Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/54JMIHV9f-aw8osWGRrP9_7Hy2Y.roa
File: 54JMIHV9f-aw8osWGRrP9_7Hy2Y.roa (raw, json)
Hash identifier: Oa7gvYLUwx7v10R/mctkY00oKcGvhQDRix69uP3JPvk=
Subject key identifier: E7:82:4C:20:75:7D:7F:E6:B0:F2:8B:16:19:1A:CF:F7:FE:C7:CB:66
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0A8F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/54JMIHV9f-aw8osWGRrP9_7Hy2Y.roa
Signing time: Thu 15 Sep 2022 02:42:12 +0000
ROA not before: Thu 15 Sep 2022 02:42:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9674
IP address blocks: 39.8.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 15 02:42:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7824C20757D7FE6B0F28B16191ACFF7FEC7CB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:66:c7:02:05:14:cc:0b:1c:36:f2:70:0b:
bb:f2:90:fc:57:14:51:9b:2d:c7:5b:ae:6c:1c:e0:
a5:0c:bb:d6:6e:e4:b7:16:f3:11:bf:2e:6b:14:25:
67:a2:5a:78:09:91:87:9a:4c:ed:ba:cf:9b:01:5b:
86:9c:e0:f2:a0:91:36:a7:ff:1b:2f:ad:47:89:65:
77:27:77:5c:7c:df:7e:4a:ea:7e:c3:70:b6:17:b3:
ce:63:83:a9:33:c2:24:c1:ab:e6:65:56:17:f1:e9:
72:f6:05:02:e2:b8:cb:aa:6d:23:07:1b:2c:d8:e0:
94:bb:d3:95:79:c2:47:c2:9f:9a:a1:ed:b0:8a:f4:
db:53:ca:58:21:29:6a:21:c0:bc:5f:fe:fa:6e:fa:
90:9e:ab:20:8b:eb:c5:ab:27:a1:ce:0e:e9:3d:a2:
10:ec:4c:76:1e:76:3b:ae:5f:75:49:4e:a0:cb:37:
7e:b6:db:f9:f3:18:c6:42:d7:a5:7b:d0:19:bb:75:
52:42:65:41:15:45:97:dd:50:56:98:c3:cf:e1:1f:
97:65:c2:38:2b:2c:6b:b5:26:22:b1:1c:e7:34:f5:
b5:5a:4f:ce:02:c7:eb:06:35:4a:e0:4c:e8:22:c3:
53:bf:0f:b3:f1:00:52:a2:68:95:3b:1e:62:6c:2e:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:4C:20:75:7D:7F:E6:B0:F2:8B:16:19:1A:CF:F7:FE:C7:CB:66
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/54JMIHV9f-aw8osWGRrP9_7Hy2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.8.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5e:fc:37:06:fe:33:57:8f:46:65:f8:e2:f6:e2:4c:fc:37:54:
4d:75:ad:2b:ff:c3:58:ba:33:ce:86:97:fa:8f:a2:b1:2e:c3:
e8:18:de:0e:7d:de:91:d4:c5:b1:a5:f8:28:6d:30:6a:13:1c:
dd:fb:f3:ae:e0:72:e5:d6:d8:d4:62:aa:b1:84:e2:b0:cf:7b:
16:26:57:fa:09:61:12:64:79:97:d9:75:c9:14:84:58:d4:10:
ea:c9:8b:b6:ee:69:a5:2c:12:4d:46:8b:b7:cb:d4:5c:4b:37:
fd:01:fc:5b:ad:33:dd:3f:7a:39:ee:ad:3d:f8:3c:22:b6:88:
25:c8:a1:56:cf:e6:82:5a:5c:e9:2e:ae:35:89:c4:a5:91:29:
7a:01:50:49:f7:7c:9f:71:6f:a5:4b:57:7d:5d:ac:a4:be:ab:
ed:cb:3d:96:b0:c3:77:85:e3:75:33:b2:c6:90:cc:ce:56:6e:
b8:84:e9:8f:70:19:06:c4:0d:dd:de:fc:6b:9a:62:bb:ce:9f:
1d:7d:5a:b3:96:e2:ce:c5:89:7c:97:33:d4:00:4e:a2:35:44:
c8:e0:36:2f:51:bd:60:2e:56:9d:34:c0:b3:e0:eb:11:70:3b:
6c:47:dc:14:38:54:e6:f0:77:98:33:97:da:ef:35:40:56:11:
81:d8:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org