Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/N7G3grv85cuV0oJGQFmzBlk6Gvo.roa
File: N7G3grv85cuV0oJGQFmzBlk6Gvo.roa (raw, json)
Hash identifier: DOWb5K1WbWOLw2/FvBGERu//BOV0x2fBDg2oVNf5bs8=
Subject key identifier: 37:B1:B7:82:BB:FC:E5:CB:95:D2:82:46:40:59:B3:06:59:3A:1A:FA
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 08E8
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N7G3grv85cuV0oJGQFmzBlk6Gvo.roa
Signing time: Sun 07 Feb 2021 05:55:53 +0000
ROA not before: Sun 07 Feb 2021 05:55:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 27.51.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 7 05:55:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=37B1B782BBFCE5CB95D282464059B306593A1AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:58:87:5e:27:73:0e:cd:f9:c0:85:9e:22:
c1:1c:12:7a:8e:9b:c2:4a:fa:07:16:75:96:13:47:
0d:95:d3:54:23:18:14:10:fa:3d:fc:91:fd:3a:af:
a6:5a:eb:2e:30:74:ae:ed:a6:7a:d1:84:bf:94:bf:
ab:df:72:90:5f:7b:66:24:fd:ec:c9:8a:20:2a:a5:
8a:40:5e:ef:09:cf:f3:6d:65:8e:66:34:6b:09:f8:
ab:d2:28:ed:0a:ff:f4:2f:7d:45:8a:2b:d7:f4:15:
ff:6a:71:3a:84:eb:d4:8d:d9:c6:e4:b2:1e:95:92:
3a:98:0e:79:a7:0f:7b:5b:60:dc:56:53:78:27:31:
4c:c3:18:cb:53:05:c6:71:2c:3e:ee:a0:86:35:8e:
8b:9a:aa:74:c5:0f:2a:34:3c:42:fd:31:05:9a:eb:
ce:f4:92:1c:49:c5:32:5f:7f:a2:29:6d:c8:cb:0b:
fa:7a:f3:a5:3a:4b:be:ac:4a:f0:71:45:40:67:2b:
13:8c:6f:f2:00:09:3f:a2:16:c6:25:71:0a:3d:e6:
15:6e:e9:a1:a7:88:3e:71:0f:44:37:1a:cb:4a:3f:
1a:58:7b:73:75:55:b2:79:6b:8e:69:9e:3e:83:93:
bf:5f:1c:6a:77:b7:09:b1:b8:22:9a:13:d2:e4:c7:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:B7:82:BB:FC:E5:CB:95:D2:82:46:40:59:B3:06:59:3A:1A:FA
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N7G3grv85cuV0oJGQFmzBlk6Gvo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:23:86:93:bb:b1:e2:ba:d9:84:e6:9e:c5:34:72:ef:1d:fa:
c3:fb:b6:a1:c2:97:94:2b:0b:b2:c0:f4:fc:22:09:49:2f:28:
0f:aa:b9:50:ea:91:08:98:99:f9:ec:88:fb:bc:21:bb:46:11:
78:c4:91:2c:e4:e0:65:da:2e:d6:64:9c:db:8f:8b:6e:1a:ae:
e4:9f:50:ea:af:b5:8b:6a:e8:02:4d:10:a8:1c:17:8f:84:45:
30:4a:62:21:8f:19:0d:ac:79:fa:0b:fe:ad:88:6b:34:75:83:
63:51:89:7e:06:d5:0d:e3:96:5e:e4:f6:41:3c:21:aa:00:ef:
20:5d:6e:99:d0:45:16:e4:54:be:df:1c:60:10:6c:ed:9f:51:
18:a1:42:b6:20:a6:96:f6:93:c1:63:c9:ab:af:ef:4b:32:3d:
53:38:c0:8f:98:5f:f1:bd:d6:77:5e:65:10:0b:bd:bb:77:b2:
40:4b:e6:16:de:58:b1:44:f9:49:db:be:72:96:49:0b:31:94:
c6:24:b9:eb:fd:c8:a0:1a:06:fd:a6:55:63:72:ee:bd:24:bc:
03:b3:a7:f9:88:03:7b:06:e8:5e:b5:86:13:53:dd:cb:30:0f:
25:1e:23:a9:46:c0:c0:2f:1e:16:12:57:d8:2a:7f:1c:27:c5:
31:fd:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org