Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/JjrG2hVQsMwJszmY5rwVFZh8gP4.roa
File: JjrG2hVQsMwJszmY5rwVFZh8gP4.roa (raw, json)
Hash identifier: TWwopnA1KBY2LqZs3LQuk3CvZ6t4etR79Hzi2Wyc5jw=
Subject key identifier: 26:3A:C6:DA:15:50:B0:CC:09:B3:39:98:E6:BC:15:15:98:7C:80:FE
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 078A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JjrG2hVQsMwJszmY5rwVFZh8gP4.roa
Signing time: Tue 29 Sep 2020 09:51:36 +0000
ROA not before: Tue 29 Sep 2020 09:51:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 39.8.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 29 09:51:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=263AC6DA1550B0CC09B33998E6BC1515987C80FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:db:1e:19:21:35:6c:78:43:df:4c:e2:1b:
ff:bb:c6:bc:e5:22:bc:0c:93:b6:22:2e:ce:8e:ec:
56:fd:5b:b5:d2:48:17:46:f6:1a:6e:98:c1:3c:0d:
21:db:c3:fa:9c:b9:e8:63:cd:32:c5:74:a8:d4:53:
9a:ff:e2:89:19:c4:72:70:d2:f8:8a:33:0c:8e:7e:
33:9f:6e:24:95:41:45:cb:c8:c0:12:10:4e:09:3a:
33:9b:78:1c:ce:cc:ab:37:43:19:f8:a1:0c:f7:af:
be:c0:b5:03:be:0d:43:0d:11:b2:21:3e:94:93:74:
d2:9b:27:3f:cf:a1:6c:63:64:d8:68:94:4c:5c:b2:
33:a3:0a:23:4d:d9:49:b9:60:4a:21:9e:65:b5:bb:
40:6a:64:75:49:19:a9:bc:b1:f7:1d:f7:f7:00:ce:
f1:8f:a7:48:99:cc:1b:50:95:23:a2:0d:59:b7:1d:
0e:0d:ce:c4:54:f2:c9:73:c1:06:65:88:32:8b:5d:
b0:d9:fd:53:59:93:a7:c3:5a:85:3c:73:95:c5:3d:
fd:ab:ab:45:b4:0d:08:14:62:25:c1:4f:01:c9:78:
0c:7a:6e:a7:bd:f5:e8:0c:62:02:8b:7c:58:15:9a:
76:10:89:69:da:0e:c0:ba:69:e0:e0:6d:1b:c8:0d:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:C6:DA:15:50:B0:CC:09:B3:39:98:E6:BC:15:15:98:7C:80:FE
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JjrG2hVQsMwJszmY5rwVFZh8gP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.8.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c2:71:e7:04:6a:c0:da:90:43:08:d9:b7:d6:a2:56:98:53:37:
7d:46:fa:30:22:ad:f3:80:8b:90:7f:1b:c2:2d:5b:c5:ca:87:
8b:ee:e3:21:6c:b0:bf:95:5b:c9:8e:19:90:fd:58:ff:b2:f3:
c5:7b:84:2b:ed:6e:65:a1:4a:08:82:9c:2c:32:b9:42:0e:9d:
82:53:7d:59:10:6f:aa:9a:a6:3e:ba:ac:b5:77:f0:d9:e3:38:
07:ca:1d:e5:23:9f:bb:3c:5d:9d:15:60:d9:4b:f7:48:51:61:
a9:81:9f:a4:d9:16:39:9b:1c:2f:cf:c5:a2:6d:47:d1:5a:19:
78:b3:59:6e:e6:fd:16:35:28:d8:04:e8:e4:73:b3:62:40:b5:
7e:eb:4b:0a:7a:81:b7:fd:ee:31:91:0c:96:c2:6e:ff:e4:50:
6b:71:54:20:c7:ba:41:39:25:c5:1d:b6:10:cd:d0:9d:5f:bc:
ce:f6:f4:55:6b:03:3f:7e:10:e0:4b:48:db:62:3d:d9:fd:4b:
1f:2c:3f:9b:54:6c:5f:2b:7b:fe:cb:7b:8a:af:b8:10:21:cd:
66:37:6d:e1:99:42:c0:53:f7:42:c4:1e:49:56:89:2e:d1:41:
a6:6c:7f:e1:6f:8f:e0:e0:4e:71:55:09:f6:6b:d5:17:33:68:
2c:5c:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org