Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/WoBlLTGtUhle_oW1pM71ozmqTmU.roa
File: WoBlLTGtUhle_oW1pM71ozmqTmU.roa (raw, json)
Hash identifier: 8YNxixbuHmjqH41Ijl/IYSk3vCRvIwDqHANX5YQR8z4=
Subject key identifier: 5A:80:65:2D:31:AD:52:19:5E:FE:85:B5:A4:CE:F5:A3:39:AA:4E:65
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 08D9
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/WoBlLTGtUhle_oW1pM71ozmqTmU.roa
Signing time: Sun 07 Feb 2021 12:40:47 +0000
ROA not before: Sun 07 Feb 2021 12:40:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 159.117.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Feb 7 12:40:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5A80652D31AD52195EFE85B5A4CEF5A339AA4E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:3d:a5:32:a5:a6:e5:5a:4d:3f:5c:c4:1b:
ef:a8:06:0d:77:dc:a6:7c:fd:64:90:9c:c4:70:74:
b4:20:81:b5:9f:26:25:46:2c:26:6a:1a:41:c8:3f:
7f:4e:91:51:5b:ab:87:26:75:53:9d:d4:cf:13:14:
9c:1b:d1:da:21:1f:58:5d:8b:88:10:65:92:05:45:
e3:48:14:ae:4b:5e:86:66:c9:96:46:f3:d0:3f:78:
a5:23:7d:c8:bf:eb:88:d8:dc:dd:1f:cb:ca:e1:92:
be:62:cd:9a:d7:42:01:19:f4:8d:5c:d5:fa:1c:80:
dd:9d:3e:4c:aa:31:b2:e8:65:5f:15:a8:3c:96:12:
54:4c:d5:b4:3b:53:8e:66:75:11:38:f9:93:59:67:
40:3b:ad:2b:45:3e:27:ca:33:79:58:5d:ab:2b:a8:
1d:5c:e0:f8:12:78:68:1c:03:5e:18:ba:e8:ae:d2:
ac:23:47:7b:89:74:2f:e1:fd:a4:ae:7a:be:49:9c:
a7:dc:83:6c:dd:8e:e5:8a:76:f0:7a:27:05:47:29:
e1:d1:8e:36:26:47:29:a6:d9:35:80:ca:26:39:28:
f7:09:63:4a:9b:52:13:f2:f1:e5:58:ee:bf:74:71:
3c:7f:ec:40:b1:f7:b0:b0:57:2e:be:d8:5a:90:d3:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:65:2D:31:AD:52:19:5E:FE:85:B5:A4:CE:F5:A3:39:AA:4E:65
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/WoBlLTGtUhle_oW1pM71ozmqTmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5f:cc:44:42:83:b9:ee:9e:8e:f3:56:0d:16:ec:93:72:54:
f9:71:00:a0:37:7c:7c:2b:f2:32:61:b3:f5:66:f2:cb:a4:ae:
c2:da:38:ca:c4:2f:cb:51:b7:bb:8e:5b:b3:db:b3:8f:ab:16:
9d:c8:e5:9b:f3:20:bd:52:89:f6:13:43:1e:05:7f:a8:56:24:
62:4b:70:18:a8:1f:84:1b:80:0f:68:84:8c:e6:c7:08:ca:95:
8b:b5:0f:01:73:ae:51:9a:07:b9:5d:ff:db:de:90:41:8a:81:
0a:a4:db:9e:99:1c:a2:a2:b5:31:ac:af:28:f4:ac:a4:cd:25:
65:99:4f:78:e3:ba:4c:09:a1:8e:6c:5b:be:d0:7d:f9:1d:5c:
fc:c4:2b:67:98:dd:96:17:29:d3:aa:86:18:05:79:6d:4a:72:
d5:e6:4b:a7:92:16:d9:d9:7b:e4:46:13:df:ef:70:3d:10:be:
bc:f8:e8:d2:c1:e2:0c:7f:83:64:39:f9:b6:a3:c5:15:c5:10:
02:ff:fa:d9:4e:87:d4:f1:4c:fc:cb:6c:75:c0:90:ba:8c:bc:
9b:ca:d1:00:25:bf:aa:d9:8c:3f:3d:43:b3:b2:ea:46:57:ee:
cd:a0:87:74:eb:46:d3:19:35:a4:ed:34:22:35:44:8c:d7:d5:
75:37:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org