Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/aEdN7ZgIXx0QmTwMCWbMqfvk3as.roa
File: aEdN7ZgIXx0QmTwMCWbMqfvk3as.roa (raw, json)
Hash identifier: aWtDBAu5XTnVdZT+W69iY1uWMV/Txmjtm1bkBdrx82k=
Subject key identifier: 68:47:4D:ED:98:08:5F:1D:10:99:3C:0C:09:66:CC:A9:FB:E4:DD:AB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BC1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/aEdN7ZgIXx0QmTwMCWbMqfvk3as.roa
Signing time: Sun 07 Feb 2021 11:33:47 +0000
ROA not before: Sun 07 Feb 2021 11:33:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 203.79.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3009 (0xbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=68474DED98085F1D10993C0C0966CCA9FBE4DDAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:59:c5:6b:ce:74:cc:7f:26:14:86:bd:f6:
29:3d:0c:c2:28:02:e7:76:37:25:85:4f:1b:e6:42:
b8:1f:d5:4e:3f:2e:5b:a5:e2:75:5d:4c:d2:97:8a:
4c:c3:57:5d:aa:34:35:4d:c4:e9:5c:c0:4f:1c:fb:
1c:00:6f:a6:0f:18:d4:c6:39:5d:55:c4:5a:86:ac:
f7:ab:9d:9a:a1:a2:83:a3:7f:e4:9d:cb:15:9a:fd:
db:23:4b:92:fe:e8:ba:b1:83:52:32:1c:f7:33:64:
99:90:bf:2b:93:17:75:78:ee:92:60:e5:08:fb:e6:
a5:a0:40:d0:64:28:6c:8d:e1:64:f4:dc:7e:ca:e9:
f0:c4:0c:94:2d:3a:1a:00:27:a4:fd:51:56:3c:a0:
86:fb:a9:be:0a:cb:34:e8:02:3a:94:15:cf:9a:fe:
37:06:07:e3:42:4b:f8:ff:ec:f6:ef:05:f4:52:6e:
92:70:56:59:bc:c2:2f:af:12:30:33:f8:9d:b3:d8:
ca:49:f4:ac:9a:a0:2f:aa:00:bf:17:95:78:c9:ac:
b9:67:fc:99:a8:c5:b6:29:ec:c6:9b:93:cf:61:e3:
11:ff:ef:35:23:c1:11:19:2d:6c:74:3f:3c:44:9c:
0e:70:63:6e:18:b9:95:39:3c:8e:a7:b0:41:21:4b:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:4D:ED:98:08:5F:1D:10:99:3C:0C:09:66:CC:A9:FB:E4:DD:AB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/aEdN7ZgIXx0QmTwMCWbMqfvk3as.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:02:93:1b:8e:62:c8:a4:5d:f3:89:5a:38:cb:f2:07:2c:ed:
ed:11:0b:61:10:ca:20:f2:05:e7:43:56:9b:fe:ae:a4:8f:18:
9d:b0:1d:5e:e6:46:fa:de:73:eb:3f:31:ed:2e:ce:de:ff:67:
ec:09:1c:c2:29:1c:7e:70:34:f3:52:bf:d4:0e:18:79:fd:ae:
3f:5c:d0:1a:ae:be:d6:1d:8f:f3:a1:10:c3:45:d1:b9:64:20:
1e:60:09:8b:0b:72:4d:17:97:ba:d7:20:0a:4f:cb:5c:ea:6b:
ef:df:d3:2c:5d:d1:40:ec:8c:21:61:68:8a:4d:4c:e6:ba:b0:
b8:ad:b9:d0:5d:2a:9c:ec:21:2c:46:94:2f:19:2e:31:ff:a6:
e6:70:bf:91:69:c0:47:12:2c:24:bc:73:89:54:54:f9:21:f0:
fa:1b:b5:d4:bd:4c:db:42:38:7d:53:e8:bd:f9:9c:a4:87:2b:
b6:12:d9:d1:49:25:f8:b6:d0:00:fa:8b:8f:fe:ea:30:30:69:
dc:90:62:c7:66:95:be:b8:01:9b:f3:36:08:dd:27:cd:f4:a9:
dd:e4:ef:50:6c:6a:40:af:fc:2e:f4:53:6f:62:b0:8c:3e:7b:
59:14:85:25:a0:87:1d:be:b8:45:6a:e5:8d:d2:c0:fb:bd:b4:
e0:5c:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org