Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/kWstE_s8MZ9ot53ivqKq8Kn4zxc.roa
File: kWstE_s8MZ9ot53ivqKq8Kn4zxc.roa (raw, json)
Hash identifier: /KqMaqAwEdin+SFZIlIymBywf70YpTDsUy/Ooa6hZ+0=
Subject key identifier: 91:6B:2D:13:FB:3C:31:9F:68:B7:9D:E2:BE:A2:AA:F0:A9:F8:CF:17
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0977
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/kWstE_s8MZ9ot53ivqKq8Kn4zxc.roa
Signing time: Wed 29 Sep 2021 02:36:53 +0000
ROA not before: Wed 29 Sep 2021 02:36:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 159.117.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Sep 29 02:36:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=916B2D13FB3C319F68B79DE2BEA2AAF0A9F8CF17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:b0:4c:c8:29:92:38:ab:3e:13:58:bf:c9:
07:82:d8:fc:e1:cb:f4:d8:a5:a1:ed:8c:e9:95:ba:
a4:62:49:44:a7:ae:2c:a4:cf:06:c9:5b:6d:cf:d2:
e4:d9:44:f5:30:75:9b:a3:5c:16:2f:6c:26:97:35:
68:f6:82:ee:89:dc:69:dc:c5:33:f8:76:da:f9:21:
00:d0:77:62:b9:61:f9:0a:27:82:cf:6f:98:c8:a6:
4e:ac:4b:4a:6d:3e:0b:c7:bf:74:c5:4d:af:c7:d1:
fd:16:50:13:87:32:99:e4:49:6e:b7:cc:41:06:d5:
82:18:8b:03:b0:e6:b9:e8:d4:2a:0a:11:b3:34:a0:
f1:fc:d2:2c:0a:68:71:b2:d6:ad:12:d6:41:0a:dd:
4a:b1:e2:e7:28:d4:2f:f1:09:f5:12:e2:d4:5b:2c:
47:05:56:b2:de:3b:fd:a4:94:63:53:7a:1c:5a:84:
01:56:79:fd:1c:35:a3:c1:b7:d1:fe:97:30:bc:9f:
43:9b:96:f3:b9:d6:55:5b:89:8e:34:34:38:11:18:
70:b8:08:cf:b4:47:89:97:e0:ee:34:d1:3f:b6:cd:
83:cc:c9:b0:54:0a:6b:9d:3b:44:6c:09:0a:6d:23:
2d:c1:94:18:e7:68:66:35:59:3c:66:02:bb:ec:75:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:2D:13:FB:3C:31:9F:68:B7:9D:E2:BE:A2:AA:F0:A9:F8:CF:17
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/kWstE_s8MZ9ot53ivqKq8Kn4zxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.84.0/24
Signature Algorithm: sha256WithRSAEncryption
66:82:6f:07:95:01:f6:64:76:38:b4:87:34:a1:0f:ff:76:b8:
b3:22:b2:1e:d1:a4:69:f6:34:09:b3:99:5f:da:40:00:ef:1d:
66:62:f1:4d:38:92:6e:96:67:e6:11:ca:b8:81:ae:0e:3c:70:
0f:31:0f:78:e4:66:8d:7f:90:63:c8:ec:b4:33:f6:78:d9:99:
3b:7e:42:00:18:8f:0a:14:81:c4:ce:df:6e:06:6c:48:b7:47:
94:7d:29:7a:3f:c8:f3:67:52:bd:47:6d:e1:da:1c:e5:99:d7:
63:5e:ef:6d:14:92:ae:2b:c4:e9:a2:13:0e:56:08:d1:05:1d:
bf:c8:00:70:69:63:48:5b:16:a4:e3:f6:0d:8c:c4:b2:79:db:
38:e8:86:39:39:98:d5:24:44:da:8b:b8:e7:93:45:74:c7:5b:
81:ab:85:c3:02:50:26:c9:c9:d8:22:30:d7:5b:ff:c6:b3:1e:
b0:69:30:81:42:2a:ab:fa:11:58:4b:82:b8:3b:20:54:c2:d9:
c2:db:f5:4c:a6:55:1a:bc:72:f2:1c:78:ae:3e:63:0c:68:f8:
8d:c2:84:fd:3b:9d:88:02:1a:36:0a:89:fc:2b:5b:20:f6:87:
b4:2c:e1:7d:a2:70:a5:cf:6d:67:4a:a2:4a:22:fa:05:f6:dc:
24:27:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org