Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/jQaelTKQNwsiw7Ff6QB8jSKS9ow.roa
File: jQaelTKQNwsiw7Ff6QB8jSKS9ow.roa (raw, json)
Hash identifier: 4mtxXlLnRw8we2yuL4puTo5CJU7rmV6UVrSgIYWDMG4=
Subject key identifier: 8D:06:9E:95:32:90:37:0B:22:C3:B1:5F:E9:00:7C:8D:22:92:F6:8C
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 099E
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/jQaelTKQNwsiw7Ff6QB8jSKS9ow.roa
Signing time: Wed 29 Sep 2021 02:36:52 +0000
ROA not before: Wed 29 Sep 2021 02:36:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 116.50.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 29 02:36:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8D069E953290370B22C3B15FE9007C8D2292F68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:80:71:50:3e:9b:6b:6a:ad:20:00:84:9a:
f3:c2:66:05:85:ac:ca:18:80:67:90:cd:01:4f:c4:
93:a9:26:28:b1:bf:31:bb:8f:d3:b2:9b:ef:4a:eb:
2b:02:f7:1e:81:c8:b9:1e:3f:c3:00:1a:18:fc:b1:
30:0d:1b:dd:51:f2:10:ee:00:94:f2:cf:de:02:2f:
ef:d4:f2:78:1a:65:f1:ed:cd:7b:53:b8:ac:6f:ba:
98:91:b4:49:ac:2a:2a:d5:13:f6:0a:96:b8:df:3d:
dd:dd:bc:8e:23:44:c8:39:b5:fd:d2:b6:65:12:5e:
01:c0:16:72:7b:ce:9b:b6:62:0f:e9:57:23:0d:b1:
61:91:92:af:89:cb:d8:d3:ad:a5:44:b4:fe:25:20:
56:e0:3f:b3:c5:d8:f8:d5:99:8d:0c:7f:89:2c:e8:
3d:55:ef:c5:17:5a:49:f7:c6:91:c5:0e:a3:1c:b9:
41:d7:79:5b:83:2b:28:43:f0:3f:26:2a:ee:0a:12:
e5:db:f3:7e:1f:38:d8:49:f2:5e:19:2f:eb:73:1e:
59:6f:6a:e2:e9:fc:18:84:d7:1b:3f:21:47:e9:d5:
29:db:a3:4a:48:4c:02:e1:c9:c0:9f:4e:dc:59:02:
6f:4a:8f:5d:9c:22:4e:bb:e3:ff:e5:aa:2e:83:7b:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:9E:95:32:90:37:0B:22:C3:B1:5F:E9:00:7C:8D:22:92:F6:8C
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/jQaelTKQNwsiw7Ff6QB8jSKS9ow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.50.32.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:d6:0c:ba:67:3b:5c:4a:3b:5e:78:2c:cc:a6:0e:8d:26:c7:
6e:c6:26:bb:0a:cd:18:f5:1c:1d:e0:16:b5:8c:e3:6a:11:81:
c7:20:fe:62:5a:cc:9f:8a:2a:5b:e1:f5:86:af:a5:8c:ed:74:
39:e2:77:d6:f4:0f:70:a7:cd:e1:12:44:ca:6f:c3:fd:f4:be:
68:ae:03:c8:03:d4:24:71:61:20:89:b1:e0:27:88:cf:fb:7f:
08:68:f7:d9:53:35:bb:94:c8:94:10:ed:1c:d2:df:0b:e5:a8:
c5:2a:06:79:77:d5:f6:a4:2f:13:ad:58:15:83:39:d9:a8:5e:
38:2f:ee:3e:04:de:63:2f:dd:82:66:83:d0:b8:3c:6f:88:73:
21:70:91:3e:a9:8a:c6:c2:fb:84:e2:ba:e1:98:4e:70:d2:aa:
44:b9:60:d8:5b:c2:83:94:b4:00:a9:e5:91:93:0a:05:39:63:
56:2a:79:5c:26:a0:9b:a9:77:96:3e:18:df:53:18:1e:c2:21:
18:8d:9d:af:56:e8:f7:60:1d:90:3f:b1:39:0c:24:db:8a:5d:
8c:5d:8c:ff:50:6c:3c:af:f3:a5:a3:0e:06:b9:b2:eb:ea:ca:
1c:3b:6c:01:ca:74:71:e0:31:7a:e3:01:31:c1:da:78:1a:b5:
33:bd:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org