Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/n0fDxnErpGOm07dRleYSQtT7Cwg.roa
File: n0fDxnErpGOm07dRleYSQtT7Cwg.roa (raw, json)
Hash identifier: tCi96FzSJHMMx23Q3cKsKy9Vmwzhc5TqoVO9+Rs/IUI=
Subject key identifier: 9F:47:C3:C6:71:2B:A4:63:A6:D3:B7:51:95:E6:12:42:D4:FB:0B:08
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 090B
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/n0fDxnErpGOm07dRleYSQtT7Cwg.roa
Signing time: Sun 07 Feb 2021 11:55:49 +0000
ROA not before: Sun 07 Feb 2021 11:55:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9244
IP address blocks: 61.247.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 7 11:55:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9F47C3C6712BA463A6D3B75195E61242D4FB0B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:07:cc:e3:47:98:d9:dd:0a:af:78:2c:e2:
78:1b:79:91:9a:8f:71:22:dc:f9:59:2a:0b:46:ec:
9a:80:ea:0e:16:1d:d3:2d:33:b0:92:21:90:48:44:
83:8a:ca:81:de:a9:48:05:40:48:ca:95:17:3d:ad:
d8:54:26:96:53:00:65:6c:a8:2d:2a:e3:30:0f:26:
dc:0e:93:8d:c5:cd:c2:cf:f4:17:6b:42:99:5f:58:
72:43:6d:de:22:f1:56:dd:73:a6:35:03:72:f9:b8:
0f:ae:04:93:90:f9:e2:a4:22:1f:b7:f2:27:06:bb:
28:02:e0:1b:88:48:4b:c3:4d:45:b1:f6:42:ac:b2:
a8:e5:90:91:19:82:12:d9:5b:82:6d:ed:6b:91:83:
8d:b5:8a:c4:85:d1:bd:38:97:8f:9f:29:bc:3a:24:
b4:41:dc:7c:71:bd:6c:8f:5b:6b:0e:db:8c:10:2a:
c9:9a:89:25:36:90:a5:69:30:59:f8:e2:f1:9b:03:
75:5c:8c:22:07:03:e8:98:78:e7:3e:fb:75:a1:19:
ad:f2:2d:e5:d6:a5:9a:95:11:19:dc:86:2b:06:ea:
cb:a3:7c:af:f4:a2:85:cc:37:8e:53:3a:c1:61:58:
d4:6f:17:92:0f:6e:0e:88:05:44:c8:1a:c8:51:a1:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:C3:C6:71:2B:A4:63:A6:D3:B7:51:95:E6:12:42:D4:FB:0B:08
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/n0fDxnErpGOm07dRleYSQtT7Cwg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.247.160.0/21
Signature Algorithm: sha256WithRSAEncryption
76:57:a5:ce:24:10:5e:46:97:34:4c:25:38:19:bc:db:40:34:
e5:38:16:3d:63:03:63:27:74:bd:52:61:9a:ca:a8:2a:20:ed:
75:62:97:a2:58:8e:6f:25:35:9e:d1:d2:b3:55:64:c6:fa:a4:
18:d9:65:5e:4d:8d:13:57:87:ec:0d:5d:e8:af:b3:cd:f9:23:
f5:e8:a0:25:6b:78:78:94:8d:4a:67:ac:8f:18:14:bd:53:d9:
be:c5:11:19:23:b9:65:8f:f5:dd:54:21:1d:e5:c3:48:2a:b9:
4e:d1:83:05:9d:7a:e4:8e:79:a8:9c:17:c9:9b:68:e8:1a:0f:
b7:60:d4:65:76:45:d7:81:68:cb:93:78:76:26:2f:e6:bc:52:
d5:2c:4d:76:82:9c:13:08:f5:33:e0:29:b6:9b:58:23:71:f3:
b1:e6:ca:ff:3a:43:c7:9c:ec:ed:d3:12:e1:06:a0:a8:7c:ae:
95:62:80:2b:34:c7:8a:53:34:cd:fb:c7:e0:6f:08:ab:0e:0a:
32:48:00:1b:a5:4c:f5:d4:59:84:7b:e7:9e:79:e2:ee:c8:b1:
a5:dd:7b:d4:d3:a0:9e:31:f7:a8:b7:b9:6a:21:26:30:20:e3:
4b:6a:62:90:2e:b1:93:79:d3:1a:11:1e:be:33:56:97:4b:65:
c8:44:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-fra.rpki-client.org