Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Rrqo-zB3ArSKhmhhOL0pTiSVd5c.roa
File: Rrqo-zB3ArSKhmhhOL0pTiSVd5c.roa (raw, json)
Hash identifier: eI6VBwwmltK6/NsuFixWTnwvsUBOUX4k/M/Msdhy7eA=
Subject key identifier: 46:BA:A8:FB:30:77:02:B4:8A:86:68:61:38:BD:29:4E:24:95:77:97
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0782
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Rrqo-zB3ArSKhmhhOL0pTiSVd5c.roa
Signing time: Tue 29 Sep 2020 09:51:34 +0000
ROA not before: Tue 29 Sep 2020 09:51:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 110.24.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 29 09:51:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=46BAA8FB307702B48A86686138BD294E24957797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:46:3c:28:c8:50:3b:46:b8:b3:61:d2:66:
24:28:02:ce:19:76:cd:90:fa:2b:13:a3:a2:88:bc:
47:c5:cd:9f:c8:ed:27:c8:f2:03:78:70:ca:6b:f3:
14:90:94:de:5c:a8:ea:80:19:4e:9c:a2:7b:64:02:
a9:c0:b5:12:7a:b2:2f:26:aa:c3:a2:9e:9c:f8:a3:
89:00:b4:8b:f9:1d:f8:b0:1c:32:02:b1:66:fa:30:
0a:13:d6:d9:d8:f0:ae:2f:71:9b:bb:c0:c6:06:62:
53:53:dc:5d:1d:e0:e0:93:1e:a1:85:2a:fa:81:ae:
33:8a:d9:43:d5:19:16:a7:6b:22:b6:fe:dd:03:fb:
3b:67:f4:15:a3:83:89:f6:dd:b2:10:e9:ce:82:d9:
df:b2:23:49:8f:0d:4e:ba:15:8b:a1:9a:18:66:27:
1a:e2:91:b6:33:c3:59:79:45:97:30:03:81:f3:df:
6a:6e:49:98:68:da:a3:8b:ae:12:45:3c:c2:96:5e:
22:9e:e1:e2:f3:de:38:ce:d4:2b:dc:b6:65:47:e0:
aa:99:83:e6:da:72:35:eb:5c:55:b1:ee:1b:e8:e4:
a1:90:66:a8:83:2e:fb:79:5e:34:8a:c9:77:64:b3:
b5:7a:59:4a:74:fe:f5:04:99:1d:e8:30:38:cf:28:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BA:A8:FB:30:77:02:B4:8A:86:68:61:38:BD:29:4E:24:95:77:97
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Rrqo-zB3ArSKhmhhOL0pTiSVd5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
09:64:ed:fe:46:a0:3f:8e:ac:59:60:2b:93:8e:8d:96:80:e0:
10:5b:f3:d9:cd:b0:d9:f0:a4:24:8d:d8:65:be:1c:83:e1:3b:
d6:be:a3:07:7a:42:1d:90:83:e1:76:26:d3:0b:62:48:54:b9:
9b:dd:d3:30:09:dd:d0:ca:ad:db:56:f9:1e:7b:fa:44:ee:2c:
03:93:d6:40:a2:3d:a0:99:6e:68:16:ac:cb:ae:d6:38:81:b9:
2d:72:dd:10:0e:b1:2b:06:52:db:0e:2c:61:db:2d:cb:87:e3:
5b:7e:c9:b9:1a:a7:b9:94:b5:7b:e0:a2:92:6a:3f:56:3e:2f:
46:c3:4b:3c:4c:73:84:2e:34:40:3e:77:e7:68:a1:69:32:16:
74:9a:19:10:5c:ae:4e:53:28:89:dd:de:a4:e6:fc:05:3a:c7:
82:25:99:66:6c:75:2a:51:60:e9:cf:e0:33:81:eb:30:de:53:
2b:6a:b7:4f:d5:c0:0f:8a:69:52:a2:e3:00:85:eb:ee:ce:93:
73:ce:9c:c5:55:c8:3c:47:d0:17:ae:df:ba:a0:b0:0e:7d:bd:
1a:48:56:bc:27:83:5a:0d:f0:2b:f2:e7:87:63:e4:db:ad:90:
58:19:a2:94:de:18:cd:8a:c4:af:4c:a2:4b:bb:9a:bb:05:00:
23:61:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org