Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/e6AgG1qRWFhQPUUsDcE8p-RrGCI.roa
File: e6AgG1qRWFhQPUUsDcE8p-RrGCI.roa (raw, json)
Hash identifier: 6oISuGx4ya7yXqFDPfzyC7Air9U4SSV1UaOKHQW6/2A=
Subject key identifier: 7B:A0:20:1B:5A:91:58:58:50:3D:45:2C:0D:C1:3C:A7:E4:6B:18:22
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 08EC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/e6AgG1qRWFhQPUUsDcE8p-RrGCI.roa
Signing time: Sun 07 Feb 2021 05:57:11 +0000
ROA not before: Sun 07 Feb 2021 05:57:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 61.20.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 7 05:57:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7BA0201B5A915858503D452C0DC13CA7E46B1822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:63:f6:93:4f:62:96:60:a1:ba:f6:80:f6:
47:de:36:ff:cc:b0:47:06:6b:b6:27:94:b1:db:da:
14:21:a0:7a:84:dd:8f:dc:96:a7:9a:93:7e:32:d8:
ec:53:cd:68:52:52:1d:69:50:ea:f2:7c:e1:16:77:
41:97:fc:a6:06:27:65:94:79:1a:76:c9:74:09:e1:
ae:94:1f:85:a8:09:03:1a:57:12:b8:73:b4:2c:6a:
90:80:5d:30:a3:93:03:c0:4c:7a:c1:c2:3f:57:5d:
93:b6:8c:a5:66:94:f0:82:79:05:7f:c1:05:c2:e0:
07:e2:3e:84:d7:49:d6:f0:1d:5d:fd:29:26:24:56:
33:37:8f:dd:8b:04:be:a9:cb:74:11:48:b7:75:84:
fc:fe:9f:86:c2:94:ee:b8:ec:42:b0:65:5b:ab:af:
89:e3:b4:f8:e7:97:c2:17:14:ba:11:e7:20:4a:e5:
c9:9f:fe:c5:c7:26:01:b0:c3:35:ad:e1:56:ec:fc:
f0:f6:c8:d2:8c:7f:78:e7:fd:84:f5:22:aa:9f:e1:
cd:eb:ce:92:a4:a1:c8:d3:96:15:a3:42:29:46:08:
25:38:e6:85:fb:00:f1:5b:c6:e4:23:02:b2:5a:a8:
78:1e:04:38:08:f8:42:e9:47:2c:d4:59:50:ec:75:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A0:20:1B:5A:91:58:58:50:3D:45:2C:0D:C1:3C:A7:E4:6B:18:22
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/e6AgG1qRWFhQPUUsDcE8p-RrGCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:8a:3e:8a:d6:40:aa:13:80:51:9a:c8:33:39:1d:e1:ef:c2:
32:32:58:50:f6:47:09:b4:e2:cb:a7:b8:ed:6b:63:4a:83:67:
a9:80:5a:89:80:5a:50:47:18:9d:11:cd:94:52:f0:cd:09:41:
69:7f:28:a1:0f:30:e5:55:65:9f:c9:c0:4f:b4:02:c3:d9:b1:
8f:aa:de:a1:5a:af:85:7e:11:8b:79:e9:59:35:78:e5:44:ea:
93:02:9e:60:18:a7:7c:e9:7f:54:99:40:85:8c:f3:31:e8:d4:
86:ea:1b:f7:cd:ed:1a:c0:6a:42:91:55:42:b0:b4:0b:d7:da:
a1:f7:17:93:97:40:04:12:59:fe:0a:00:37:67:b2:e8:55:03:
4b:32:ff:8d:f9:36:86:c3:32:43:4b:40:61:98:89:d0:ba:2d:
42:a0:d1:f5:43:a8:8f:71:e0:47:14:d1:ec:25:10:08:0e:1e:
ae:1b:26:68:52:11:3a:ee:89:4d:93:e6:0b:2a:50:5c:a7:8a:
03:1d:7d:da:28:d9:64:34:31:ec:95:fb:15:30:87:c3:08:ef:
8f:fd:e8:db:12:5b:33:a1:42:08:c8:02:55:80:c7:31:45:9f:
90:cd:43:a3:5a:21:86:44:03:f9:f9:96:91:23:9b:24:80:e6:
5f:7d:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org