Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ymIX9he_n-MccEeNuNIs51b_oj8.roa
File: ymIX9he_n-MccEeNuNIs51b_oj8.roa (raw, json)
Hash identifier: /RvpaSfXFEJqq+gart8V4NGmmoxSN+1L603gC1J2bYo=
Subject key identifier: CA:62:17:F6:17:BF:9F:E3:1C:70:47:8D:B8:D2:2C:E7:56:FF:A2:3F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CAF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ymIX9he_n-MccEeNuNIs51b_oj8.roa
Signing time: Sun 07 Feb 2021 12:43:17 +0000
ROA not before: Sun 07 Feb 2021 12:43:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 22787
IP address blocks: 210.58.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 12:43:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA6217F617BF9FE31C70478DB8D22CE756FFA23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:86:c5:df:45:2a:a6:de:e2:7a:8d:9a:2f:
c7:53:9e:f5:89:f1:62:0d:83:06:a6:10:ac:59:35:
f9:a6:df:43:fe:ff:8c:ec:0c:f3:7f:6c:20:8a:9f:
5a:a4:fb:6e:72:cd:2c:63:95:d5:25:60:08:c5:1d:
f1:84:86:56:3e:77:19:4a:28:d9:6c:52:65:e3:a8:
ac:2d:32:7b:90:78:b9:bc:ed:07:35:68:33:87:95:
ec:d5:c9:37:dc:82:5a:7f:e8:76:15:b9:28:8f:12:
eb:1f:e7:6c:38:0d:a9:33:d9:08:c8:a9:0a:9d:88:
59:68:97:3b:f0:8f:11:7d:ee:7c:dc:3e:c2:33:2e:
fa:6d:37:70:0e:76:a5:4b:e0:e0:5d:8e:3c:07:6c:
39:4d:c8:14:67:1a:c6:8c:86:a8:56:a1:21:be:5f:
46:48:1a:99:61:ab:1e:c1:c7:26:34:e9:d8:c0:4b:
61:5d:71:14:05:ff:f4:f7:e9:64:5e:c1:89:74:a1:
33:57:43:7e:a8:70:7c:ff:91:ae:a3:55:26:21:aa:
bb:18:41:58:df:e8:1a:18:88:af:79:2f:ed:6b:4e:
9f:0d:1a:da:e1:e1:d0:e5:da:36:96:fd:83:b3:86:
57:21:0f:85:13:e5:7d:b0:0d:e4:b6:fb:e6:44:76:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:62:17:F6:17:BF:9F:E3:1C:70:47:8D:B8:D2:2C:E7:56:FF:A2:3F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ymIX9he_n-MccEeNuNIs51b_oj8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.90.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6a:17:48:25:7b:c6:2e:2a:6b:61:89:74:1a:fc:08:59:0c:
cb:b2:d3:1f:1a:46:0b:8a:5d:a3:dd:85:d0:43:4a:f4:88:2c:
93:25:27:a4:1b:e2:03:07:09:7e:8a:6f:84:d0:75:e9:6b:46:
df:04:6d:45:2f:a4:98:9c:fb:75:d8:86:77:c3:25:8f:69:51:
b7:ea:ca:9d:ff:e6:1e:cc:cb:83:1a:1f:0a:de:f3:9d:79:39:
fb:b8:29:4a:96:5a:bd:98:9a:ff:31:9d:d2:ac:c0:7e:17:cd:
df:a3:73:34:43:50:42:0f:a4:41:a3:75:43:59:e1:b2:e9:78:
18:a8:47:0b:80:0b:45:26:75:0e:00:71:83:1f:3b:67:f8:10:
c3:c6:3e:5d:de:ba:90:4c:bb:75:27:7e:3d:f9:e1:c5:dc:05:
16:aa:64:2f:70:eb:9e:9e:51:bf:a6:c5:64:b4:c3:66:51:ca:
7d:4c:f5:b8:ac:6f:8a:fc:dd:db:a4:bb:99:d9:0a:a9:e9:fd:
75:8c:fe:49:ba:8e:8b:d1:7e:ac:50:38:dd:fb:9e:78:e6:d9:
f2:b0:f9:c5:19:14:88:ba:1c:eb:0b:ed:27:3c:7d:f7:49:11:
60:3b:e3:fe:91:a6:66:2b:f4:54:1c:fd:bc:e7:d8:14:52:52:
cd:15:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org