Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/wThQzzskVXNMbUsoiya9UM5G9Zo.roa
File: wThQzzskVXNMbUsoiya9UM5G9Zo.roa (raw, json)
Hash identifier: 4INcV5CCFPy4OLibnpyyTw/O5pei6jcXgPm72UTpVNk=
Subject key identifier: C1:38:50:CF:3B:24:55:73:4C:6D:4B:28:8B:26:BD:50:CE:46:F5:9A
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 08BD
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/wThQzzskVXNMbUsoiya9UM5G9Zo.roa
Signing time: Sun 07 Feb 2021 13:06:13 +0000
ROA not before: Sun 07 Feb 2021 13:06:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 21859
IP address blocks: 43.224.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Feb 7 13:06:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C13850CF3B2455734C6D4B288B26BD50CE46F59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:a5:56:34:b9:9b:6a:42:45:f4:4d:c2:39:
25:ff:78:40:3f:d0:92:50:08:e0:a9:65:5a:cc:6f:
29:f0:8c:4b:fd:45:69:e7:75:61:0f:3b:bc:09:8a:
3c:5f:8c:ef:d1:7f:cc:87:23:3f:59:9d:16:ef:55:
fb:f1:fb:de:3a:da:00:1a:21:9e:10:7a:12:3c:34:
89:2b:d2:b4:24:19:9f:29:90:83:53:fc:73:36:fa:
ec:16:a4:7e:cd:7d:de:09:5b:2d:51:6f:91:ee:d3:
e9:80:82:da:79:fc:7f:fe:ca:46:40:52:49:4b:10:
94:ec:f2:6f:f0:59:91:0b:81:eb:46:0f:5c:f3:16:
0b:39:6c:c0:79:b4:24:6f:dc:78:df:10:9d:60:48:
5b:51:3b:3a:16:63:8b:86:9f:5f:28:a0:56:f1:9d:
c5:6e:10:f5:ae:2f:b7:c5:c3:e8:a2:2a:1f:71:53:
ac:6d:e0:16:51:7c:90:c0:da:b1:bf:a4:23:5e:3e:
49:00:75:3e:1d:f1:ec:cc:bf:5d:00:df:d3:5d:5b:
97:f1:27:83:9d:a7:d7:1c:92:0d:dd:9d:5c:f0:d1:
86:56:97:a3:6b:d8:11:37:d8:60:f6:fa:e2:48:eb:
c4:e2:17:38:b2:87:8f:16:01:ee:d5:f0:89:a5:0c:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:50:CF:3B:24:55:73:4C:6D:4B:28:8B:26:BD:50:CE:46:F5:9A
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/wThQzzskVXNMbUsoiya9UM5G9Zo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.20.0/23
Signature Algorithm: sha256WithRSAEncryption
48:00:5d:18:22:2f:05:07:0e:ac:d8:7f:f4:72:76:e2:dd:35:
12:ee:3f:68:c7:13:98:3e:e5:2a:d9:4f:a9:f3:41:fc:05:87:
b5:c7:35:b3:ac:a9:16:a7:d6:07:e6:fd:75:45:b8:2e:29:b1:
08:f9:5e:19:06:96:74:fa:6d:d0:81:f0:4b:83:6c:a1:5e:4e:
bb:be:38:da:48:8c:8d:dd:0b:19:43:1a:f0:3b:38:a3:ad:0c:
04:89:26:50:af:8d:36:8a:01:10:71:ab:33:49:0c:06:ff:b1:
c5:5a:89:88:c6:80:a9:ab:9d:4f:13:71:40:37:99:cc:2f:e5:
ac:12:79:95:52:dd:11:af:fb:c8:8d:e5:f9:74:76:36:ca:cb:
35:e3:b0:7e:6d:9d:b8:b3:86:70:7e:c8:75:05:7a:2e:77:37:
e9:55:31:12:41:37:bd:52:8a:dd:67:b7:a2:8b:94:0a:96:01:
ed:d3:41:a6:f4:89:cd:40:3f:6b:64:c3:01:1d:a6:8c:12:d0:
01:33:13:aa:5a:c3:1d:c1:5f:4b:7a:4c:36:12:c7:a6:1f:cd:
f8:d4:3d:8f:1b:3a:95:30:bd:84:5f:ee:17:19:e6:93:4e:07:
61:58:7e:ef:2f:57:85:06:ed:0f:b7:9f:14:bb:4d:74:7a:fb:
72:00:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org