Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/di_5rPwt4hcEfqYxnYWyjxBuXUc.roa
File: di_5rPwt4hcEfqYxnYWyjxBuXUc.roa (raw, json)
Hash identifier: y0DX8VHDQVlV/cljomlzbXiBm2sDgQdVr84jjOLIt2U=
Subject key identifier: 76:2F:F9:AC:FC:2D:E2:17:04:7E:A6:31:9D:85:B2:8F:10:6E:5D:47
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 077F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/di_5rPwt4hcEfqYxnYWyjxBuXUc.roa
Signing time: Tue 29 Sep 2020 09:51:33 +0000
ROA not before: Tue 29 Sep 2020 09:51:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 39.12.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 29 09:51:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=762FF9ACFC2DE217047EA6319D85B28F106E5D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:62:5c:6d:78:f0:3a:4e:af:5f:36:21:a3:
7e:42:c7:bd:c9:0a:af:a5:87:52:19:85:6d:78:03:
70:82:f0:e3:a2:b0:a4:3c:f0:33:da:95:57:5c:68:
8c:88:d2:86:80:86:c6:30:14:cd:09:23:ad:df:e7:
c2:85:c5:3f:22:b1:b8:f4:73:92:1d:cb:45:dd:81:
17:5d:59:6c:0c:47:29:c6:4a:df:51:b3:eb:0f:41:
fc:e9:68:55:11:ba:1d:05:98:e6:d8:c7:16:1b:42:
61:3e:2f:8b:2c:ca:e7:a7:bd:85:97:fe:ce:1a:38:
ca:75:7c:ed:fa:98:df:1d:91:46:01:c2:44:09:b2:
68:f3:51:e9:9f:af:de:35:d5:65:62:22:6b:94:6b:
32:5a:ca:f8:a2:e9:50:36:ec:5b:64:ef:b1:68:c1:
25:c4:dd:73:41:e3:dd:8d:bc:20:49:10:03:16:b8:
f9:d6:75:97:2c:cc:84:3a:58:e2:cd:a1:b9:f3:ba:
2f:2d:bc:8e:2a:24:e0:38:2f:af:cb:f7:51:10:7e:
c2:7a:ee:7e:16:96:a5:3b:c5:6c:bd:f3:6a:8a:91:
42:61:fa:ad:41:30:bc:5d:63:b8:83:27:70:9f:08:
c8:a7:58:3d:e0:ab:78:f7:45:ce:ab:23:01:64:3f:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2F:F9:AC:FC:2D:E2:17:04:7E:A6:31:9D:85:B2:8F:10:6E:5D:47
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/di_5rPwt4hcEfqYxnYWyjxBuXUc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.12.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4f:b4:01:e8:c8:17:75:9d:cd:cc:53:f3:d7:09:0b:c1:89:6e:
21:c8:96:b6:d5:f5:7c:5c:24:97:1c:0d:85:79:d1:04:c5:a4:
57:04:b5:81:83:a1:ee:d7:d7:2d:e2:90:b9:ac:07:b7:af:fa:
af:a4:3b:1d:05:3f:92:12:64:e3:2a:48:9b:03:e4:c4:01:3d:
b8:7a:34:4a:58:60:7d:b4:2a:60:0b:da:87:0d:69:fe:51:15:
aa:48:ce:a2:73:c9:5d:ca:2b:5e:cb:5f:79:08:0b:19:d4:72:
d3:4e:3a:d7:cc:ad:56:e2:3e:16:85:8c:9b:b1:ce:1b:43:c2:
df:85:e0:c0:72:5e:21:4f:97:a2:e8:e0:7a:e7:82:55:00:ee:
56:b3:d6:af:a4:ec:a1:ca:21:44:bd:65:b0:57:1a:56:80:17:
f5:fa:1b:51:82:07:1d:1e:ca:53:1a:f9:bf:5d:83:b8:b8:8d:
c4:e7:a7:97:60:73:74:ab:a3:99:42:23:78:63:36:1b:6c:6e:
44:00:4d:74:d7:06:26:8e:88:d8:6b:72:5d:f1:76:9f:5b:3a:
67:5f:46:b5:82:e6:d0:c2:f3:0a:13:df:78:b2:c9:6c:e9:fa:
67:df:35:7d:df:9d:1c:02:ba:95:c9:99:90:34:5a:00:30:c2:
a6:77:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org