Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XAGa6pmpAzegU0SP9g_e7C6Tjxo.roa
File: XAGa6pmpAzegU0SP9g_e7C6Tjxo.roa (raw, json)
Hash identifier: MiPyMkLf4IaOtxoHO0uq3TwTfJ7mE9+0/QBPHozfzu0=
Subject key identifier: 5C:01:9A:EA:99:A9:03:37:A0:53:44:8F:F6:0F:DE:EC:2E:93:8F:1A
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0774
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XAGa6pmpAzegU0SP9g_e7C6Tjxo.roa
Signing time: Tue 29 Sep 2020 09:51:45 +0000
ROA not before: Tue 29 Sep 2020 09:51:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18411
IP address blocks: 61.56.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Sep 29 09:51:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C019AEA99A90337A053448FF60FDEEC2E938F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:2c:dc:25:2d:dd:a3:c7:7d:bd:f7:6d:5a:
b8:53:a5:ff:20:e4:ff:b4:e8:d6:bc:73:b2:b2:80:
06:a4:50:54:8d:93:89:70:2b:fa:1c:ed:dd:f9:15:
ff:02:ee:27:44:cc:21:dc:ae:7a:c0:29:23:30:d0:
0b:6d:06:93:6e:e9:38:71:f1:ac:89:5f:fd:12:e3:
8e:e6:e7:b1:99:c4:b7:a3:c4:94:5f:3a:c3:ae:f4:
9c:ac:a7:a2:e0:1b:b4:11:29:15:60:be:7a:dd:5d:
56:aa:f6:42:bb:a6:27:1b:05:7c:8b:d1:9c:85:6f:
bc:8b:fe:d4:dd:47:5b:e2:4d:05:ba:dc:be:d6:15:
82:3d:2d:1f:c3:79:2a:e8:1e:be:e6:e3:f2:a4:52:
f6:f3:c5:da:48:d3:08:9d:83:0e:9b:5c:c1:56:dd:
1e:08:c3:ed:72:62:bb:7b:d1:07:9f:8b:56:26:f0:
47:5a:e5:b1:1c:48:58:2a:e2:29:dd:6f:3f:b1:45:
59:81:64:49:2c:33:c1:ab:c4:79:eb:68:93:74:81:
d6:9a:d8:71:6f:3d:a8:dc:67:a9:36:cf:a9:1c:2e:
32:ad:a2:4b:9a:ce:57:8d:87:70:d1:11:ea:e8:a4:
9e:c6:07:d0:1d:81:fd:46:91:ba:77:3b:08:82:42:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:9A:EA:99:A9:03:37:A0:53:44:8F:F6:0F:DE:EC:2E:93:8F:1A
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XAGa6pmpAzegU0SP9g_e7C6Tjxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:59:a1:ce:fb:1f:42:63:a3:92:a2:86:fa:6f:23:0b:de:65:
51:2a:d3:34:fc:29:8e:ba:9c:dd:0c:f8:b0:c7:9b:d8:3e:0d:
70:a5:c3:3d:12:df:99:98:9a:00:d5:02:0f:ec:16:c6:bd:d0:
e5:d9:ac:1c:6e:fd:aa:56:a5:13:6c:d8:80:71:b2:f6:3f:ad:
a0:42:2d:4d:61:29:9e:47:a0:40:60:40:b5:45:eb:64:c9:cd:
ca:84:43:ad:e2:7e:d4:12:13:f4:70:ef:21:3a:cc:a0:ce:c3:
ee:d8:59:fb:d3:e9:5d:fe:63:dc:7a:c3:59:d8:e7:cd:cb:9f:
8e:55:48:04:09:be:1e:96:0a:63:e8:3d:99:41:81:3f:21:b1:
45:ca:e0:ca:de:75:68:fc:53:b6:90:67:01:07:ea:85:64:f0:
79:e6:1f:f4:10:76:8d:ef:f0:8a:b3:d3:6c:66:72:22:1d:54:
2a:24:b2:3c:82:af:f7:27:24:a4:53:ff:93:ae:cb:d0:b7:3f:
29:9f:48:1b:84:f4:27:e5:8d:da:45:94:01:60:03:f9:2e:e1:
f4:8a:4a:94:09:dd:a2:c3:b9:f7:f6:7c:be:8f:40:e2:95:44:
42:b5:23:03:8c:2e:c2:01:cb:21:6e:7a:1c:b7:2d:9e:d3:6c:
70:65:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org