Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/HiVfnfR8J2euYai8tuHgY2u2qNY.roa
File: HiVfnfR8J2euYai8tuHgY2u2qNY.roa (raw, json)
Hash identifier: bMszxQyDQorisr3tTSAeqdne/QohANbB1jwXf8gjHf4=
Subject key identifier: 1E:25:5F:9D:F4:7C:27:67:AE:61:A8:BC:B6:E1:E0:63:6B:B6:A8:D6
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0A41
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/HiVfnfR8J2euYai8tuHgY2u2qNY.roa
Signing time: Thu 15 Sep 2022 02:50:14 +0000
ROA not before: Thu 15 Sep 2022 02:50:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10135
IP address blocks: 202.168.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 15 02:50:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1E255F9DF47C2767AE61A8BCB6E1E0636BB6A8D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:33:a6:4f:be:90:ba:df:0e:2c:7f:1f:bf:
f3:53:7e:dd:6c:c3:44:b2:b2:72:9f:2b:2b:4d:cc:
42:93:82:a4:be:45:ce:05:3c:b9:dc:f0:12:57:b0:
88:6a:fa:e4:72:59:df:47:9a:c8:4a:8b:d1:d9:71:
c4:75:e8:53:07:de:73:65:9e:50:cd:55:79:fb:65:
a6:e7:ef:29:3b:6b:19:4c:d1:78:72:db:44:f7:40:
83:cf:00:73:92:b4:3e:6e:d4:cd:f6:5a:84:b7:3b:
00:93:25:26:93:06:06:4c:59:a1:f5:fe:9e:d9:2d:
9f:1c:09:21:94:4a:8f:2e:65:53:10:48:74:4a:4f:
2c:11:95:d9:3f:02:aa:25:10:b2:c7:82:e4:5f:c9:
ce:7b:58:a4:fa:a8:56:a8:70:d1:c1:2c:3d:97:24:
cb:39:c9:f0:7a:58:c1:eb:ba:43:a3:5b:ca:ea:e2:
b6:0e:ba:c3:f7:ff:f6:88:a9:68:0c:81:2d:40:05:
31:0b:46:74:5d:17:98:06:2e:7e:5c:27:b2:3e:92:
71:07:a4:aa:7e:a5:5c:e6:4b:a6:6b:8a:f2:06:fd:
97:59:bf:7c:b5:4d:2a:5f:21:b2:74:d4:95:a6:15:
9a:2b:00:2f:db:a2:70:41:90:15:3a:b3:47:4c:08:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:25:5F:9D:F4:7C:27:67:AE:61:A8:BC:B6:E1:E0:63:6B:B6:A8:D6
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/HiVfnfR8J2euYai8tuHgY2u2qNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.168.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:b5:94:ee:12:25:83:ba:2b:87:b1:95:c9:1c:20:b8:75:1f:
fc:90:39:38:02:67:c3:87:d4:03:74:95:05:53:12:6d:33:a6:
56:f5:09:38:2a:f9:05:10:db:b3:e1:cf:4d:30:7e:c3:66:49:
31:11:84:3b:36:e9:88:cb:a5:f5:ea:d1:da:bf:4e:2d:58:94:
b6:b2:95:4a:19:e9:69:5f:78:c2:3a:fb:9c:12:cc:d7:4b:71:
b6:c2:10:e5:01:72:8f:f9:8a:5e:cb:5e:4a:b2:04:e1:76:d6:
17:03:32:bc:9c:14:e2:db:b3:0d:fd:15:05:10:70:0f:20:63:
a3:7d:e9:34:22:54:70:48:3d:39:93:57:f4:4d:ef:2a:c9:d0:
50:80:5d:cc:c8:01:2d:a7:da:c1:ba:9f:e7:77:0f:9a:22:55:
1a:40:aa:7e:d0:60:39:62:be:11:9e:87:f2:c5:e3:0e:4b:9c:
4f:54:5c:29:c3:17:f9:70:28:67:a6:e8:b1:16:4a:a6:de:a6:
df:aa:ee:33:8f:9c:fd:9c:4b:f9:c7:38:b7:e8:d1:7c:69:b9:
b7:20:ab:0b:cd:a9:b1:49:46:46:00:45:4f:a9:53:9d:e7:d0:
3c:b6:0e:7b:ec:96:63:ff:ef:1e:6d:a7:c7:6f:43:7d:d1:f3:
d5:59:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org