Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/aA-30DbNscO20NWL7H52xrZJ6wU.roa
File: aA-30DbNscO20NWL7H52xrZJ6wU.roa (raw, json)
Hash identifier: QLfNl3JnP8dR2HBUHiQSzU+AiohMcgqHrJTletVmLoA=
Subject key identifier: 68:0F:B7:D0:36:CD:B1:C3:B6:D0:D5:8B:EC:7E:76:C6:B6:49:EB:05
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0A7C
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/aA-30DbNscO20NWL7H52xrZJ6wU.roa
Signing time: Thu 27 Oct 2022 06:44:20 +0000
ROA not before: Thu 27 Oct 2022 06:44:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17416
IP address blocks: 211.78.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Oct 27 06:44:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=680FB7D036CDB1C3B6D0D58BEC7E76C6B649EB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:f4:2d:90:d0:3d:a1:79:53:06:7e:d2:68:
da:28:81:6d:8d:f8:5e:32:b3:ab:c9:ac:14:f8:07:
b0:ef:29:b3:cd:22:81:92:de:67:72:fd:f9:fe:a5:
0e:eb:64:db:66:e5:ae:d5:db:76:15:f0:53:c8:63:
3b:a0:41:5e:2e:6f:3d:23:3e:b3:24:30:e3:45:eb:
41:0a:62:5e:6f:b2:2f:b2:f3:b3:4f:5e:88:71:c0:
e3:12:27:2b:06:67:c6:eb:0c:e5:bd:1e:7e:3c:4c:
e5:03:24:4d:f9:6a:6b:c6:a8:ec:18:72:fa:cc:e3:
58:11:17:f2:82:e8:82:c8:ea:3a:fb:d3:4c:12:7c:
25:a8:3b:93:66:a2:af:a4:4c:00:40:cb:79:20:76:
c5:2d:f6:10:1c:12:0b:55:9c:31:1b:67:08:3b:33:
89:93:cb:df:58:01:ce:0f:7f:7f:e3:4b:cc:f3:b5:
db:73:2e:8a:1b:48:41:62:07:a4:69:ce:3f:d3:13:
3f:0b:1b:45:1a:13:81:8e:a2:4d:86:37:2b:1c:7a:
cc:e1:7d:87:ad:66:65:2b:3a:b9:77:a8:c8:7f:99:
84:ed:29:23:7c:62:ee:ae:87:92:22:87:e8:d6:86:
be:b9:73:c3:a0:ed:d5:92:69:f5:3b:9e:2a:44:46:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:B7:D0:36:CD:B1:C3:B6:D0:D5:8B:EC:7E:76:C6:B6:49:EB:05
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/aA-30DbNscO20NWL7H52xrZJ6wU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.80.0/20
Signature Algorithm: sha256WithRSAEncryption
12:df:d5:be:7f:c0:63:90:90:51:c9:d5:1c:b3:5d:21:13:4c:
75:d8:45:fb:c9:c8:42:a5:ff:3e:a7:64:53:87:bf:97:88:89:
03:39:ea:70:2a:75:f5:28:0b:c3:f5:36:fb:20:87:8a:c4:cc:
67:67:41:35:08:32:c7:0a:90:91:08:45:16:f7:cc:f9:65:a4:
6e:26:0e:03:65:4f:47:15:39:24:a1:be:07:8c:0e:eb:e2:a7:
78:f6:cb:df:81:ab:49:bd:f6:10:fb:98:74:02:27:12:d2:4f:
fd:28:fc:c7:3a:29:1f:93:e4:ba:4b:bd:15:23:07:48:20:b7:
93:e8:e4:15:44:b7:5f:50:20:ca:a2:78:32:0a:62:cc:13:aa:
15:37:e4:a1:0f:d7:b2:1e:10:59:5d:55:a9:3f:c6:9d:db:ef:
11:f7:f7:6f:a1:15:73:57:6d:5d:6f:f6:37:5f:15:93:49:c7:
97:d6:9e:47:ea:bc:06:92:93:99:86:da:8c:fe:de:15:8e:92:
80:0d:54:9b:52:0a:dd:37:73:db:3e:8c:58:c2:07:4f:67:1b:
d3:cb:b2:47:2f:cb:94:11:a1:86:15:31:f5:29:9b:d9:98:31:
cd:0a:b4:54:26:ab:fa:2b:70:f1:05:1d:6b:86:da:5c:57:9c:
3c:02:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org