Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/FRek8zB46wZoxpmIdfPGUFHruJw.roa
File: FRek8zB46wZoxpmIdfPGUFHruJw.roa (raw, json)
Hash identifier: SZv2M6EKF4ifWiew4t49WWA5hKAcGKuYC7ICog6kADQ=
Subject key identifier: 15:17:A4:F3:30:78:EB:06:68:C6:99:88:75:F3:C6:50:51:EB:B8:9C
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0911
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/FRek8zB46wZoxpmIdfPGUFHruJw.roa
Signing time: Sun 07 Feb 2021 11:55:53 +0000
ROA not before: Sun 07 Feb 2021 11:55:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 113.21.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321 (0x911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 7 11:55:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1517A4F33078EB0668C6998875F3C65051EBB89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:b5:62:de:73:6f:49:30:92:68:5e:5c:33:
1f:75:69:bf:0a:3d:90:a7:be:f8:ee:9c:2a:2e:15:
f9:43:22:44:26:31:ca:d5:4e:fa:b8:89:15:cf:4a:
f5:27:7a:4e:3e:3f:d1:63:0a:6c:cb:fb:7e:86:d2:
6d:72:aa:02:f9:da:83:d0:65:20:4d:8b:89:53:75:
83:f7:a4:2f:5c:ce:e9:36:11:2f:4e:43:9c:5b:c9:
12:00:f3:77:88:9e:20:24:fc:f5:85:8f:9c:f7:fa:
b3:94:b8:76:11:d6:67:6a:f6:46:c0:15:0d:66:e3:
e9:af:6c:90:7c:d8:d7:e8:cd:5b:e1:5b:dc:86:1e:
dc:04:11:6b:b8:c2:70:7e:0a:38:f9:6b:d7:ef:c4:
61:b2:7f:43:ef:6a:59:00:9e:d0:54:57:89:af:99:
85:71:a6:ed:78:0e:a0:fe:00:81:0c:19:e0:8c:cb:
a3:d2:80:16:f8:41:7f:69:86:bc:f7:ea:9b:58:f8:
5d:9e:54:01:e1:08:2d:5d:79:00:84:eb:fd:20:3d:
39:67:0f:97:04:e2:03:41:0a:ab:c3:43:54:4e:60:
77:f0:33:9c:a2:79:14:bb:d7:c9:55:00:70:2f:38:
28:27:92:c3:b8:45:b6:95:da:1f:b3:52:b9:50:cb:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:A4:F3:30:78:EB:06:68:C6:99:88:75:F3:C6:50:51:EB:B8:9C
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/FRek8zB46wZoxpmIdfPGUFHruJw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.160.0/20
Signature Algorithm: sha256WithRSAEncryption
06:6f:49:5b:fd:99:d3:9e:67:ab:b8:16:fb:13:dd:e2:dd:c1:
56:46:f4:99:9a:55:45:32:1a:bb:20:d7:c5:2a:0f:22:44:75:
16:ad:67:35:d7:e2:32:76:da:cc:44:18:87:e0:2d:c1:ef:13:
81:5a:84:be:fe:3f:43:3f:2b:84:b6:35:ad:22:b3:3d:ab:11:
44:d2:c7:da:d6:cf:ae:fc:c3:85:87:11:0c:43:86:14:33:f7:
9e:25:24:97:c1:70:07:fa:4b:0b:74:02:6e:a6:c3:8a:74:d2:
8d:86:86:1a:5b:45:49:6a:96:83:07:2e:3a:02:89:ae:02:ba:
83:e7:11:6f:af:fb:b9:7d:5c:b8:91:b1:7f:52:b0:82:dc:77:
87:46:0e:62:00:97:6d:18:c4:8d:1d:8b:aa:4b:42:d9:67:d3:
58:46:d3:57:ba:ce:89:ab:f8:3a:1d:d7:ef:e1:58:e3:8e:8f:
d7:42:37:be:12:63:a2:dc:2d:f5:8b:06:37:96:52:37:d3:5e:
0a:e3:30:b5:93:fa:c4:6d:ec:89:0d:4c:d2:b9:fd:cb:3c:16:
db:ff:f4:50:8f:5e:04:2e:03:e8:b4:79:b6:d5:a4:f9:83:71:
ff:b1:1a:69:62:19:bc:fc:30:77:1b:92:3e:5a:8f:b1:1d:c8:
7e:f0:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:52 2023 by rpki-client on console-ams.rpki-client.org