Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/nPWj8iXK4D-ziwS_11XtUnaDu_U.roa
File: nPWj8iXK4D-ziwS_11XtUnaDu_U.roa (raw, json)
Hash identifier: iKZuxmWGjDuxZXVDr90VKf5YpL0mAkzE238EKCPkW9Q=
Subject key identifier: 9C:F5:A3:F2:25:CA:E0:3F:B3:8B:04:BF:D7:55:ED:52:76:83:BB:F5
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 08F0
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/nPWj8iXK4D-ziwS_11XtUnaDu_U.roa
Signing time: Sun 07 Feb 2021 12:40:36 +0000
ROA not before: Sun 07 Feb 2021 12:40:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131597
IP address blocks: 61.65.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 7 12:40:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9CF5A3F225CAE03FB38B04BFD755ED527683BBF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:72:7b:4e:b1:36:6c:46:7b:3f:49:60:24:
3d:9a:3c:25:0e:ad:fa:9c:b5:72:1f:15:3f:58:4c:
d4:07:d2:b5:14:f8:c7:be:ec:5d:4a:f1:63:71:6a:
de:d5:ba:fc:d7:41:dd:9d:10:04:7b:a4:db:0b:7a:
df:97:36:a0:5c:15:26:34:e9:09:ba:38:7e:38:d9:
6f:a4:6c:57:9c:5e:51:9f:43:7d:1a:98:82:50:5f:
04:04:e2:e9:95:e6:99:b4:dd:35:a4:9e:4a:12:9d:
bb:97:05:f5:bb:09:05:bb:96:a2:8c:fb:49:0e:94:
d3:1e:1d:3a:93:20:a4:00:2f:e6:b1:6a:ae:51:14:
2c:0e:ff:15:d7:98:13:da:7a:21:99:22:eb:40:25:
dc:7d:6d:87:dc:e3:9d:2f:a4:71:4c:e6:79:a0:1b:
c1:99:19:25:ad:1f:a3:c7:5f:f6:d2:7b:d0:18:eb:
4d:58:a7:6f:8c:6b:97:4f:9f:26:db:83:a6:c6:b9:
1a:0f:83:48:77:3e:2c:2f:97:d0:7e:a4:58:d4:84:
c1:b5:eb:c4:d8:c3:a8:51:e3:1c:7f:83:e5:db:21:
f9:e9:fd:85:a9:fd:12:29:e9:33:33:44:31:51:c6:
f0:ea:cc:31:d5:83:90:f0:24:20:13:0d:7b:10:cc:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:A3:F2:25:CA:E0:3F:B3:8B:04:BF:D7:55:ED:52:76:83:BB:F5
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/nPWj8iXK4D-ziwS_11XtUnaDu_U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.224.0/21
Signature Algorithm: sha256WithRSAEncryption
45:64:7a:8f:40:ab:13:05:49:2b:fd:72:42:d8:5f:66:99:f6:
c0:1e:38:25:d0:41:ee:f2:d0:a0:a9:c9:95:ac:10:46:46:d6:
f3:a1:15:5c:ee:2a:bd:84:0d:f3:dc:e7:5d:8f:b7:fd:32:b6:
f5:ba:b8:04:42:a1:cd:15:13:d1:a3:b1:c8:f4:a8:70:e8:ed:
e8:ea:f0:f6:94:39:18:0d:80:34:70:38:ac:c7:37:37:0c:e6:
50:e0:a7:f7:5a:22:03:e1:da:a3:60:78:8a:a4:61:4b:29:2d:
cb:9d:60:01:d9:f3:24:1d:e2:8a:cb:50:70:bb:ab:5e:a3:d9:
b8:00:09:85:80:af:29:5a:ae:05:3a:a0:79:1e:e9:8a:57:a9:
ad:1b:4f:62:f5:d4:b5:4d:ef:c6:d3:a3:35:0d:fc:3e:84:56:
48:85:7a:3b:34:52:e4:7e:38:50:f2:1d:cc:87:9d:88:e2:fb:
34:4d:9c:50:39:c9:77:85:71:1c:25:aa:21:a4:b5:62:35:1a:
97:39:33:a2:17:a6:b0:a9:c0:7c:7e:7d:16:60:77:5d:6b:ad:
27:4d:91:7d:ff:2b:95:89:a1:68:85:93:6a:3e:67:86:7f:22:
c1:7f:92:ff:31:3f:9d:51:2e:98:84:fd:b1:df:e7:fb:3c:df:
91:bc:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org