Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/XVzbM92fzfILXTssAPILmrmEqOw.roa
File: XVzbM92fzfILXTssAPILmrmEqOw.roa (raw, json)
Hash identifier: bgC19fKLlIFCJis6rF7bQ7RbacjAR5mMWPkHxDemoxQ=
Subject key identifier: 5D:5C:DB:33:DD:9F:CD:F2:0B:5D:3B:2C:00:F2:0B:9A:B9:84:A8:EC
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 08EE
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/XVzbM92fzfILXTssAPILmrmEqOw.roa
Signing time: Sun 07 Feb 2021 12:40:35 +0000
ROA not before: Sun 07 Feb 2021 12:40:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 61.65.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 7 12:40:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5D5CDB33DD9FCDF20B5D3B2C00F20B9AB984A8EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:cc:fb:c1:9e:c1:20:5d:df:2e:0e:a4:50:
cf:43:14:8d:c3:33:cd:e3:56:34:96:7b:1c:18:ec:
aa:32:a5:47:f9:22:06:08:da:fa:64:0c:c2:09:92:
02:cb:d6:67:b7:89:25:1b:ef:db:65:ff:7b:65:a1:
12:89:53:9d:98:0b:3f:2b:df:68:30:c9:2f:f4:9c:
68:fc:e5:26:61:95:76:db:1f:fa:57:76:e9:35:52:
99:de:f6:61:7d:f7:23:cc:12:9a:b9:9e:b1:08:48:
f8:99:44:03:a0:15:1f:e9:43:be:f2:51:e1:80:2f:
89:f8:36:5a:96:1b:07:d2:38:33:e2:d2:b8:9b:8b:
cd:8a:64:4b:43:0d:be:95:2e:fd:29:5c:3e:a4:3e:
cb:ea:02:78:8c:5e:bb:d0:45:19:ab:8c:b4:36:7a:
ce:21:3e:2a:eb:66:c3:71:1a:03:ed:78:4e:24:05:
0b:44:9c:03:49:24:4b:5e:e5:86:17:62:2d:b4:8a:
10:b7:64:74:4e:09:a7:9b:b8:08:8a:44:bd:04:cc:
12:bd:b4:fd:e5:d6:ec:47:f2:5b:c7:95:b0:b8:07:
56:74:f8:79:7a:33:b6:19:48:2c:33:f0:b0:fa:17:
5e:d3:06:3c:5c:a1:be:18:00:30:41:3d:1b:4d:1f:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:DB:33:DD:9F:CD:F2:0B:5D:3B:2C:00:F2:0B:9A:B9:84:A8:EC
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/XVzbM92fzfILXTssAPILmrmEqOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:0d:b2:4c:d0:79:08:71:8a:98:e8:a9:d6:2c:a0:c5:ca:ce:
e0:15:09:a9:ae:f5:6b:59:f9:9e:71:df:a4:09:40:49:86:3f:
12:cd:83:6b:3d:58:55:a6:2f:8e:b2:ca:3a:ee:33:51:a1:c7:
87:ef:29:d8:ad:04:9c:e2:b8:0b:17:5d:58:52:87:59:35:c0:
31:99:30:b8:58:df:f4:aa:56:38:8e:99:0d:2d:70:7e:33:07:
24:fe:a8:36:d4:b6:f8:b5:83:aa:02:44:32:d0:dd:45:e3:56:
a8:f0:15:4b:28:0d:5c:14:4e:e2:58:ef:85:ee:c9:29:10:17:
63:73:42:76:32:5c:24:8e:c9:21:ff:80:c0:7d:ec:e2:53:8a:
27:f8:2c:a9:2a:f6:f4:cf:ca:51:71:33:5f:1c:12:c2:b6:c9:
ed:5d:25:b4:0c:05:bf:65:27:81:32:db:5e:2f:42:84:f6:e5:
cb:af:5a:94:7d:a7:d3:a5:a1:53:16:97:03:6c:ad:dc:48:e3:
a5:f9:d9:ad:23:b9:5c:0b:99:48:ee:25:cb:4a:e6:91:8a:19:
5f:c5:aa:10:5b:fa:d0:c8:8d:b8:01:30:6a:cf:dd:46:17:32:
fc:6a:05:28:26:4f:43:16:c6:68:3a:00:d9:89:b5:bc:61:33:
c5:e0:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org