Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5_u0UzXjgTIymzyY1Lk5OvkC_5U.roa
File: 5_u0UzXjgTIymzyY1Lk5OvkC_5U.roa (raw, json)
Hash identifier: NIsz6k9g8XmUk1AGnjKpNQGznF6mZpdqxwlwhWe6ahQ=
Subject key identifier: E7:FB:B4:53:35:E3:81:32:32:9B:3C:98:D4:B9:39:3A:F9:02:FF:95
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0785
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5_u0UzXjgTIymzyY1Lk5OvkC_5U.roa
Signing time: Tue 29 Sep 2020 09:51:34 +0000
ROA not before: Tue 29 Sep 2020 09:51:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 114.140.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 29 09:51:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E7FBB45335E38132329B3C98D4B9393AF902FF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:74:c4:14:0f:5c:98:90:80:a6:6b:15:fc:
f6:40:eb:3b:9c:46:e8:a9:df:f7:52:8e:d7:ff:96:
20:43:cd:e2:c1:92:b9:ea:01:c3:46:7f:c3:ca:05:
d8:b9:ba:e6:d2:ae:43:34:6e:91:f7:72:80:38:4e:
64:34:e1:1e:65:a0:ce:46:3a:eb:b0:69:72:33:dc:
aa:a7:1a:1a:3d:80:98:d2:28:ff:48:90:7e:15:1e:
4f:5f:27:d5:36:5c:07:65:b1:80:18:42:d9:f9:24:
60:40:98:eb:3d:b9:42:a5:09:e2:6e:c3:40:a0:df:
46:e0:ec:56:7a:e6:7c:4b:c0:35:95:5b:07:a9:a1:
b4:b0:da:28:7b:43:51:5d:cc:78:66:4b:dd:ef:c1:
06:92:05:73:62:bb:1b:d3:e2:c2:d5:5d:7f:d7:f7:
c9:d8:fa:55:04:71:93:29:6a:02:e8:02:a8:29:a9:
5a:5e:ff:79:d2:ab:37:d5:5d:b3:97:e4:3c:0f:76:
07:74:6b:b4:f3:54:ce:2f:e4:04:1b:18:80:02:32:
da:fd:14:ec:f1:8b:84:0d:34:3c:2b:7b:0d:13:76:
f0:2a:01:32:3b:86:f9:20:2d:8e:7d:62:43:37:66:
a8:8b:42:84:db:35:ca:b5:e5:e9:7b:31:72:21:05:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:B4:53:35:E3:81:32:32:9B:3C:98:D4:B9:39:3A:F9:02:FF:95
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5_u0UzXjgTIymzyY1Lk5OvkC_5U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.140.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:19:a5:e0:60:18:06:79:45:a3:70:79:81:10:06:2c:ae:26:
26:2a:a3:05:30:0c:fe:17:bd:97:cc:01:d3:e4:a6:30:7e:20:
0f:03:73:53:a6:b3:d6:d8:5a:91:0a:42:e9:59:76:18:12:19:
6c:13:3e:88:19:6d:59:1f:b8:ad:73:7d:7d:78:b9:c2:1d:b2:
c9:fe:e1:08:4b:25:11:a3:f0:5f:1d:34:b1:32:83:b9:be:bc:
67:45:47:d6:27:e4:89:46:e8:34:3f:41:35:f8:84:6c:91:37:
ed:bb:83:cf:97:c6:8c:3b:4c:27:89:52:60:ca:66:ee:82:75:
44:ff:20:7b:fc:c9:49:47:6c:5b:9e:85:9e:1b:89:97:48:b7:
93:01:b9:01:61:78:e3:da:90:2f:39:26:0e:36:b4:e3:c6:1a:
a3:37:93:bc:04:cb:4f:e4:d4:b6:57:af:26:f6:46:34:f6:73:
4d:8a:68:5e:25:f7:7f:52:57:02:b1:0f:77:c0:c3:5b:5e:5e:
27:00:5a:ef:ff:05:5e:a0:55:29:0b:03:4d:0e:ac:9a:c7:78:
34:92:20:58:bf:0c:e2:96:f6:55:41:3e:27:23:86:ab:1f:bf:
1d:c3:b2:88:4c:d2:08:73:93:81:1f:47:12:f5:18:2d:84:97:
4b:6a:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org