Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/1UrBvq5y3gjmCNlFVXHsBA0DEtU.roa
File: 1UrBvq5y3gjmCNlFVXHsBA0DEtU.roa (raw, json)
Hash identifier: 9aEy/jkLOx+b51Ee7yNG2zoxOuYGR46TLYdtl2t1VDs=
Subject key identifier: D5:4A:C1:BE:AE:72:DE:08:E6:08:D9:45:55:71:EC:04:0D:03:12:D5
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0954
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/1UrBvq5y3gjmCNlFVXHsBA0DEtU.roa
Signing time: Wed 29 Sep 2021 02:52:41 +0000
ROA not before: Wed 29 Sep 2021 02:52:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 10135
IP address blocks: 115.85.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 29 02:52:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D54AC1BEAE72DE08E608D9455571EC040D0312D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d7:1b:e3:55:62:75:37:db:09:57:64:85:7d:
a7:b7:3f:81:3c:a5:53:28:e8:c3:dc:3d:0d:f1:36:
0e:c3:0e:0a:83:14:98:1b:ba:64:61:9e:5f:94:52:
d2:68:90:34:d8:c5:fe:a6:31:ab:53:d8:43:ae:8f:
8a:d9:95:bb:14:62:dd:7d:7b:5c:86:6e:8c:be:a6:
03:88:a4:e5:fb:45:f7:00:26:cf:9d:27:4e:89:8f:
38:20:ec:17:d6:26:eb:0e:13:6f:34:c5:d4:2f:92:
6d:41:8a:b8:f4:64:c8:da:cf:c8:ef:25:c8:48:40:
bc:8c:bd:d7:e9:df:fb:11:56:2b:b3:1a:54:7d:0e:
62:76:7c:ab:ea:40:bd:68:72:bd:c9:0f:7c:d2:26:
ab:80:53:4a:74:35:27:7d:ae:e0:92:65:f0:d0:14:
8a:d5:ad:3f:58:c6:2a:cf:96:96:0a:1c:2d:85:a6:
09:3c:2a:50:e0:55:31:cb:30:b4:47:4f:5a:9e:90:
d6:44:5a:7e:47:91:ef:5c:1c:6f:14:bb:65:2b:eb:
dd:a7:af:4f:48:df:88:e5:19:d6:7b:a8:00:51:16:
98:fe:bb:2f:e0:d9:8d:28:0a:02:86:fd:df:82:c3:
7d:99:d2:0f:e4:e2:b7:83:0c:64:66:b6:50:02:f8:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:C1:BE:AE:72:DE:08:E6:08:D9:45:55:71:EC:04:0D:03:12:D5
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/1UrBvq5y3gjmCNlFVXHsBA0DEtU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.85.144.0/20
Signature Algorithm: sha256WithRSAEncryption
cf:66:81:98:39:cb:38:63:77:75:ac:93:b3:c5:c3:f8:38:d0:
2f:9b:aa:b2:38:6c:f4:ee:5c:b8:c3:58:4e:01:aa:67:94:dc:
8b:1f:da:88:07:f2:6b:9b:01:42:6c:c8:be:c6:5f:91:6f:3c:
e5:43:ea:d9:16:a1:f0:df:44:de:d0:35:e3:c2:04:46:18:ce:
1f:dc:52:42:72:5c:5f:e5:c0:25:dc:7a:96:e1:f5:48:f4:9a:
0d:1d:dd:3b:49:82:4f:d1:f2:83:e4:f5:f5:98:ef:17:04:2a:
13:da:c3:5e:6c:2c:32:a8:37:2a:49:a0:30:6a:44:39:c5:dc:
82:f6:8f:e5:b7:69:5a:88:36:14:f3:22:60:73:0a:ba:87:48:
20:ff:4b:f9:4a:3d:3d:0a:3a:85:89:ba:48:a5:4f:85:f8:d6:
b5:3e:60:f5:4b:46:01:81:7e:97:8e:52:b5:58:53:88:5f:4c:
0b:74:46:a6:fb:3b:3d:10:1c:88:ec:63:5d:2d:11:e8:0f:f3:
d1:91:da:6c:d7:d6:c9:52:3b:46:a9:84:0b:07:14:f5:bc:1d:
53:d2:45:31:a7:6d:ca:2a:05:c0:13:f8:e5:db:ab:03:2b:d1:
0f:ad:e3:48:f8:5c:18:d0:d4:ac:82:cd:5b:77:a0:14:25:be:
ea:c7:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org