Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/Gx9JAM2nz3tU-S_LGdz7JeCUtTk.roa
File: Gx9JAM2nz3tU-S_LGdz7JeCUtTk.roa (raw, json)
Hash identifier: OteefMz1I/qsc/zLYvl1038qLaVVGiCqcC3cwVLzvg4=
Subject key identifier: 1B:1F:49:00:CD:A7:CF:7B:54:F9:2F:CB:19:DC:FB:25:E0:94:B5:39
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0A49
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/Gx9JAM2nz3tU-S_LGdz7JeCUtTk.roa
Signing time: Thu 15 Sep 2022 02:42:00 +0000
ROA not before: Thu 15 Sep 2022 02:42:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18411
IP address blocks: 61.56.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Sep 15 02:42:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B1F4900CDA7CF7B54F92FCB19DCFB25E094B539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:63:90:8a:b4:ad:2d:21:52:ba:7a:a7:2e:
ec:18:59:75:05:69:ba:57:f1:35:c8:1a:a2:70:fa:
c8:50:49:86:dd:72:b5:60:95:34:a7:49:fd:0a:dc:
60:d7:0c:c4:50:99:f7:b7:2a:36:bd:49:d9:ca:cd:
0d:dd:aa:a0:bf:53:99:41:5a:09:06:7e:e9:8b:10:
d2:96:1d:96:26:2b:2a:9a:b4:d0:8f:2c:16:37:51:
1b:8d:df:76:dd:e5:e5:58:34:62:eb:77:df:81:93:
bb:60:a1:0e:8c:54:27:e0:e0:a9:68:17:9b:e3:bb:
e8:10:a6:48:f9:57:ee:3f:46:c7:09:cc:37:c3:d0:
ca:26:c8:ea:bd:88:ae:8a:b3:e5:90:75:19:1c:1e:
66:ea:63:26:a5:cd:2b:da:3e:12:52:0a:7f:d1:c0:
29:b2:d8:5b:45:23:07:6b:1d:dd:fa:16:49:db:37:
42:7a:00:6d:17:cc:fc:82:58:fa:22:1a:0d:4a:76:
7e:9b:18:f1:b6:e8:f3:ef:c0:17:61:da:9d:6f:70:
b2:6f:72:fd:ce:e7:68:73:ac:92:d7:69:ba:f5:68:
41:fe:69:02:d4:1c:27:c3:41:a6:10:35:4c:28:c5:
fa:51:5c:74:5a:04:54:5d:2e:1b:14:12:d6:63:50:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1F:49:00:CD:A7:CF:7B:54:F9:2F:CB:19:DC:FB:25:E0:94:B5:39
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/Gx9JAM2nz3tU-S_LGdz7JeCUtTk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ad:16:05:87:ac:93:f6:57:2c:81:9d:99:b4:00:7f:d6:e5:
dc:f7:7f:5b:27:33:74:0d:4c:d9:1d:fe:d1:fc:f3:d5:22:11:
3f:5f:65:70:7a:7e:f2:ec:8f:d1:4a:1f:31:82:39:6e:5e:7a:
fc:ab:a2:da:f1:76:06:a3:5d:f0:2b:0c:49:72:cc:88:13:16:
4e:f7:2c:60:3c:67:95:a5:88:d4:c8:61:22:f3:e3:42:56:0d:
39:70:2e:a0:eb:fa:ac:20:1b:37:89:ac:c3:62:92:7d:22:50:
ca:9a:8c:35:a0:d5:4b:44:27:03:3e:12:65:97:08:93:64:a6:
cb:79:66:41:fc:8b:ff:54:62:a0:91:e6:7e:e2:27:e1:41:3c:
40:ec:b4:33:a3:7a:4a:f8:a3:d0:8f:70:34:7e:f8:35:6e:3b:
d5:b8:4b:df:63:b1:f0:65:f2:44:a4:e6:a8:5a:79:6e:9d:2f:
e4:6e:a3:ae:69:58:b4:86:8a:ee:13:94:8a:00:6d:b5:81:33:
28:ed:28:6f:0f:45:db:49:bb:5f:f1:b1:17:5e:1f:b8:7f:95:
6a:49:d4:84:f6:0c:6f:6c:96:a7:f2:0a:eb:00:f6:ef:c2:3f:
9e:c7:85:44:40:72:ac:72:b1:31:f0:28:4f:a7:25:14:2a:65:
53:c3:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org