Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/tau1fRBrpDnScaufPt_ilZCn82A.roa
File: tau1fRBrpDnScaufPt_ilZCn82A.roa (raw, json)
Hash identifier: UAB53J4WeDEhMQqTnysa7gf7N+p9k/k+iTVObzN5d5M=
Subject key identifier: B5:AB:B5:7D:10:6B:A4:39:D2:71:AB:9F:3E:DF:E2:95:90:A7:F3:60
Certificate issuer: /CN=75BD930C745D23E9EA585C04D6B99F95A96322E5
Certificate serial: 09F0
Authority key identifier: 75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/tau1fRBrpDnScaufPt_ilZCn82A.roa
Signing time: Thu 15 Sep 2022 02:49:42 +0000
ROA not before: Thu 15 Sep 2022 02:49:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131143
IP address blocks: 175.184.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75BD930C745D23E9EA585C04D6B99F95A96322E5
Validity
Not Before: Sep 15 02:49:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B5ABB57D106BA439D271AB9F3EDFE29590A7F360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:83:2c:9f:18:67:1b:64:ec:c3:5a:55:e7:
17:bd:8c:3b:50:19:16:11:f9:51:d2:f8:4d:57:a3:
17:22:31:da:66:e6:0e:86:42:b4:da:97:63:23:75:
d6:ec:40:0f:a5:8b:32:1f:fd:da:21:95:b0:01:96:
9d:87:1d:e0:63:ca:26:4b:36:54:f2:58:1a:9f:2f:
2e:46:88:77:21:73:61:f3:61:a4:7a:50:ae:e7:a1:
1f:72:5f:da:54:91:43:fb:6e:7e:84:56:88:df:df:
c2:f4:89:58:62:19:5d:b4:2d:a3:cd:a7:90:89:5e:
54:b1:4b:20:e0:40:aa:66:ef:3f:a8:85:d8:79:08:
f9:9a:f2:32:c8:74:0c:5e:34:ba:24:96:d9:4c:e1:
08:a7:60:99:e4:10:b0:76:c4:65:70:bd:0f:05:ab:
01:04:14:0b:c9:83:d0:3f:82:b6:91:48:16:39:6c:
99:45:07:8f:4d:61:86:fc:25:bd:04:3a:ba:d7:d2:
aa:f9:db:9c:c4:03:29:a6:54:61:87:7b:2e:c6:d7:
14:47:9d:f9:0f:d3:db:90:00:a7:d3:98:b9:6c:7f:
a6:ec:a9:c6:9a:8e:8a:39:87:99:98:f0:c8:e2:d8:
7d:e7:3c:d5:b8:78:e9:7c:03:54:2c:a5:73:04:7a:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:B5:7D:10:6B:A4:39:D2:71:AB:9F:3E:DF:E2:95:90:A7:F3:60
X509v3 Authority Key Identifier:
keyid:75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/tau1fRBrpDnScaufPt_ilZCn82A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.184.240.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:ba:c4:11:d3:09:d0:39:c7:43:2f:72:fb:ad:b4:ac:59:be:
0b:53:89:d4:52:82:d7:33:99:cf:01:c5:61:c6:0b:6d:d1:bf:
94:9a:83:c4:6d:40:3b:e9:f2:87:da:9f:f1:8b:51:a2:d3:59:
90:76:d8:a8:6e:86:70:68:55:22:da:bf:d6:cd:16:03:43:b9:
4d:48:0b:f4:2b:dd:21:75:48:bd:34:c2:f8:df:9d:7f:68:a6:
ba:95:c0:49:f0:c1:6e:e7:42:0b:d1:1d:15:b4:bf:4f:86:b4:
d3:c0:d7:40:47:1d:20:f3:76:3c:bd:5b:55:5a:05:0c:f8:c7:
08:2c:2c:b9:bc:e5:36:a7:f3:e2:34:01:ed:67:88:07:49:4c:
21:1c:6d:4e:04:40:6e:12:fa:d5:7d:9e:6e:c7:3f:d7:51:5c:
d7:38:a3:2c:59:9b:c7:fa:bb:f9:aa:f0:6c:02:f6:aa:03:cb:
da:43:8a:98:c7:87:b9:bd:88:c8:4d:2f:4a:2d:ce:25:2d:aa:
4a:bc:7f:e7:6e:ae:e4:76:7a:fb:45:f3:8d:eb:00:ba:4e:9c:
2e:6e:bd:a1:84:24:a4:0a:a3:45:e0:bb:9f:fc:bd:ff:3d:a7:
17:76:12:b6:78:ff:e3:9b:c3:5f:47:e0:4f:f3:1d:03:21:fb:
07:80:46:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org