Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/gupWfogz4PhH5e1noeITKtsGeYc.roa
File: gupWfogz4PhH5e1noeITKtsGeYc.roa (raw, json)
Hash identifier: QRXghukF07ujpqKZbXdG+DlxL2kllAA+gxix9wFIqsE=
Subject key identifier: 82:EA:56:7E:88:33:E0:F8:47:E5:ED:67:A1:E2:13:2A:DB:06:79:87
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0A89
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/gupWfogz4PhH5e1noeITKtsGeYc.roa
Signing time: Thu 15 Sep 2022 02:37:51 +0000
ROA not before: Thu 15 Sep 2022 02:37:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 61.65.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2697 (0xa89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 15 02:37:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=82EA567E8833E0F847E5ED67A1E2132ADB067987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:96:88:4d:10:3e:9a:95:41:9e:50:40:31:
f9:34:83:e4:d5:8b:39:ba:ac:c4:57:16:bd:1c:58:
81:95:88:1c:ff:7b:36:a4:f8:dd:4b:eb:de:7f:57:
bc:63:bd:40:c5:ce:86:4b:c1:5d:9d:36:51:7a:55:
0f:50:fd:ab:a9:63:ac:ba:00:e8:65:bd:07:3e:41:
3d:58:6b:f3:98:96:4d:fc:73:78:03:89:74:9a:d6:
85:89:2d:e1:8e:6d:40:21:ae:9b:9c:00:84:19:39:
92:d9:5b:3f:e0:e2:63:a5:a0:72:62:95:12:ab:4e:
76:bb:ca:0b:5c:7f:db:11:8f:04:5f:4c:db:8b:79:
2a:dc:7a:4e:25:3a:8c:ab:9a:b2:6c:4a:84:7f:57:
be:ba:d6:ae:f4:d3:e9:a2:75:93:1b:6f:a2:06:f4:
07:22:52:0b:4e:f3:a1:51:3a:c1:2f:0e:a9:e8:aa:
d3:0c:3d:c7:e5:e9:31:05:dd:7f:46:e0:13:cd:f2:
77:bf:ec:97:47:e7:a2:b2:0b:2d:00:b5:52:28:4b:
78:5f:46:9b:a7:ff:6d:08:4d:bc:da:7f:11:2b:10:
d8:f8:6c:ed:dc:cf:6e:00:dd:d2:10:ca:f7:2b:47:
6f:71:d4:01:64:e7:a4:c7:3c:2c:44:ff:2c:58:9e:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:56:7E:88:33:E0:F8:47:E5:ED:67:A1:E2:13:2A:DB:06:79:87
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/gupWfogz4PhH5e1noeITKtsGeYc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.232.0/22
Signature Algorithm: sha256WithRSAEncryption
13:35:2b:95:35:a8:9b:e9:b8:c7:73:02:97:9a:96:ff:4b:9c:
c1:85:a7:ec:08:de:32:64:de:2d:78:6c:d1:a6:6a:a7:65:b8:
d0:f0:5b:60:fb:1f:a1:6c:3e:11:59:a5:1c:8d:fc:ee:53:37:
3e:8a:03:59:34:79:e5:5b:13:13:81:af:8a:8e:45:a0:22:d1:
29:a7:be:5d:a8:53:5e:82:a7:fb:a4:cc:85:f6:78:0e:22:06:
cb:69:a5:7c:84:bb:0e:69:7a:fc:60:15:71:a7:a4:0e:e8:dc:
29:94:e9:85:4e:69:52:65:07:dc:36:f2:b0:82:80:25:19:38:
13:b0:da:fd:c4:21:bc:61:30:55:d9:33:8b:ac:ff:0a:5b:0e:
d3:10:c4:05:d8:6e:f0:f9:b2:8f:a4:7d:9d:26:9a:b3:49:3b:
65:1a:48:8b:4f:f4:0b:2c:81:73:87:c8:74:71:fc:88:ec:77:
fd:50:36:0c:c7:d3:4f:c0:1b:c0:e3:23:c2:c7:3f:b6:1a:34:
f4:33:25:5a:17:0a:bd:0c:97:42:e6:19:56:2d:4f:81:a8:3d:
ce:9c:23:a8:9b:8e:1c:3e:a5:8d:a7:e8:47:c2:f4:7d:a2:ba:
31:4b:60:ce:2c:03:e3:01:58:5f:bd:a6:5e:62:a6:da:4f:ff:
46:86:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org