Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa
File: Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa (raw, json)
Hash identifier: 3nStealuOdcL3psi7JavoBPnL5H+JndN3khdfifxbzs=
Subject key identifier: 16:BF:D9:38:39:48:23:7A:11:5F:5A:40:11:D7:20:41:DA:3D:9C:BE
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 08B5
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa
Signing time: Sun 07 Feb 2021 11:44:50 +0000
ROA not before: Sun 07 Feb 2021 11:44:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 61.58.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Feb 7 11:44:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=16BFD9383948237A115F5A4011D72041DA3D9CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:91:05:4a:f8:af:fa:ec:61:38:f6:73:36:
22:c2:cb:bd:9b:c2:a0:92:13:bc:c7:f6:d0:84:a4:
fd:86:fa:b6:91:86:3e:4c:a9:fc:f1:2a:3f:d5:29:
1e:ac:bd:cd:1d:55:00:75:a7:c1:5b:51:0c:fd:91:
22:12:93:bc:e2:42:a3:c5:73:02:cd:82:cf:43:e0:
51:b2:72:32:b9:35:12:dd:98:06:05:90:2b:83:4f:
ab:43:95:30:e3:91:e8:4f:c3:c0:56:18:0f:6a:9f:
dd:8a:7b:b2:20:a5:43:a5:52:1b:c8:f5:63:ca:3c:
d5:3f:cc:a8:3d:2e:32:03:55:e9:49:14:0c:32:7c:
1d:33:cf:d7:4b:28:93:a6:59:6f:5b:0a:bf:bf:57:
13:4d:4f:20:d7:ba:24:73:5e:78:06:e9:0b:57:cb:
63:cc:ab:c0:54:cb:94:14:ce:26:34:08:db:45:22:
de:db:58:c1:96:d7:72:bf:22:23:d5:ff:a2:4a:d6:
21:4d:dc:ab:61:72:73:64:27:a1:3c:a0:2c:19:7a:
18:b4:2d:f4:63:dd:df:9a:f5:1b:1c:b2:15:b0:a2:
58:36:9b:ae:10:95:31:31:17:11:fd:99:dc:e2:11:
a3:de:2f:14:99:77:aa:33:01:79:15:b2:7c:cd:37:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:D9:38:39:48:23:7A:11:5F:5A:40:11:D7:20:41:DA:3D:9C:BE
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:44:d0:31:1e:01:35:ac:69:e5:a8:52:0d:c3:93:ac:f3:10:
fa:38:df:93:ca:57:65:7d:43:36:1b:f8:d3:00:bd:df:f7:b1:
f3:e9:f2:00:25:5a:70:22:fc:d8:33:b5:f0:00:2e:fb:9d:df:
2f:49:e0:a0:c3:83:26:1b:56:5c:db:fc:d4:8e:63:60:ea:84:
ea:2e:99:50:87:05:d8:1a:3b:8b:74:d5:76:a4:f9:1d:9a:e8:
de:d3:55:79:bd:86:b8:79:cb:f6:15:0e:b6:db:51:13:da:3b:
59:28:bb:bb:10:6c:62:66:e7:fe:bc:f9:09:0a:d9:d1:98:5f:
4e:53:74:7d:30:8d:8f:c7:89:39:eb:71:8a:8e:fa:17:13:8e:
1b:cf:17:bd:56:a7:37:2f:81:c2:16:bf:85:30:d3:c0:22:59:
da:e3:cf:04:f7:21:5a:3d:a9:ac:86:69:32:ab:e3:4a:77:79:
61:6c:a0:c7:87:fd:d2:ec:28:92:55:33:b4:49:e4:ed:43:3c:
6d:c4:2d:97:cf:32:0a:b9:c5:28:df:98:ea:b8:bc:02:18:3c:
1b:4c:c3:df:26:b5:d3:dc:20:ef:5b:fe:9d:0d:1b:2a:9b:2d:
0b:e7:53:7d:61:e8:4c:70:38:c1:b5:b4:a8:43:f8:90:c8:7f:
58:98:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org