Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/dLulaIVlkl0wQe6hLGGUK_Es8vA.roa
File: dLulaIVlkl0wQe6hLGGUK_Es8vA.roa (raw, json)
Hash identifier: gvr8bKBTjBvq95cIPEm+IX7jecXRoC8rI8I/hufPdM4=
Subject key identifier: 74:BB:A5:68:85:65:92:5D:30:41:EE:A1:2C:61:94:2B:F1:2C:F2:F0
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0A62
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/dLulaIVlkl0wQe6hLGGUK_Es8vA.roa
Signing time: Thu 15 Sep 2022 02:37:51 +0000
ROA not before: Thu 15 Sep 2022 02:37:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 159.117.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Sep 15 02:37:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=74BBA5688565925D3041EEA12C61942BF12CF2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:ef:c7:83:f9:02:5f:c9:92:bd:06:1a:3f:
f6:59:5e:04:81:54:4f:0a:7c:60:d8:91:4f:17:d9:
fb:ed:b3:bf:a2:34:7e:e0:1f:bf:d6:39:3f:83:48:
38:c4:f0:44:12:70:66:d1:18:e5:71:8a:ee:ea:fd:
77:d1:eb:d8:90:21:17:c0:4c:ef:8b:ff:8a:0f:a8:
c0:76:12:23:f9:b8:41:1b:d4:ce:5d:9f:9e:35:d0:
47:fc:dc:10:9c:02:ff:d6:f8:d6:05:cc:3c:e1:10:
a2:c4:66:5b:86:9f:9a:9b:36:ee:c0:63:1d:ad:fd:
3e:bc:9f:ce:73:e8:cb:b9:f5:9c:d4:87:1c:71:cf:
7c:57:8d:b2:af:c1:0f:98:88:58:de:59:e4:8e:27:
b1:9d:bd:0a:68:8c:41:83:39:ad:65:e0:20:6f:24:
27:a0:1a:2d:40:07:37:c2:a0:33:fb:72:d5:ad:8a:
11:ae:e0:d0:bc:66:74:5f:3d:b6:e4:c5:71:84:d9:
ed:f0:38:14:7e:f4:b2:4b:5f:b7:2b:05:ee:63:b4:
03:bc:89:66:40:a9:a8:5d:cf:b7:e0:0f:39:cd:9b:
b1:b9:82:aa:56:0a:6b:c3:1f:de:b6:70:ed:86:2b:
1d:df:2e:0d:b1:32:d4:69:2a:e3:8d:22:db:15:c9:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BB:A5:68:85:65:92:5D:30:41:EE:A1:2C:61:94:2B:F1:2C:F2:F0
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/dLulaIVlkl0wQe6hLGGUK_Es8vA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fb:7f:45:67:22:8d:27:5e:01:db:64:5f:4e:39:0a:09:76:
33:38:97:2e:52:5f:62:28:02:a4:2b:b5:41:43:8d:d0:cf:f1:
3b:52:92:96:fb:6b:a7:bf:fa:c6:ab:30:df:14:4d:9e:6b:2e:
cc:a5:65:3d:55:8a:01:3f:f7:a3:19:ea:64:6d:5b:e2:1d:3d:
a3:0b:f9:9e:87:e2:f9:07:ff:6b:2b:f3:a6:c5:9d:33:6e:74:
1e:a5:97:07:a4:cb:81:41:dc:96:d5:c6:b0:5c:c6:d4:5a:d2:
da:d2:f3:53:e0:9f:02:46:03:8e:39:4f:ae:ae:04:57:71:d3:
6a:98:80:28:62:6a:f4:73:29:10:89:32:7b:ea:3b:67:f0:b7:
fd:42:df:c3:ab:25:24:0a:d1:0b:6e:9d:a4:67:27:90:73:67:
71:0d:c6:22:5f:93:a3:45:93:53:24:94:5a:b8:f8:b3:a2:ac:
a5:c6:84:94:35:57:ae:fb:3f:b5:2f:83:f0:70:e0:ea:7c:e7:
79:f4:cb:f7:e4:36:59:98:f8:aa:ae:01:80:74:87:b0:c9:da:
b1:30:32:01:d4:60:39:96:13:48:9e:ab:75:8b:dd:09:40:fe:
04:5a:de:98:c9:00:61:d5:10:74:c5:94:7c:56:90:d9:fe:c4:
6d:ab:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org