Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ShlMt9UmJ8JnEDcbERT9W7Fmd1k.roa
File: ShlMt9UmJ8JnEDcbERT9W7Fmd1k.roa (raw, json)
Hash identifier: yPx43dGO/EnaLjoz+ptFkgr2Fq192bzI+de5YUFZmCQ=
Subject key identifier: 4A:19:4C:B7:D5:26:27:C2:67:10:37:1B:11:14:FD:5B:B1:66:77:59
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0965
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ShlMt9UmJ8JnEDcbERT9W7Fmd1k.roa
Signing time: Tue 29 Sep 2020 10:01:47 +0000
ROA not before: Tue 29 Sep 2020 10:01:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.63.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2405 (0x965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A194CB7D52627C26710371B1114FD5BB1667759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:ba:3d:32:7d:11:3c:6b:6f:24:a5:64:b1:
78:3d:c6:74:8b:61:4f:d0:c6:05:b8:2e:a2:df:d8:
ee:70:24:1b:fe:3f:5c:1f:7d:0f:9a:c5:10:42:81:
05:fe:ca:0a:12:d2:87:13:31:92:9b:dd:4d:e6:24:
9d:21:6a:9e:9a:1f:ff:d8:7b:0d:6b:6e:28:25:5f:
6c:1a:87:5b:d7:fb:4a:9b:5f:6a:6f:1c:97:96:1d:
31:77:d3:96:72:95:de:3d:03:fe:cf:3f:48:41:5a:
8e:8e:5e:5a:11:31:67:fa:98:4f:b9:f9:a2:1f:0b:
c4:80:51:c5:ec:c6:2c:83:ba:a3:1b:59:7e:23:3f:
52:9e:83:ca:b9:6e:b4:b4:27:78:65:34:88:a2:84:
3a:d4:5c:5d:9e:96:bd:10:e3:7b:35:32:9b:e2:17:
8c:33:1b:32:75:62:25:53:98:97:29:57:d5:3c:76:
73:22:b9:61:68:78:13:4f:b5:48:ff:c4:6f:a8:e4:
63:b7:5e:a3:e4:e6:4a:f1:dd:ae:b4:c7:71:9a:74:
ce:3d:1b:7a:ec:bd:0e:18:15:d8:40:df:8a:ef:28:
e6:1f:1d:a3:dc:40:82:35:9b:4a:b6:ee:ec:d7:9f:
b0:d1:48:96:20:e7:ea:4b:03:f3:4b:a0:61:60:87:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:4C:B7:D5:26:27:C2:67:10:37:1B:11:14:FD:5B:B1:66:77:59
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ShlMt9UmJ8JnEDcbERT9W7Fmd1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.192.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:18:2e:7c:cc:02:a5:5d:dd:f8:33:60:c5:08:64:3f:a7:97:
9b:8c:2b:ff:22:a9:06:f7:9f:7f:29:fd:2a:04:0b:be:07:f8:
a2:53:04:3f:87:cf:35:86:e0:fb:cc:e8:57:2b:58:c6:82:f8:
46:ea:49:8c:53:de:fd:be:b4:52:5c:49:2e:44:a0:52:29:9b:
0d:ac:44:25:b4:c7:08:60:1f:c2:d2:82:d1:46:b7:e3:6f:f6:
41:89:80:ff:b4:40:7f:ae:b3:e9:89:d4:9d:9a:29:12:2b:b0:
b4:81:8a:09:3b:6c:2b:6b:20:79:08:55:76:8c:b6:13:07:27:
22:0a:0c:88:14:4f:37:e8:39:1d:fb:7a:ab:e8:4b:54:9b:78:
a0:3a:6b:34:0a:73:b2:e7:a6:f8:73:e3:e8:3b:57:21:d0:99:
26:56:05:c5:1e:a3:48:b5:15:7b:4e:4d:d5:37:5e:88:b6:a1:
04:2b:b8:81:60:08:43:40:cc:5f:65:cf:f2:9c:c3:ce:9f:00:
6c:5b:8b:8d:ef:2a:c3:c7:24:2d:74:f8:af:1a:56:08:83:40:
8c:57:19:8b:de:b4:e4:3f:f1:c8:db:5a:2d:a3:d0:96:49:9a:
bb:d3:f2:7f:35:2f:87:f3:21:ea:a4:60:1b:f2:0c:ff:69:26:
5e:1e:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org