Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Y4t96BKAXKr75084_8Nq7DPW_V0.roa
File: Y4t96BKAXKr75084_8Nq7DPW_V0.roa (raw, json)
Hash identifier: vQ+hb36h6TJtZPOu6mJiI/1IqssZp7961U1wRZCqXbI=
Subject key identifier: 63:8B:7D:E8:12:80:5C:AA:FB:E7:4F:38:FF:C3:6A:EC:33:D6:FD:5D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 08E4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Y4t96BKAXKr75084_8Nq7DPW_V0.roa
Signing time: Sun 07 Feb 2021 05:55:14 +0000
ROA not before: Sun 07 Feb 2021 05:55:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 211.77.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 7 05:55:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=638B7DE812805CAAFBE74F38FFC36AEC33D6FD5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:42:e4:a2:06:da:51:af:17:75:34:68:97:
cc:48:6d:00:b0:c1:00:ba:83:6b:e3:50:ac:de:c5:
1a:5d:6e:7b:e3:12:37:98:4f:bf:92:b4:23:b2:70:
08:5e:0d:72:27:77:4a:90:1c:da:97:52:bd:cc:f2:
55:2a:2c:cc:fe:41:6c:c3:a3:e3:d2:79:86:1e:16:
93:3f:31:8b:f4:93:6b:f1:d9:03:39:56:67:d5:c1:
85:77:ad:6f:c2:00:49:c7:14:03:51:b4:54:f8:fd:
24:89:ee:29:af:59:b8:8b:dc:b9:d7:c5:60:39:2c:
54:0e:02:07:f2:03:21:b4:93:90:22:ac:e2:d2:9f:
9e:c2:8c:7d:26:3d:b1:e5:d5:8d:b5:89:dd:55:20:
38:64:bb:90:cb:77:d5:e7:8b:3d:cc:4e:dd:51:18:
bb:e5:b3:74:1f:6e:6c:d8:20:92:20:28:57:14:9f:
5e:e2:b3:46:3c:43:5c:90:9a:31:1d:73:48:4b:2e:
b7:65:35:56:9e:78:f2:68:32:28:ba:11:c7:0b:81:
7c:c6:d2:cd:7b:61:80:da:1c:7b:f2:97:cc:ba:55:
bf:ae:9b:09:39:6c:3d:73:99:12:98:5d:7d:69:ff:
ac:47:6f:20:f7:9e:bc:0e:fd:8b:6a:12:f8:10:9d:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8B:7D:E8:12:80:5C:AA:FB:E7:4F:38:FF:C3:6A:EC:33:D6:FD:5D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Y4t96BKAXKr75084_8Nq7DPW_V0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:2f:1b:f6:c3:7c:9c:af:be:d4:81:09:2e:7e:98:d7:96:72:
2b:d9:c8:d0:14:52:4b:e3:3e:b4:d8:1d:21:c3:ed:2e:38:6b:
88:b8:1b:f1:f9:65:19:89:f8:a0:b9:61:cb:bd:19:d5:96:0d:
0f:74:61:e8:1a:8f:3b:17:ed:f2:8c:7b:61:c5:8a:75:8f:b0:
44:45:f3:ef:d7:3b:40:88:29:79:d9:63:73:24:cd:c7:05:c1:
28:5e:1c:c7:2d:96:bb:66:60:3e:99:b1:54:8a:39:bb:24:d6:
e4:89:aa:e4:25:dc:37:0f:ab:54:2e:e2:09:7b:76:14:f7:a6:
fa:75:57:16:5b:e1:dd:ca:06:f1:14:36:f7:72:ea:35:46:3a:
5d:07:12:35:f1:8e:bf:37:92:1d:72:79:1b:73:39:72:dd:9a:
69:d1:cc:43:dc:7a:4d:02:02:ac:48:90:1b:b1:36:2f:76:1b:
0f:5e:ad:4f:d2:36:3d:e8:22:81:a0:55:cb:db:e7:08:f0:3c:
46:2f:e4:fb:62:ff:46:7e:ad:00:6f:ce:32:20:be:96:b4:16:
8a:6c:e9:17:44:c0:47:6a:9e:8c:c3:80:23:28:6f:28:dd:bf:
89:80:f9:af:b9:87:24:d7:ce:a2:5d:10:ae:a9:84:72:e3:0c:
10:eb:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org