Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/t8cUelihcIasln5P_ykCaB3K_ro.roa
File: t8cUelihcIasln5P_ykCaB3K_ro.roa (raw, json)
Hash identifier: yQA+KQrMnUfPmlLz0VSrINAKsd3o9hyxQrvrCvhKPGg=
Subject key identifier: B7:C7:14:7A:58:A1:70:86:AC:96:7E:4F:FF:29:02:68:1D:CA:FE:BA
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0775
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/t8cUelihcIasln5P_ykCaB3K_ro.roa
Signing time: Tue 29 Sep 2020 09:51:45 +0000
ROA not before: Tue 29 Sep 2020 09:51:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18411
IP address blocks: 61.56.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Sep 29 09:51:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B7C7147A58A17086AC967E4FFF2902681DCAFEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:a1:75:4d:47:df:ab:69:ad:af:82:81:a7:
a3:dc:a4:a8:3e:69:bd:78:3b:47:b6:2d:f7:d5:89:
1d:a1:d8:58:85:f8:dc:09:2f:31:2c:09:28:8a:65:
10:18:40:7d:f8:4d:1c:38:c4:6d:62:42:8e:2b:89:
57:3a:99:a5:92:30:21:57:d6:f8:f0:2c:be:b0:e7:
f2:5f:d3:ef:60:1a:d7:e1:d1:96:71:84:ba:31:d9:
53:f1:fc:14:6f:b4:53:9e:29:bd:34:e3:3d:b8:52:
a0:dd:bc:d5:2a:3f:1a:25:e4:a6:c2:1b:17:71:4f:
3a:95:36:96:ea:b0:01:97:25:f7:ad:91:88:18:ab:
af:15:0d:79:6e:d9:15:38:14:de:1b:ea:e6:4e:2e:
1a:e7:9e:29:09:a0:6b:c5:00:2e:56:ee:0d:20:08:
96:54:e2:2a:cd:9d:f7:20:3f:4e:cf:db:7a:4f:a8:
f0:1b:cd:01:33:86:95:da:3e:f7:d2:e2:80:bb:79:
df:9c:c1:3b:02:c4:c8:82:fe:d3:06:6b:30:f6:60:
30:e1:d8:87:2d:28:93:a8:9a:f8:d2:cf:1e:17:6c:
f0:56:ae:8f:3a:95:9c:29:09:e2:b2:8d:d8:6d:c6:
05:77:7c:79:76:2c:23:25:9b:2a:20:f5:6d:98:93:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C7:14:7A:58:A1:70:86:AC:96:7E:4F:FF:29:02:68:1D:CA:FE:BA
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/t8cUelihcIasln5P_ykCaB3K_ro.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.25.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:59:e8:b8:cd:03:7f:48:b4:08:7e:f2:1c:9b:ce:45:9e:6d:
d5:f0:7c:97:b9:30:85:01:45:69:01:bb:68:34:d1:6a:82:89:
9c:7b:4f:b3:a5:70:28:99:69:b0:09:81:ae:a3:50:47:75:c3:
2a:d6:46:cb:0e:ef:72:27:9e:45:4f:28:49:11:e5:7c:97:80:
12:5a:90:01:27:80:f2:b7:f6:4a:40:8f:ac:1e:47:33:86:7e:
3f:a6:b8:50:5d:26:a0:c4:9e:4b:75:7d:ea:f7:f7:d0:7c:05:
ab:32:a6:16:7c:2f:99:8e:08:63:41:2a:89:a0:c3:b4:e0:9d:
c4:82:12:27:c6:43:8b:b7:ad:44:fd:03:1f:bd:b8:20:97:da:
cd:45:dd:0f:13:14:f5:54:68:60:8f:99:66:35:32:bc:5e:54:
17:a9:6a:cd:2b:72:ec:03:76:a6:93:b2:f5:5a:5a:52:a6:7c:
88:ca:38:e9:61:a4:ef:9d:34:37:cc:2d:ce:aa:71:4f:6f:b2:
e9:e8:48:ec:9a:b9:44:9c:cb:00:7e:f0:12:0b:c4:ee:09:6c:
1a:58:57:01:ba:b0:53:cd:ab:4e:35:ca:03:3e:fe:bb:f5:20:
ec:21:6d:a6:70:c8:c5:15:ff:35:0f:4a:d3:fa:2d:3c:2a:5f:
5f:aa:38:82
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD
NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yMDA5Mjkw
OTUxNDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI3QzcxNDdBNThBMTcw
ODZBQzk2N0U0RkZGMjkwMjY4MURDQUZFQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7PaF1TUffq2mtr4KBp6PcpKg+ab14O0e2LffViR2h2FiF+NwJ
LzEsCSiKZRAYQH34TRw4xG1iQo4riVc6maWSMCFX1vjwLL6w5/Jf0+9gGtfh0ZZx
hLox2VPx/BRvtFOeKb004z24UqDdvNUqPxol5KbCGxdxTzqVNpbqsAGXJfetkYgY
q68VDXlu2RU4FN4b6uZOLhrnnikJoGvFAC5W7g0gCJZU4irNnfcgP07P23pPqPAb
zQEzhpXaPvfS4oC7ed+cwTsCxMiC/tMGazD2YDDh2IctKJOomvjSzx4XbPBWro86
lZwpCeKyjdhtxgV3fHl2LCMlmyog9W2Yk1szAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUt8cUelihcIasln5P/ykCaB3K/rowHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ
pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv
bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy90OGNVZWxpaGNJYXNsbjVQX3lr
Q2FCM0tfcm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgZ
MA0GCSqGSIb3DQEBCwUAA4IBAQDLWei4zQN/SLQIfvIcm85Fnm3V8HyXuTCFAUVp
AbtoNNFqgomce0+zpXAomWmwCYGuo1BHdcMq1kbLDu9yJ55FTyhJEeV8l4ASWpAB
J4Dyt/ZKQI+sHkczhn4/prhQXSagxJ5LdX3q9/fQfAWrMqYWfC+ZjghjQSqJoMO0
4J3EghInxkOLt61E/QMfvbggl9rNRd0PExT1VGhgj5lmNTK8XlQXqWrNK3LsA3am
k7L1WlpSpnyIyjjpYaTvnTQ3zC3OqnFPb7Lp6EjsmrlEnMsAfvASC8TuCWwaWFcB
urBTzatONcoDPv679SDsIW2mcMjFFf81D0rT+i08Kl9fqjiC
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org