Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/G_Xiz0be1r6c7WRlumgnQvJn_RY.roa
File: G_Xiz0be1r6c7WRlumgnQvJn_RY.roa (raw, json)
Hash identifier: Ts1RwtXOTtQJDCGOSaf8kA6d7bKrmvJt/+6exoNEhEA=
Subject key identifier: 1B:F5:E2:CF:46:DE:D6:BE:9C:ED:64:65:BA:68:27:42:F2:67:FD:16
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09C1
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/G_Xiz0be1r6c7WRlumgnQvJn_RY.roa
Signing time: Wed 29 Sep 2021 02:36:45 +0000
ROA not before: Wed 29 Sep 2021 02:36:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1BF5E2CF46DED6BE9CED6465BA682742F267FD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:d3:34:b8:86:c4:65:96:9b:46:2b:39:46:
93:df:c6:07:5b:4f:1a:3c:ce:b8:24:d1:55:7c:42:
71:68:41:00:15:65:4c:80:99:2c:e8:97:28:2f:c5:
90:0c:4c:35:c0:e5:49:87:e4:3b:b4:40:b8:9e:2b:
06:cc:cb:d1:0d:81:d2:8a:00:c1:5c:fa:21:d9:b5:
d5:34:6c:8f:7f:70:f9:f7:b2:c0:f3:8c:ea:e9:77:
4c:70:02:ad:0f:75:21:ad:8f:a7:d1:b5:4a:a2:d0:
8f:26:b6:95:42:d0:8a:8e:0c:61:77:e8:ed:17:ed:
a8:66:fa:83:49:f5:92:50:77:17:67:00:a9:a2:a0:
65:42:44:8d:d4:45:00:1c:73:58:31:5d:cc:4c:78:
55:1f:7e:59:50:f3:4f:28:a8:8e:f2:05:a5:1a:46:
c1:a8:8c:7a:24:e2:4b:a8:94:44:2a:b2:69:0b:a9:
86:3d:8a:37:44:4c:68:36:df:3b:ec:07:c3:1f:70:
5b:65:1e:74:15:ad:33:a4:34:e3:76:2c:5a:38:ad:
4c:c8:30:d9:f7:46:ee:99:4c:1c:f7:61:69:20:f3:
65:bc:3c:0f:f5:b6:bc:79:6e:7e:bb:56:18:68:dc:
ef:03:a5:59:44:34:c1:07:b1:c0:fc:be:42:06:26:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:E2:CF:46:DE:D6:BE:9C:ED:64:65:BA:68:27:42:F2:67:FD:16
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/G_Xiz0be1r6c7WRlumgnQvJn_RY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9e:a2:31:c1:0a:60:a7:c4:70:0c:f5:ec:52:53:cd:cf:18:
41:f0:1f:b9:e1:d9:c4:ed:29:49:56:07:1a:a6:69:39:87:9c:
47:34:5c:5e:71:5b:55:8d:ed:7a:b0:ae:d1:ef:fe:27:f7:5b:
06:15:e6:31:97:b2:72:f6:3a:49:f6:62:8d:6c:94:c0:19:c5:
45:25:49:4e:4e:2f:7c:b0:e4:49:4b:5a:9d:92:40:c8:77:73:
1c:69:7e:aa:a3:5d:e8:f6:fe:3a:c5:18:dd:c5:d5:43:bc:1e:
e0:8b:fa:93:85:8b:af:7a:b2:3a:54:4e:0a:9b:25:c0:13:69:
33:b6:61:dc:8a:1f:65:10:a3:09:69:db:9b:7d:be:9c:3a:45:
97:7f:d4:60:1b:a2:f2:3a:e5:05:b9:9e:d1:7a:f2:65:98:41:
e8:d3:b2:db:a8:71:59:5c:e8:3a:e2:53:86:bf:01:38:c3:4b:
cf:3f:b2:1c:c5:4c:55:04:17:f7:02:e0:74:ad:65:f3:3f:82:
56:23:70:07:11:26:72:ad:01:dd:25:aa:cd:18:5b:19:12:a2:
29:2f:38:bc:b1:7d:74:4f:9d:82:cd:56:4d:d8:bc:72:32:8a:
d3:8f:07:9c:db:78:34:da:96:7a:f3:e0:54:f4:7d:6d:c4:84:
40:e2:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org