Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WNDFU53sNfq74RrWhuE6yTFnd3I.roa
File: WNDFU53sNfq74RrWhuE6yTFnd3I.roa (raw, json)
Hash identifier: uQnXUJGYlwVuEUmrEKsKtwzq8kKP4YgEWCnJgb6jeJo=
Subject key identifier: 58:D0:C5:53:9D:EC:35:FA:BB:E1:1A:D6:86:E1:3A:C9:31:67:77:72
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0903
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WNDFU53sNfq74RrWhuE6yTFnd3I.roa
Signing time: Sun 07 Feb 2021 11:55:44 +0000
ROA not before: Sun 07 Feb 2021 11:55:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.56.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 7 11:55:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58D0C5539DEC35FABBE11AD686E13AC931677772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b0:d2:a1:b9:7e:ac:ec:bf:0a:39:e4:e8:d8:
82:21:57:7f:9d:82:61:c0:27:ae:d0:c6:fc:72:24:
df:c7:8b:61:8b:0a:fe:25:1e:6f:ad:50:29:81:87:
63:10:45:9f:01:5f:03:51:4b:f7:a5:17:45:3b:cf:
63:e0:d2:53:b8:95:a8:6b:ca:1a:d6:a0:90:a7:72:
e5:f8:8b:5c:be:5a:b8:5c:63:ea:01:00:2f:1e:96:
85:52:71:27:28:ee:a4:ed:4f:32:31:c7:59:2f:68:
55:13:8a:77:d4:0b:dc:2e:eb:fa:6a:0e:98:69:d7:
0c:83:14:aa:1d:05:54:8a:04:07:1c:29:5b:c3:5f:
ab:39:3e:1a:89:23:57:a0:21:84:0b:3e:34:df:65:
51:f1:5a:c0:33:11:ef:be:09:87:b2:86:da:10:33:
a3:0a:cd:ed:37:fc:34:14:1a:c7:64:88:46:e8:11:
79:9c:26:69:00:ee:f1:d3:b8:b7:63:0c:eb:e1:da:
a0:94:c3:a8:e7:0e:39:48:bc:ad:34:cb:82:a2:a1:
d0:57:a4:9b:56:ee:c0:99:9b:fd:ed:00:41:b1:f0:
3e:a9:7b:59:8f:ff:a9:38:18:7f:6c:be:2d:15:d9:
09:0d:a4:c0:69:91:84:9e:ec:de:2d:4e:c4:5d:b9:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:C5:53:9D:EC:35:FA:BB:E1:1A:D6:86:E1:3A:C9:31:67:77:72
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WNDFU53sNfq74RrWhuE6yTFnd3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:27:ff:c9:c5:74:61:20:0e:87:b9:fe:ba:31:b8:96:2f:bb:
ef:c3:5b:8e:b1:0d:fa:c6:46:d8:e9:5b:00:e3:e6:0f:7f:78:
06:a2:e2:6e:c7:3f:ef:7a:a9:f7:f8:a9:87:e8:d5:2c:c2:a8:
6b:e8:ba:ac:ca:bf:2f:14:75:f3:ad:1c:c0:b4:19:9d:5c:f3:
c4:8f:64:4d:20:61:2a:f0:19:05:b8:29:60:49:28:a1:d3:72:
df:60:9a:0a:1b:9a:57:ec:29:bd:ac:8e:fa:00:b9:91:4e:69:
5b:a2:14:4a:f0:89:e9:7a:c4:15:8d:8f:21:bb:86:b9:da:f7:
dc:5a:41:1b:27:8b:86:94:1e:34:57:81:7b:73:45:21:be:b1:
77:32:68:1a:d2:f6:29:06:e9:c3:65:65:9b:3f:5c:60:c7:33:
ef:fa:01:0e:4f:df:4e:aa:2f:5e:ca:c7:3d:0f:93:b8:a3:4a:
58:6e:f1:0d:ad:cf:a1:f4:99:b7:84:18:56:d5:2e:27:4a:89:
25:1d:27:00:a0:53:88:fb:d1:77:96:e5:7d:58:f9:97:c5:c9:
52:61:bc:a2:a0:22:87:c0:70:3f:06:f6:29:79:66:8c:75:c3:
03:08:02:f1:3f:ff:02:e6:f0:2c:b5:b4:de:dc:b9:e9:ff:da:
05:10:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org