Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/8LiKESC7quWw55nohNMIw0inwGk.roa
File: 8LiKESC7quWw55nohNMIw0inwGk.roa (raw, json)
Hash identifier: ooi4axYk3YMS0kfW7YzkKANwRi8NRp26FuigSultn84=
Subject key identifier: F0:B8:8A:11:20:BB:AA:E5:B0:E7:99:E8:84:D3:08:C3:48:A7:C0:69
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0A49
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/8LiKESC7quWw55nohNMIw0inwGk.roa
Signing time: Thu 15 Sep 2022 02:41:59 +0000
ROA not before: Thu 15 Sep 2022 02:41:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18411
IP address blocks: 61.56.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Sep 15 02:41:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0B88A1120BBAAE5B0E799E884D308C348A7C069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:0c:be:31:54:bf:22:06:65:7c:98:83:4e:
9b:98:d1:01:a0:8a:6d:59:d4:4a:2b:02:51:98:94:
e6:d5:bc:4c:fe:e6:4d:61:22:cb:44:9f:20:66:47:
8c:e9:5a:9c:23:1d:14:1c:b3:4f:9b:12:cc:2f:98:
8d:0a:72:20:0b:63:dc:3c:c8:8d:00:6c:87:c5:3d:
fc:d0:7d:1e:8f:8b:cd:59:91:cb:dc:cd:8f:2c:7e:
c2:37:03:83:b4:93:f9:36:eb:f4:4c:8b:1a:3a:02:
f8:0d:3f:3e:ac:03:42:9f:72:2e:ae:29:1b:a8:e9:
ba:41:95:b6:3c:f7:7c:f1:c9:d9:e9:46:19:8a:f8:
17:cf:dd:7c:b1:12:e0:b9:db:96:f7:74:ea:4f:67:
3d:5e:4a:9e:e3:01:7d:8b:f7:dc:12:99:db:5c:2b:
cb:ef:f3:98:0b:fc:4e:b1:b7:53:d4:8a:1d:a3:8f:
66:d3:27:4e:2a:5c:27:c6:04:71:8b:1e:93:25:8b:
6b:32:fc:92:5f:58:29:2e:2f:43:7c:43:bc:e0:43:
ee:d0:40:72:99:76:ee:89:ec:85:bd:f9:6c:a5:12:
67:fb:aa:f9:16:e6:e1:37:7a:a3:9a:3c:bb:09:3a:
37:cf:d6:96:5e:ad:06:3f:26:59:a8:d8:2c:3f:3f:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:8A:11:20:BB:AA:E5:B0:E7:99:E8:84:D3:08:C3:48:A7:C0:69
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/8LiKESC7quWw55nohNMIw0inwGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.24.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fa:08:db:c5:4a:53:6a:96:ac:41:2c:e5:d4:52:97:2a:0a:
8c:29:10:73:1c:e2:4f:0e:9e:19:3d:c7:a1:26:90:4f:5e:61:
5f:b0:46:33:c3:c4:ba:67:99:1a:07:9d:b9:9e:79:ac:9b:3f:
d6:4a:eb:a1:e8:be:24:ff:11:34:e8:21:a8:7d:3d:6b:f8:b0:
5a:a9:c9:5e:c9:c1:5c:85:62:2f:ec:8b:9f:b0:1a:03:87:53:
35:34:6f:a7:27:68:b9:b6:bd:fc:3a:d1:41:9d:68:40:98:19:
8c:64:39:03:43:21:93:81:b0:0d:eb:ea:89:6a:f0:d5:00:ed:
b7:b4:3a:42:57:df:cf:eb:35:ef:58:37:01:07:18:c6:c2:1e:
98:44:a7:51:21:d2:b7:00:a8:d6:e1:81:0b:87:dd:5d:6d:77:
97:57:2e:0c:3c:57:93:ad:b4:c1:f9:33:b1:9c:51:d4:ee:19:
32:92:ad:5c:b2:8e:19:6b:25:11:e2:86:9a:22:b3:da:46:87:
fc:c7:bd:6d:94:b3:e3:7b:0d:ce:41:d1:90:82:e4:2d:5e:a2:
17:1b:dd:b9:8d:d4:2e:da:d3:3e:07:1f:03:23:22:ca:18:b8:
83:67:f5:38:29:fd:f7:cc:80:24:55:68:62:8b:f7:46:00:fd:
27:6e:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org