Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/eyLxtLkLmwZKprZSAfknvhlXm6k.roa
File: eyLxtLkLmwZKprZSAfknvhlXm6k.roa (raw, json)
Hash identifier: uy7kMDHPGoqY84Ognvy5MWZYBUBo1T2XN1S0Bt4Xkos=
Subject key identifier: 7B:22:F1:B4:B9:0B:9B:06:4A:A6:B6:52:01:F9:27:BE:19:57:9B:A9
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 079E
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/eyLxtLkLmwZKprZSAfknvhlXm6k.roa
Signing time: Tue 29 Sep 2020 10:02:59 +0000
ROA not before: Tue 29 Sep 2020 10:02:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 150.107.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 29 10:02:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7B22F1B4B90B9B064AA6B65201F927BE19579BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:84:c7:ed:f9:e2:19:1a:45:c2:03:70:91:
74:3d:af:a7:67:88:46:00:38:85:47:b7:40:94:bf:
48:bf:87:cd:90:71:9e:2b:49:23:c9:93:8e:00:a3:
4e:4d:18:2d:02:43:be:da:ab:21:de:9b:03:b8:a1:
90:7c:a6:ed:2e:1b:e9:e8:2a:70:ba:5f:94:64:9b:
c4:9f:af:e4:84:f4:71:49:7b:71:f3:33:89:07:ec:
8e:7e:66:14:45:ff:45:3b:3f:7d:f4:ff:37:c1:0f:
a5:8a:77:c7:5e:73:59:73:4a:75:97:66:d3:8c:49:
34:ae:6e:98:d4:8d:77:d4:98:9f:b0:cc:66:11:e7:
f0:51:54:1b:1c:f9:d0:bb:b5:5d:2a:d2:4e:3d:24:
ee:15:34:13:d6:d1:e9:c4:62:c3:74:eb:e1:f9:cb:
a7:86:66:f4:6e:a4:98:08:b7:a4:cc:58:38:4d:eb:
6b:de:5e:90:3d:55:c1:fd:11:58:8d:ce:39:6f:f7:
b8:0d:cc:40:80:da:66:16:26:51:82:4a:4d:f4:73:
4f:1c:e5:61:fb:f7:52:2a:6b:5a:d2:9a:bf:60:c4:
00:48:13:ed:cc:d3:bb:dc:22:df:48:3c:3d:b7:e5:
0c:42:6c:a6:75:60:0e:b3:17:a0:f5:91:8e:b5:e0:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:22:F1:B4:B9:0B:9B:06:4A:A6:B6:52:01:F9:27:BE:19:57:9B:A9
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/eyLxtLkLmwZKprZSAfknvhlXm6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.56.0/22
Signature Algorithm: sha256WithRSAEncryption
35:fc:43:07:63:19:98:7e:88:bf:6d:50:14:16:c0:60:9e:14:
3d:d9:47:f2:98:8c:bb:43:8e:a6:34:13:d9:80:15:56:c1:99:
f3:53:e2:c3:d2:5c:3e:3e:66:fa:a4:06:d9:c0:fa:ba:e5:be:
33:5a:6f:52:e1:3c:a8:8f:39:62:0c:18:bd:51:e7:70:bf:4e:
3b:6b:42:77:6c:f7:93:12:fc:18:8a:42:6a:39:81:45:2d:f5:
19:e7:53:08:e9:21:5f:96:0d:46:cc:1b:07:b4:de:f4:50:ba:
e4:c1:c1:97:0a:91:a9:26:9a:69:5f:1a:62:64:76:ca:a5:b1:
06:c2:41:9a:98:03:9e:3f:85:61:d2:d5:27:f4:1c:5f:bd:50:
de:4e:07:fc:13:29:de:0d:31:fe:13:f4:c5:38:fa:5e:dd:b0:
6a:0e:ba:53:de:f4:7c:e7:19:c1:bc:6b:c7:fa:63:53:e8:10:
54:e0:4f:3b:15:31:c5:85:2a:10:6c:b0:b2:71:1c:72:c8:5d:
81:de:5c:4a:ed:34:21:b5:b1:20:a8:b5:52:0e:1a:74:1d:6e:
5e:e3:34:99:ac:23:65:f8:77:82:32:40:a2:21:83:3b:33:0f:
c2:af:ac:ae:51:58:d2:61:19:8d:34:2a:db:b2:ad:32:50:45:
ce:db:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org