Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/kKCD_CU5XSGLUpuRO3O8pfb8mgs.roa
File: kKCD_CU5XSGLUpuRO3O8pfb8mgs.roa (raw, json)
Hash identifier: lq2Ag1HbXRIe0Ibkf0j2k0TLzenKqx6qdRHH8k1Fexg=
Subject key identifier: 90:A0:83:FC:25:39:5D:21:8B:52:9B:91:3B:73:BC:A5:F6:FC:9A:0B
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 08BF
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/kKCD_CU5XSGLUpuRO3O8pfb8mgs.roa
Signing time: Sun 07 Feb 2021 13:06:14 +0000
ROA not before: Sun 07 Feb 2021 13:06:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 137263
IP address blocks: 43.224.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Feb 7 13:06:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=90A083FC25395D218B529B913B73BCA5F6FC9A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:72:ac:69:ff:1a:ad:e4:fc:85:87:4c:13:
f5:bb:21:7b:17:25:5c:8d:79:4f:c0:83:26:91:c8:
45:a4:8c:64:60:b8:2e:f0:b1:b8:6c:ff:bc:7b:fa:
42:a6:16:73:b4:31:76:71:bc:6f:88:b7:58:25:be:
93:aa:0c:31:4c:89:07:59:4a:bd:3a:76:08:30:f4:
2e:ba:36:fa:66:36:a1:e2:9f:a0:ac:5f:b0:0d:db:
29:0c:e2:ea:b7:cb:71:02:e9:3f:a8:ad:b8:93:56:
ae:07:0b:9e:c6:79:29:0f:10:9c:6d:0c:a0:dc:8d:
90:ad:96:9e:6c:3c:4d:5e:f2:45:4e:e9:45:b6:21:
53:17:88:95:94:91:ff:d9:1e:40:94:33:46:45:65:
96:9c:9d:c2:e5:ea:aa:cc:07:83:05:66:d3:8f:cb:
36:b3:3c:e5:ea:fa:c1:44:cf:cf:f3:19:bf:5a:a1:
ac:49:b6:7b:28:de:d6:11:64:18:c1:f5:51:c0:d8:
2d:b8:1d:7d:ba:50:47:4d:9b:f9:5f:77:18:fd:ad:
ac:d6:d2:af:57:74:44:a9:20:66:af:0a:de:29:9e:
40:50:f8:b4:a6:32:e2:ed:18:e4:8b:1d:bf:83:11:
36:0e:99:93:57:ba:e0:0e:bc:bc:ce:13:f7:5b:c8:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:83:FC:25:39:5D:21:8B:52:9B:91:3B:73:BC:A5:F6:FC:9A:0B
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/kKCD_CU5XSGLUpuRO3O8pfb8mgs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:39:07:c8:c0:e4:18:c3:f0:bd:52:26:7f:32:60:59:97:b0:
78:cd:e9:13:a0:08:17:ff:33:ae:4b:21:9d:d0:b6:d7:7b:91:
57:5e:09:a1:38:c8:eb:9b:b7:5d:db:0c:81:47:04:14:a8:ea:
06:8c:18:3f:aa:eb:b5:2f:d7:37:6a:04:c8:9b:ff:7f:c2:13:
bc:9e:44:0e:cd:6f:50:b3:e7:e1:6c:c7:55:e8:76:45:be:f9:
ce:9b:cc:2a:b6:48:54:dd:6b:ef:78:37:c6:2b:ca:86:93:49:
dc:4e:19:96:39:67:5d:dd:61:f2:6e:75:a6:99:f2:75:11:73:
7d:fe:12:32:84:7e:4c:0b:c9:85:d6:42:27:80:93:1e:b8:22:
bd:ae:2d:32:c9:3f:32:cc:dd:0e:a4:1a:fd:3f:ec:e9:bb:a2:
de:a7:8b:94:e2:e3:1e:bf:1c:0b:16:63:f5:f8:10:b5:df:b4:
99:f9:21:55:a1:08:8e:d6:fd:ae:db:bc:41:51:2a:0f:bf:79:
d4:93:e1:fc:4c:32:0a:2d:c2:7a:df:2e:f2:4f:f3:c8:49:a6:
05:3e:5a:d4:97:d8:fe:98:9b:f1:30:25:0a:8c:61:55:a0:1e:
c8:86:c8:55:ff:c4:f7:66:a7:f2:d1:e9:0a:b2:a5:13:e0:4c:
d4:a5:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-fra.rpki-client.org