Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/CgsjqtmvR5b-dWxfL5VAP7MdIuA.roa
File: CgsjqtmvR5b-dWxfL5VAP7MdIuA.roa (raw, json)
Hash identifier: fubG3gab/ezZpycpDoDFDFBtP7DRLhTtWwCX1bJcyhc=
Subject key identifier: 0A:0B:23:AA:D9:AF:47:96:FE:75:6C:5F:2F:95:40:3F:B3:1D:22:E0
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0A55
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/CgsjqtmvR5b-dWxfL5VAP7MdIuA.roa
Signing time: Thu 15 Sep 2022 02:40:48 +0000
ROA not before: Thu 15 Sep 2022 02:40:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17416
IP address blocks: 211.78.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Sep 15 02:40:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0A0B23AAD9AF4796FE756C5F2F95403FB31D22E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:49:05:20:74:67:b6:b1:8e:fa:23:24:57:
0c:1a:cf:e3:c4:f8:2a:bd:60:8e:02:57:d2:5b:ae:
08:06:a5:01:ce:80:1c:17:38:dc:7e:08:db:d9:d3:
c1:f5:a9:c4:90:12:bf:aa:88:4b:bf:90:9a:3c:6a:
98:ab:39:d1:ba:8b:81:e7:c9:3a:85:96:2e:50:a6:
09:03:3e:ed:02:bd:50:51:db:dd:18:6a:80:a2:dd:
ce:9b:d9:f9:e5:80:5b:e2:ee:d4:b3:fd:2f:26:fe:
d5:08:4f:1c:c3:2d:5c:2b:73:60:75:1e:62:24:27:
65:e9:c0:27:46:2b:de:89:41:07:0b:32:c6:9d:79:
22:6f:86:95:c9:62:7e:47:df:3d:86:c3:92:6e:04:
a1:21:e0:62:20:3d:fe:9b:fc:7f:45:4b:d2:0f:3a:
3f:7b:6c:22:a6:79:28:51:86:0d:26:71:2f:29:55:
69:8a:bb:d4:c7:eb:f5:95:4e:66:76:31:61:82:77:
32:23:81:ae:f4:92:88:dc:29:80:24:72:f0:20:80:
af:0d:e7:14:6b:2b:f2:9a:c0:cc:64:e4:ca:ce:5c:
1e:87:cd:0d:2d:92:67:9e:d4:b2:a1:c0:91:b8:42:
50:18:31:6b:1f:cf:53:3c:e8:9d:dc:3b:65:9f:38:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:23:AA:D9:AF:47:96:FE:75:6C:5F:2F:95:40:3F:B3:1D:22:E0
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/CgsjqtmvR5b-dWxfL5VAP7MdIuA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:50:47:02:b7:42:32:ce:f6:07:8e:35:07:64:e1:67:6c:8a:
1b:0b:71:82:1b:15:59:bc:00:01:79:95:fe:ed:e0:69:bc:49:
92:74:6c:ff:c6:6b:8c:c3:45:6b:93:e7:76:6e:48:2a:1b:2a:
2d:1d:0b:b3:0b:ed:8b:dc:ac:ab:c4:db:3e:7f:a7:b3:f9:6f:
53:fd:55:36:43:f3:d2:56:38:c1:14:39:96:6f:95:2a:1b:05:
55:b9:1c:72:ff:e3:a8:9f:32:a1:76:76:73:b1:29:a3:19:d9:
68:02:49:ba:76:1c:be:48:f7:57:fb:0b:ac:a2:84:9d:7c:6c:
f4:5b:f9:23:be:b6:6c:29:e0:b1:00:47:dd:11:42:b9:0b:ee:
86:63:4d:31:ae:79:0e:55:71:3b:15:af:f0:75:42:3e:fb:ba:
cb:16:0b:ea:aa:72:4c:e9:3f:e3:e7:fd:a5:93:89:38:52:65:
8a:92:99:ec:93:e4:77:54:22:c7:4b:88:2a:a8:b3:c3:40:ac:
ba:5d:a3:5e:67:45:a0:a1:63:b7:ba:0b:2c:e0:0b:5b:66:8a:
43:05:66:c1:e0:d1:d4:66:bb:b0:70:0f:8a:d1:ef:53:14:bf:
31:04:1f:7f:b4:05:1f:7a:4c:45:5c:9e:1c:28:2a:ec:07:90:
00:38:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org