Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/fVR4QoUeyoThDv8wo6TftRNZjJw.roa
File: fVR4QoUeyoThDv8wo6TftRNZjJw.roa (raw, json)
Hash identifier: cfQkVIpUxgHDLyeewel5LiXil9VTph+Q8IF3JPpWN7M=
Subject key identifier: 7D:54:78:42:85:1E:CA:84:E1:0E:FF:30:A3:A4:DF:B5:13:59:8C:9C
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 099D
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/fVR4QoUeyoThDv8wo6TftRNZjJw.roa
Signing time: Wed 29 Sep 2021 02:36:52 +0000
ROA not before: Wed 29 Sep 2021 02:36:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 150.107.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 29 02:36:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7D547842851ECA84E10EFF30A3A4DFB513598C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:91:ea:ea:1e:2f:ef:69:c8:ad:76:0b:40:
1e:e8:c1:6f:00:59:4e:71:84:cc:0a:2d:c0:ff:84:
59:87:c7:20:46:21:42:b4:9e:a2:49:6e:70:36:70:
5b:4b:35:27:d6:75:07:7a:0d:29:a5:07:87:d3:08:
e8:f6:7a:8f:81:78:78:eb:57:00:1d:c4:eb:7f:3f:
32:f6:53:e1:12:2d:07:1f:1e:eb:c9:53:5a:da:56:
cb:e3:ed:c2:2e:c6:05:cb:a9:80:b5:4f:1e:f5:7f:
49:6a:b4:e4:09:83:f4:b1:f6:24:50:7e:9a:d5:ce:
34:75:7c:22:16:0d:75:bd:b2:f6:4b:2d:eb:e9:55:
af:b0:61:ec:fc:eb:8f:c0:86:be:fc:a2:ff:7a:71:
08:6c:65:e2:ca:88:b8:62:f2:37:ff:9a:4f:30:1e:
15:2f:e6:9d:ac:8f:73:01:12:11:b3:5f:f3:a9:ab:
ee:5e:84:5b:c5:63:50:c2:12:9f:03:e0:12:63:bf:
ef:aa:81:07:e4:53:38:1f:5d:ea:8d:4e:47:b6:ab:
f9:c4:c6:39:de:09:f4:86:0f:56:5d:38:a6:99:f7:
91:9e:f8:88:30:1c:45:23:75:50:66:21:aa:bf:98:
37:66:66:e5:d7:85:dd:ed:d0:ae:38:6b:74:8b:0d:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:78:42:85:1E:CA:84:E1:0E:FF:30:A3:A4:DF:B5:13:59:8C:9C
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/fVR4QoUeyoThDv8wo6TftRNZjJw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:e1:c1:c1:09:18:75:53:ae:fc:81:41:e1:ba:4c:8b:3c:ab:
e7:ae:22:20:65:15:07:c8:93:cf:c1:1e:81:45:2c:7a:4b:ad:
a7:30:30:b2:16:03:a5:28:38:aa:b1:55:5c:47:a3:25:46:df:
f0:ad:b4:d5:80:da:cd:35:1d:5f:16:02:a3:a6:d1:7a:6a:26:
b4:1e:0e:28:8b:0e:5d:46:64:f1:7e:ff:d8:ac:c8:29:f5:e2:
8f:af:9d:54:66:9c:1f:27:9a:a3:cb:c9:59:1b:b0:79:d4:51:
09:44:96:ce:3c:be:30:7d:42:3a:c4:b6:ee:07:24:a7:aa:be:
ff:34:20:b8:66:bd:f8:65:4c:ac:bb:52:18:28:8c:51:cc:d4:
18:f5:4d:fe:1f:14:86:f5:8e:93:c3:ef:7c:76:b4:09:4b:88:
1e:c4:50:bd:07:05:b7:10:82:07:1a:bf:de:8e:96:9c:c3:66:
c5:17:9f:7a:77:cc:73:bd:8b:eb:44:4f:3c:18:5c:6f:25:fb:
a3:b4:c0:1e:28:cd:c1:b2:46:53:a6:25:17:6f:89:32:c3:ea:
99:b2:dc:89:e7:79:d3:44:ce:25:52:ed:97:a2:fc:a0:f8:c0:
ca:16:81:17:52:a3:c8:35:1a:19:46:f5:2d:9f:0b:1d:21:fb:
3f:f6:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org