Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/wxIST2brYHBueFm6NTDhxqdYEf0.roa
File: wxIST2brYHBueFm6NTDhxqdYEf0.roa (raw, json)
Hash identifier: 7uvIIrOFMJAn4Kju94uPocdxF5S+4or6+JnDVxEg6eY=
Subject key identifier: C3:12:12:4F:66:EB:60:70:6E:78:59:BA:35:30:E1:C6:A7:58:11:FD
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 09C6
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/wxIST2brYHBueFm6NTDhxqdYEf0.roa
Signing time: Wed 29 Sep 2021 02:36:47 +0000
ROA not before: Wed 29 Sep 2021 02:36:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9244
IP address blocks: 61.56.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 29 02:36:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C312124F66EB60706E7859BA3530E1C6A75811FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:8e:2c:f3:8a:a4:2f:30:0b:8a:40:1e:47:
c9:0f:73:5d:a7:c6:3e:6e:22:df:9f:08:72:6a:34:
62:81:6e:9c:aa:7e:52:79:76:43:f8:76:5c:07:66:
6a:71:e1:97:0a:c7:d2:10:80:be:f9:25:f5:20:e5:
30:98:3c:3f:eb:32:01:29:25:22:7d:4d:29:1a:45:
94:9c:bc:1e:3e:74:45:cf:dc:e6:fe:bf:47:c2:2d:
eb:ac:6d:66:ed:81:1a:fd:f3:85:27:74:20:2d:19:
7a:55:4b:4b:74:88:11:47:20:51:e7:fd:dc:31:bc:
d5:6e:af:09:e6:fd:88:f1:f7:1b:8e:6a:8c:b2:c8:
ca:b6:78:4c:3b:39:d8:82:5b:c9:84:19:de:6d:d1:
69:42:f5:29:62:0d:a2:37:1a:85:4c:03:07:15:e2:
b9:51:a4:d7:dd:27:5b:75:5e:21:21:00:c1:f1:09:
17:8b:0e:8c:5f:9f:ac:d3:4a:be:20:08:a3:a7:82:
11:bb:2d:81:81:01:c3:1b:51:c1:df:9f:35:fc:da:
74:47:d2:5e:e6:6d:8f:b6:83:8e:56:a8:ff:28:d0:
0c:ba:70:cd:31:54:27:f0:6e:a7:ec:5d:ba:55:bc:
29:ab:b4:d1:ff:4d:f2:56:0b:56:87:fb:fd:62:7c:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:12:4F:66:EB:60:70:6E:78:59:BA:35:30:E1:C6:A7:58:11:FD
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/wxIST2brYHBueFm6NTDhxqdYEf0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:dc:ef:1c:7f:cc:77:0f:ce:4c:9a:10:32:50:98:b7:f1:c1:
71:06:6d:38:58:11:4b:10:99:3b:00:fa:ac:f5:a5:8a:0f:8c:
7b:9b:34:20:f6:dc:c3:9b:b9:43:08:d0:ea:27:79:7e:6e:56:
3e:0e:ac:10:d8:72:0d:5a:88:45:f5:0c:ed:46:d6:1c:af:89:
d0:df:14:64:1a:4c:a9:d1:25:56:ba:f3:a0:69:d3:3d:a5:4b:
3f:28:20:d2:8b:cc:ba:6d:1c:90:d9:69:19:70:e7:db:c4:47:
7a:e8:93:56:68:24:f4:5a:5f:60:40:66:a5:cb:3e:5c:41:21:
75:32:f5:c5:60:84:bb:72:44:13:dd:0b:7a:87:56:4c:ac:9f:
99:e0:77:a6:35:bd:71:3e:77:6a:2f:39:4d:7c:12:8b:b7:dc:
7d:99:3b:2e:d5:5d:3b:db:cd:f5:63:ee:bc:85:1d:45:30:bb:
d1:62:3b:62:dd:61:72:0e:61:2b:df:38:fc:cf:2e:96:2c:34:
bc:02:b4:ef:53:5f:64:91:7a:c4:de:f4:ac:1b:9a:c8:c3:a1:
46:98:e5:03:1f:66:3f:65:9a:b5:56:37:1f:55:b3:52:ba:f1:
89:1d:ab:55:2e:45:ad:16:68:81:64:67:c1:d0:e9:15:de:14:
77:93:50:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org