51:db:af:82:6d:de:37:
81:62:34:7d:02:a6:74:d5:e2:d2:4b:d9:27:b8:5d:2e:07:3b:
04:87:43:f1:37:44:27:77:02:19:fe:13:8f:b0:ab:15:2e:20:
bc:2a:6e:ba:a6:68:62:22:05:f9:68:8b:e9:83:3e:50:aa:ab:
81:3d:ba:46:ba:27:3e:16:5b:11:5f:20:0f:64:2c:8c:b4:d3:
eb:05:43:d9:b5:b2:46:97:d3:1d:c7:00:e2:d0:24:66:da:65:
6b:89:9a:15:e8:64:12:41:40:9d:0d:c1:f3:c0:ae:da:e9:98:
c2:a2:15:c2:bc:a7:e4:b0:9c:f8:25:72:21:81:ca:3a:30:f2:
c1:e6:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org