Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/SQxhgzD1drWnbbUY8t8YMO8Qn08.roa
File: SQxhgzD1drWnbbUY8t8YMO8Qn08.roa (raw, json)
Hash identifier: 7xHgE5iqe94vT8kSlpQdHbYvyiG5qH3kqpSP2itWKbU=
Subject key identifier: 49:0C:61:83:30:F5:76:B5:A7:6D:B5:18:F2:DF:18:30:EF:10:9F:4F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C1F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SQxhgzD1drWnbbUY8t8YMO8Qn08.roa
Signing time: Sun 07 Feb 2021 11:34:58 +0000
ROA not before: Sun 07 Feb 2021 11:34:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=490C618330F576B5A76DB518F2DF1830EF109F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:1e:87:5a:a5:74:83:8b:65:df:38:51:9a:
ac:c8:27:f1:5d:23:af:56:9e:0c:0c:86:91:3b:fd:
fb:de:d2:e4:02:f1:ad:94:9a:f9:a7:8b:f2:37:91:
43:4d:74:51:ed:e1:10:cc:76:cd:aa:ad:d0:b1:f5:
99:a9:98:aa:72:82:ed:14:9d:75:44:05:d4:c6:79:
12:31:66:4f:b9:f7:81:2c:97:f5:3d:23:c3:85:4a:
d5:15:20:79:26:00:44:da:a2:ab:0a:eb:9e:8b:cd:
c1:ef:74:60:40:d9:86:00:bf:e7:f1:e6:3d:c1:b1:
05:47:40:82:07:65:5b:41:cf:ab:b4:df:8b:d6:92:
76:8a:35:3b:fa:f3:b0:bd:10:a0:26:4d:c8:18:c3:
16:f2:b9:3c:6e:bc:d3:da:33:3b:82:b0:b7:a6:1e:
28:84:ed:a9:22:8a:ce:8a:45:5c:fc:65:8c:94:4f:
0a:fc:df:8d:63:1e:97:31:98:dd:5a:d2:04:d6:05:
ec:1b:90:47:1d:36:ff:e3:d9:5d:ee:9c:5a:f6:f9:
da:48:fd:63:0b:f0:fe:d7:41:d3:00:76:dd:8b:b7:
b0:2b:eb:e0:d0:47:45:76:56:7d:31:71:6f:9e:13:
a4:2c:9e:ab:5c:b1:be:73:fd:07:a5:e8:11:cf:39:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:61:83:30:F5:76:B5:A7:6D:B5:18:F2:DF:18:30:EF:10:9F:4F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SQxhgzD1drWnbbUY8t8YMO8Qn08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
27:db:39:bc:8f:c0:b7:f9:ab:3e:77:e3:74:e9:11:a4:39:6f:
71:cc:02:ab:35:07:17:4c:ba:8e:6a:e1:e4:3f:61:1b:d9:bc:
86:68:42:8b:d6:b5:ef:78:cf:90:fb:ca:14:61:ff:95:2e:29:
aa:0f:8b:e1:df:4b:79:3d:b2:d4:31:a9:54:2d:5e:6e:76:1c:
a7:ad:32:8a:0a:19:92:ed:ae:16:58:c1:2d:62:16:23:8a:3b:
54:1f:cb:71:81:ec:a0:ea:44:0a:d1:0c:05:50:d0:21:c5:b5:
c4:c2:53:87:7e:12:d2:88:95:e2:7b:2a:00:38:05:9d:77:14:
77:3e:49:ad:9a:c8:be:80:50:e9:00:93:1f:3f:a9:95:a3:ed:
6f:b6:5f:e4:8d:8c:2c:9d:08:67:56:fd:21:93:b5:dc:56:55:
a8:59:b2:c1:37:76:d1:72:ad:9c:23:fa:4b:7f:b2:8c:30:3e:
e1:21:11:95:be:f7:61:cf:73:39:b1:7e:c6:5e:da:34:8e:e8:
17:9e:1d:c2:b3:da:46:fa:23:79:00:47:86:3b:8f:09:54:9b:
27:da:33:44:45:ff:00:e4:a1:a6:8a:e0:a3:5e:a1:0c:1c:42:
20:48:d9:98:02:cb:30:2d:9f:0b:e3:8a:6b:13:cf:07:27:de:
ae:5a:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org