Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa
File: -YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa (raw, json)
Hash identifier: i4MxHO3wWhlqJx+fw+v4Ki1DX4vjq3RNubvbM/XQeTo=
Subject key identifier: F9:83:59:E1:C9:B3:28:8A:77:37:F9:A2:0A:0B:73:FA:76:6D:C9:34
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0962
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa
Signing time: Wed 29 Sep 2021 02:52:38 +0000
ROA not before: Wed 29 Sep 2021 02:52:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 61.60.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402 (0x962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Sep 29 02:52:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F98359E1C9B3288A7737F9A20A0B73FA766DC934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:8d:4f:04:be:22:b9:5a:c5:89:0f:13:38:
5c:9d:6c:4d:06:30:52:fa:8d:c4:2e:a9:3e:7f:72:
bf:a2:83:cf:2e:82:8f:89:68:79:e3:11:94:17:15:
39:e6:67:dc:d5:9f:0c:16:da:9a:5c:b2:91:e5:05:
3c:9a:51:9f:75:2d:af:8c:17:ed:30:80:26:5a:e5:
d3:aa:2c:34:cf:b8:99:63:ca:c1:96:ae:f2:eb:52:
7c:61:66:b9:df:9b:81:fb:6b:46:3b:73:d2:bd:b2:
71:49:3c:c6:d3:b1:04:30:51:fb:f9:8c:fa:ab:83:
ba:86:eb:19:be:38:0a:d2:89:a1:2b:00:cb:c7:ee:
69:c9:62:85:32:5c:0d:16:d9:90:e5:f3:99:fd:68:
43:a6:a0:2f:2c:31:df:1f:d4:22:42:e6:86:2f:16:
80:fa:5d:ff:0a:05:d0:95:ef:b5:ca:3b:b8:47:ab:
cb:9a:9d:aa:20:50:56:7c:8d:d2:58:13:ef:3b:b9:
17:51:0e:eb:5a:08:94:07:1b:bc:c3:9b:8f:2e:a9:
e3:81:0c:b1:2a:bc:48:64:ce:b3:ac:0a:f8:9e:7a:
13:cc:45:a3:67:7e:98:cc:c8:6f:cf:64:2c:8d:79:
e7:75:d9:1b:87:31:4a:ae:4e:b3:cd:1f:4f:98:c2:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:59:E1:C9:B3:28:8A:77:37:F9:A2:0A:0B:73:FA:76:6D:C9:34
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.240.0/20
Signature Algorithm: sha256WithRSAEncryption
60:6d:0c:d1:4a:3e:18:4a:85:e3:99:e4:c9:32:bc:b1:b6:f3:
c3:69:d0:e1:35:c4:55:5c:ff:28:25:b8:f3:6a:a9:18:8c:ff:
8a:8a:65:33:a9:70:be:01:3a:45:fb:37:dc:f3:f3:d4:cc:eb:
94:8d:58:a1:8a:60:98:ca:7f:0d:90:fa:f8:e7:e5:1b:2e:9f:
9f:fd:b1:3e:24:3b:bd:23:1e:7e:40:1d:ef:15:07:85:ff:0c:
38:0a:7d:e9:20:a3:21:8d:e4:2d:4c:28:da:b0:5f:eb:ed:b7:
12:7f:f0:1d:66:a4:5d:44:77:92:d6:39:fd:82:c7:2a:3d:21:
4d:18:2d:be:50:79:39:48:5b:11:63:01:37:19:52:c8:cd:3a:
6b:7f:f2:7b:8a:2f:c3:80:22:0f:b2:0d:a8:9a:9f:df:76:5d:
93:73:45:48:95:72:82:08:d4:de:6c:e3:e6:5d:e0:91:a7:3b:
98:a2:27:bb:a0:b9:71:b0:c8:a4:8e:c7:0a:16:d1:90:e0:bd:
69:35:51:5e:76:9c:fb:a4:bf:27:1f:df:7d:ad:57:3f:cb:dd:
9c:99:ad:c1:ed:32:5f:74:8b:d7:d9:ae:09:95:52:b4:68:63:
b9:f7:3c:50:ee:28:23:c3:16:d3:a9:22:bd:d6:07:da:d6:52:
8e:08:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org