Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TEqw-AfqwIAsD9ZT27jSjVIq2UY.roa
File: TEqw-AfqwIAsD9ZT27jSjVIq2UY.roa (raw, json)
Hash identifier: E0wrrq0qYSgsCGI7J9PKehwchhqYubXyKysdAun2P5w=
Subject key identifier: 4C:4A:B0:F8:07:EA:C0:80:2C:0F:D6:53:DB:B8:D2:8D:52:2A:D9:46
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0788
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TEqw-AfqwIAsD9ZT27jSjVIq2UY.roa
Signing time: Tue 29 Sep 2020 10:03:01 +0000
ROA not before: Tue 29 Sep 2020 10:03:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 159.117.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Sep 29 10:03:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4C4AB0F807EAC0802C0FD653DBB8D28D522AD946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:71:99:64:75:cc:b5:97:64:b6:29:d6:84:
49:86:5d:25:b2:3e:99:31:2e:00:04:17:b8:f6:a6:
39:74:24:85:5a:af:58:c3:cc:dd:70:12:5d:b4:59:
48:72:49:a2:bc:02:df:4e:76:e8:01:b7:32:d2:78:
e7:cd:b6:79:0e:05:47:e2:43:1b:bd:e1:7e:45:74:
92:e8:65:12:fa:0c:85:1a:cf:e3:0e:d1:41:29:1d:
0e:04:68:d9:ef:e6:5d:bb:fb:02:67:8a:38:c6:b4:
cf:30:0e:b9:fc:ca:cd:2f:0f:23:aa:b3:58:73:36:
9f:9a:21:21:03:24:be:90:bf:82:1a:2c:24:1d:ab:
bd:e8:69:94:44:b4:62:9d:59:35:62:47:8c:4e:fb:
aa:cd:50:3c:55:d4:bc:e2:a3:87:c5:f5:a2:a5:e3:
91:57:b4:da:58:ad:3c:f6:0a:49:69:25:90:79:28:
73:cf:cc:bc:dd:8c:cd:52:57:61:6f:7a:dc:73:02:
07:a5:1e:e6:bf:a6:8f:22:b1:1a:81:7f:05:8a:3a:
5d:35:bf:63:91:8b:f6:0f:cc:33:3a:d1:a4:4e:40:
68:d1:0a:0d:35:69:27:f7:de:51:14:dc:95:0f:c9:
09:01:68:95:74:87:3a:fe:b3:54:dc:6f:93:f2:0c:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:B0:F8:07:EA:C0:80:2C:0F:D6:53:DB:B8:D2:8D:52:2A:D9:46
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TEqw-AfqwIAsD9ZT27jSjVIq2UY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:ba:c9:f4:a3:88:82:fc:44:08:83:b6:04:c0:24:70:cf:fc:
ec:9f:19:4c:a4:e0:c6:36:bd:62:30:ee:0b:64:8f:76:fb:a9:
bb:58:47:4a:39:5b:bf:79:0b:ef:9b:cd:a4:e3:c2:2d:b2:96:
64:6e:42:a7:bd:45:68:22:08:5c:04:45:13:a9:9e:8f:da:61:
3b:1c:a5:a2:34:b9:cf:8a:27:14:4e:c6:1d:28:46:0c:3d:d2:
c9:c5:9f:df:db:7f:1e:6c:4b:42:25:47:10:6c:d7:de:2c:fc:
0c:83:cd:09:64:c5:a2:a1:2c:8d:c2:46:76:64:ba:b0:18:60:
09:b5:5a:8d:5a:72:85:5e:e9:5d:ec:67:1b:57:9a:54:fe:fb:
d2:89:2c:7c:84:0d:f6:8a:a5:1c:e5:02:5c:d9:f7:26:38:6e:
17:16:7f:a7:f8:2f:2a:54:a4:3a:c2:2e:35:6b:85:7d:3b:ae:
90:ae:e7:c0:68:af:0b:2f:c7:95:5e:3d:49:b2:3d:95:2d:76:
ed:2e:8a:c1:90:68:fd:7d:75:93:79:04:59:7a:a5:81:6f:2f:
ca:ad:a7:2a:b9:42:ee:3b:bf:0c:34:81:23:97:c4:fb:83:ad:
e0:6e:37:9c:08:a6:5d:9e:57:e9:fa:2a:e1:05:70:9e:1d:ea:
84:4c:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org