Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kYme3wcWtVzyW-MWa3WJ0Zbfcxo.roa
File: kYme3wcWtVzyW-MWa3WJ0Zbfcxo.roa (raw, json)
Hash identifier: HspfQRvFP327aJRviVH1qtTnNKE0KMee7s3H7yt1v8c=
Subject key identifier: 91:89:9E:DF:07:16:B5:5C:F2:5B:E3:16:6B:75:89:D1:96:DF:73:1A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BDB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kYme3wcWtVzyW-MWa3WJ0Zbfcxo.roa
Signing time: Sun 07 Feb 2021 11:34:06 +0000
ROA not before: Sun 07 Feb 2021 11:34:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.200.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3035 (0xbdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=91899EDF0716B55CF25BE3166B7589D196DF731A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:12:50:5b:50:c3:b9:66:db:31:37:5f:d0:
20:9a:dd:2d:0f:7a:ff:c3:0f:09:74:a4:dd:b6:c6:
18:a9:91:a8:d7:6f:b8:db:b9:53:84:7d:75:ad:c4:
c8:45:0a:b2:9d:57:29:04:65:3d:ad:f9:d7:7e:1d:
ec:b6:d4:8d:d8:f8:08:2e:66:13:16:c2:ca:4e:da:
39:95:ef:f2:23:96:ac:bd:98:18:93:68:e3:3b:85:
82:ba:cc:d3:8a:bc:41:77:28:d0:95:ab:14:f7:c5:
77:90:1a:bc:db:e6:44:86:a3:24:9e:db:f9:61:83:
18:9a:95:3d:d3:c4:83:55:db:b4:4b:ab:6d:37:1d:
e8:12:4a:f0:49:72:a0:bb:59:1b:05:13:c9:c3:f9:
9b:6f:56:eb:b3:04:91:49:06:67:9d:bc:7b:ce:c7:
11:bf:7a:61:79:b0:66:fc:9e:9f:7b:c1:1e:9c:87:
a1:a9:d0:36:93:22:94:27:ec:16:90:89:5a:6d:8d:
82:bf:a2:9c:e6:52:5b:28:7b:d3:4c:d6:bc:56:dd:
0e:d8:3c:21:0e:2f:3b:db:1e:db:e8:66:28:d8:d8:
bd:96:d1:ea:46:8c:e4:eb:ac:3d:c2:23:de:60:34:
f8:c8:26:58:7c:01:65:f5:60:1c:7c:6b:5a:f0:24:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:9E:DF:07:16:B5:5C:F2:5B:E3:16:6B:75:89:D1:96:DF:73:1A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kYme3wcWtVzyW-MWa3WJ0Zbfcxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:30:12:d9:24:71:2c:41:10:0f:9a:2f:e9:c8:ed:8a:36:1f:
9f:0a:fb:b9:1b:de:94:cd:6b:63:08:d5:d0:6f:1b:6e:25:f4:
b0:68:41:5e:14:c2:2b:29:65:40:4e:41:40:cd:f1:c5:62:90:
bf:f5:1a:b2:7b:4c:d0:50:ae:c7:ca:21:31:81:2e:76:30:9d:
48:4d:88:7f:c9:50:c5:ec:18:65:26:01:2a:e5:40:0d:c6:2d:
2e:22:2a:23:f5:11:34:6d:b8:d2:d4:fd:74:a5:d3:04:d1:55:
5f:83:3f:af:59:eb:3e:d5:62:ab:82:78:69:e8:15:e5:4c:61:
b3:bd:c0:56:61:66:e0:d7:e7:bd:06:35:51:6e:63:7d:b0:d0:
fd:ca:cf:b9:da:fd:a5:a7:85:d5:a8:b0:04:82:ab:af:13:df:
17:1e:4e:bc:23:ea:6e:e0:9c:cd:4b:7f:40:e2:83:a3:b0:f8:
50:b5:4b:55:63:00:40:6b:4a:3c:9d:b1:e4:de:d4:be:97:5b:
92:82:44:74:a6:55:eb:5b:09:7f:de:2e:11:0b:8f:42:7e:d5:
56:08:4c:fd:89:25:41:8a:45:3f:08:03:07:44:e3:c0:d2:9e:
27:7e:02:a4:6d:f0:39:fa:83:c4:ea:d2:ac:26:07:28:52:4f:
9f:60:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-fra.rpki-client.org