Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa
File: XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa (raw, json)
Hash identifier: 3pM1pL7a8yc3JcKPAxJDTSNc2eg7xGtqEyua5FHPpQ4=
Subject key identifier: 5C:46:99:A7:04:5A:BB:6B:A1:0F:F2:1D:65:1A:0A:32:0B:3C:45:CB
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0799
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa
Signing time: Tue 29 Sep 2020 10:03:13 +0000
ROA not before: Tue 29 Sep 2020 10:03:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 113.21.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 10:03:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C4699A7045ABB6BA10FF21D651A0A320B3C45CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:aa:88:77:51:47:15:c1:11:5c:12:c8:45:
0b:51:80:b4:0e:21:79:36:97:1e:7c:9e:74:b3:19:
6b:ba:bb:80:91:48:af:bc:06:40:ac:c1:50:ba:ee:
5c:ea:b2:07:aa:3d:58:c0:d0:a8:51:81:ca:a1:15:
c3:86:08:29:b2:e8:4e:82:06:a8:b6:b3:cb:7b:57:
10:43:f8:78:52:25:f6:1d:e2:53:85:97:1d:82:6d:
46:31:e4:44:a3:9d:35:8c:58:8a:ea:85:50:0c:73:
a0:e3:0d:eb:88:c0:52:a0:16:41:8e:44:8a:d0:8b:
10:65:29:ec:c9:c2:95:83:b1:99:ed:96:d6:9f:7d:
17:57:fa:58:2e:8d:78:2a:04:bf:0d:f8:a2:8f:a7:
6d:bc:91:e0:af:5e:04:12:d7:be:76:c5:2d:48:d4:
1c:f7:e2:4f:c0:79:53:91:fd:90:d0:96:c5:53:80:
b1:87:f6:b3:98:75:85:2e:97:0c:a4:86:c4:5e:35:
73:f1:1f:03:fb:ac:9d:1b:bc:9a:f7:b2:1c:90:f1:
72:9c:7e:c9:68:e0:bd:49:50:e7:be:68:38:99:78:
3a:c4:47:b3:20:6b:bf:a0:e5:db:3e:fb:6b:ad:6e:
b4:c8:b6:1b:6f:b9:b6:43:1b:e5:a9:bc:d2:1b:e9:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:46:99:A7:04:5A:BB:6B:A1:0F:F2:1D:65:1A:0A:32:0B:3C:45:CB
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:96:49:22:25:64:02:68:fc:e3:0f:88:84:c1:45:6f:7a:00:
4e:68:c9:08:e7:cc:9f:4b:f3:04:c8:ca:a4:17:0f:f0:13:9f:
c0:94:c9:52:ea:91:3a:c8:88:7b:bf:cf:18:d5:37:e3:8e:64:
09:c3:c7:5a:43:55:5f:04:d6:4d:2c:8b:d5:7f:2b:3d:cd:fa:
4b:e6:6c:70:79:ed:85:ae:14:2d:ea:8d:d7:9c:6b:f0:52:11:
19:1e:57:f3:68:bc:5f:b0:fc:58:bd:cd:fa:16:9c:a9:55:09:
f2:18:c1:2c:12:81:8f:0c:83:d5:d9:4f:94:f3:25:31:b9:f0:
b7:7b:7e:42:a5:d8:38:9f:2e:91:ae:0d:46:9f:f3:e6:22:ae:
d7:73:14:44:fb:fa:e7:ed:e4:d3:13:ce:ae:1d:f3:13:ab:c1:
05:6c:b1:a0:35:52:c5:73:65:59:f5:11:ca:82:39:81:82:de:
6a:10:16:59:61:e1:45:22:5f:9d:79:04:a0:de:5a:05:1b:f0:
23:de:53:d1:c5:35:d8:02:6c:27:d3:1a:44:7b:a6:18:69:dc:
53:de:21:02:06:26:3e:b9:c2:7b:06:87:b6:b4:83:f5:c9:2a:
3f:a0:d3:2e:6a:8e:58:97:02:24:e2:dd:1f:1a:10:e7:c7:14:
e4:86:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org