Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/JuZIqTB3nWVsBw_JWckCSCVz92M.roa
File: JuZIqTB3nWVsBw_JWckCSCVz92M.roa (raw, json)
Hash identifier: gouiyWHgVHkgJIg/PdyuY8f3jVhD14QPGxW0QJRv8N0=
Subject key identifier: 26:E6:48:A9:30:77:9D:65:6C:07:0F:C9:59:C9:02:48:25:73:F7:63
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0901
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/JuZIqTB3nWVsBw_JWckCSCVz92M.roa
Signing time: Sun 07 Feb 2021 11:55:43 +0000
ROA not before: Sun 07 Feb 2021 11:55:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.56.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 7 11:55:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=26E648A930779D656C070FC959C902482573F763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:e0:fe:4e:64:c4:5f:a6:47:d7:4a:8a:a5:
44:7a:e1:07:0e:a2:42:20:c8:1f:b9:2b:54:06:05:
2a:ea:15:7e:f3:5a:99:20:b3:8e:8a:48:81:af:6f:
49:75:b7:38:af:06:ab:d7:56:7f:fa:c3:ad:b8:54:
d1:88:3f:eb:3f:70:2d:0e:e5:80:bf:68:9a:f5:a5:
89:4e:a9:f2:24:f6:2e:a1:01:19:66:f5:bc:31:03:
63:50:3b:90:30:19:e4:78:66:fb:e7:5e:07:ec:39:
3a:d3:90:7a:e3:2e:52:44:42:ba:bd:0f:69:bc:76:
27:2b:08:83:0e:ad:90:48:2a:0a:f4:85:b6:e5:9e:
24:ec:3d:93:21:02:29:0f:0e:c6:4c:1d:69:1f:f6:
75:9b:e0:a1:cc:12:94:84:db:c7:a0:3b:2f:b9:64:
c2:8d:57:da:53:b2:2e:63:21:44:61:98:7c:f3:56:
47:1d:b7:1b:ee:03:4a:04:39:99:46:3a:ac:b2:05:
57:28:8f:20:d3:e7:fc:b7:2f:c9:60:ca:ef:a4:63:
04:1d:69:c4:6e:11:54:db:b3:41:af:dc:86:ce:04:
02:ea:5c:a3:56:22:88:81:c0:40:ec:ff:93:7d:99:
6f:a5:8e:92:7a:50:82:b6:e3:70:47:2d:92:a6:fd:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E6:48:A9:30:77:9D:65:6C:07:0F:C9:59:C9:02:48:25:73:F7:63
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/JuZIqTB3nWVsBw_JWckCSCVz92M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7b:7e:77:3b:07:66:df:cf:84:c9:b8:cf:7e:33:a1:59:3e:
48:a9:2b:ee:f4:0d:c0:2c:2d:17:e9:bc:be:bd:c8:ec:53:33:
9b:6f:c9:24:63:4e:40:0d:d7:6a:88:5f:fe:a8:b0:97:8e:6b:
8b:38:f0:fa:8c:3b:ae:be:60:2e:12:c2:6f:49:e3:fe:5b:cd:
4c:a2:74:4b:98:c2:b2:da:49:1e:b1:b2:97:74:45:3a:30:74:
08:c1:d5:68:11:66:83:3b:66:3a:31:f0:65:f6:23:cf:c1:6d:
fa:60:56:fd:2e:27:3e:5e:c2:41:94:1f:56:63:5d:a5:d3:66:
a4:e0:28:ad:8d:24:7f:22:4b:5b:72:cc:54:a6:cf:0f:62:04:
9a:d7:ca:51:46:97:16:6b:48:90:17:0d:86:56:a9:b2:02:04:
7f:d2:21:89:78:88:47:fa:1e:c6:81:e3:d6:c4:64:56:0f:4f:
38:8a:c7:77:11:73:4f:29:16:bc:d4:65:dd:43:e1:58:15:2c:
32:4b:10:6b:93:ec:1a:b7:84:9e:be:5e:3d:4f:5a:73:9e:43:
b0:72:2c:b8:91:5d:59:18:17:8c:7e:48:7e:d7:53:8c:08:78:
05:de:5e:36:09:c6:bd:f2:85:8f:79:03:f0:02:39:3b:aa:20:
f3:1a:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org