Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/WyWTn3fFphdrci6Nd-e6MHUijSg.roa
File: WyWTn3fFphdrci6Nd-e6MHUijSg.roa (raw, json)
Hash identifier: NCnURveBLJpPs3gcU5T1dLkWpK5KbyvDD5VtoMNQPUk=
Subject key identifier: 5B:25:93:9F:77:C5:A6:17:6B:72:2E:8D:77:E7:BA:30:75:22:8D:28
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0993
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/WyWTn3fFphdrci6Nd-e6MHUijSg.roa
Signing time: Wed 29 Sep 2021 02:42:29 +0000
ROA not before: Wed 29 Sep 2021 02:42:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9674
IP address blocks: 211.77.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 29 02:42:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5B25939F77C5A6176B722E8D77E7BA3075228D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:58:34:3a:85:3f:6f:fb:27:8a:72:d3:d8:
71:b4:fd:2e:51:59:91:b3:4d:1c:62:01:3e:2f:5a:
f4:7c:b9:10:d9:83:f3:9a:e9:66:4b:d5:3e:40:f0:
7d:7e:37:6d:bf:2c:9b:bf:e9:06:eb:ad:78:45:50:
73:97:32:91:5c:95:6c:88:4d:c8:16:99:c0:6c:9b:
7f:90:02:ed:d5:b2:b8:da:6b:8a:63:40:58:94:87:
46:a0:bf:61:ab:ee:00:cf:2d:e2:6c:74:29:79:08:
f1:18:21:88:a1:02:de:f1:65:33:87:39:50:4f:6b:
14:01:f0:fe:7f:d0:3e:10:a9:32:0b:2c:4d:ee:41:
13:28:50:ce:62:7f:2d:14:ac:3e:53:c3:1d:4d:40:
1d:06:7d:36:8e:7e:23:53:64:99:2a:13:c8:ff:5e:
39:8f:56:66:fd:c0:88:b4:3a:06:df:3e:31:cb:ee:
f7:ae:0f:8d:d6:76:04:97:29:b4:65:3e:fe:1c:18:
18:57:a2:db:6f:c1:ce:b1:89:e0:3a:13:b9:2a:b5:
09:83:e1:58:8b:10:35:d1:de:d9:90:73:e3:9e:9d:
47:ce:a9:67:92:c4:b0:5e:9e:83:3a:68:dd:1f:ed:
ba:45:7d:e4:dc:85:9b:94:c0:13:b7:75:bf:be:e5:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:93:9F:77:C5:A6:17:6B:72:2E:8D:77:E7:BA:30:75:22:8D:28
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/WyWTn3fFphdrci6Nd-e6MHUijSg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:53:56:c2:7a:34:71:78:a1:0f:46:62:9d:92:49:34:a3:fe:
ed:f4:85:af:9e:b9:09:03:d6:cd:9f:33:d6:bf:a2:5d:5e:73:
a0:07:d7:04:e8:32:17:ee:8f:f4:52:da:ce:59:f6:33:b6:7f:
4b:6d:ba:d4:af:94:be:b7:9c:f6:7f:34:1a:2b:ce:8c:c1:25:
7a:ba:39:53:34:c7:11:51:dc:e2:c9:85:c2:7e:1e:14:b7:ad:
e8:38:4e:ad:cd:09:9d:ce:64:0c:18:36:f6:8b:ad:b3:46:39:
62:20:8f:fb:df:3b:93:78:66:58:32:f7:b0:72:7a:88:19:12:
6a:96:2f:82:be:ff:95:65:83:c3:d7:d2:ee:78:f1:42:b8:22:
72:c3:89:ee:d0:be:4c:72:cb:02:e2:fe:82:5b:3d:7d:3a:9f:
92:56:8e:e2:26:53:6d:d2:12:cc:dc:d8:2a:8b:ae:f4:15:e5:
50:c8:e2:30:de:1c:50:79:bc:aa:d3:e2:6f:c5:d4:37:d7:bc:
42:07:76:15:98:c1:4c:2c:86:39:af:bb:22:97:a7:43:51:7c:
6c:a3:ea:f4:18:f1:92:db:3a:52:40:75:da:8b:1b:e6:ab:1e:
5d:e8:92:70:c5:4a:8d:a4:cb:3d:c8:d6:ae:ed:09:ac:ac:1a:
bc:2d:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org