Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/q8veHCbpZ-pUPANd9c1aC5TqjPw.roa
File: q8veHCbpZ-pUPANd9c1aC5TqjPw.roa (raw, json)
Hash identifier: Qatzs3TUBAn8iM3hY3HgoQRFQVd0TC7Aiyq0515ej4E=
Subject key identifier: AB:CB:DE:1C:26:E9:67:EA:54:3C:03:5D:F5:CD:5A:0B:94:EA:8C:FC
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0A8F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/q8veHCbpZ-pUPANd9c1aC5TqjPw.roa
Signing time: Thu 15 Sep 2022 02:42:12 +0000
ROA not before: Thu 15 Sep 2022 02:42:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9674
IP address blocks: 211.73.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 15 02:42:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ABCBDE1C26E967EA543C035DF5CD5A0B94EA8CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:50:5c:09:40:6d:89:61:57:f5:6c:70:65:
79:4b:08:45:ab:f5:92:25:a4:39:a3:46:9a:3e:43:
bb:88:88:bf:9c:ae:6b:6e:d5:d6:30:aa:7a:38:da:
39:49:b9:fa:4b:f4:64:76:b3:af:81:67:73:de:e3:
a7:34:34:b1:a7:f6:c7:87:f7:c1:f8:93:5e:bf:21:
34:c2:0f:80:07:1e:5f:9a:55:27:92:ff:f5:14:24:
bf:90:3b:90:bb:e0:14:6d:d2:24:11:b2:b9:a5:be:
fe:3d:22:3b:51:5f:7b:6e:6f:87:dc:3b:a2:ab:4f:
42:c4:9a:04:19:58:72:ed:d1:11:78:b2:b8:b1:bf:
cf:c1:fa:43:bf:ed:1d:9e:3f:0b:e3:99:ee:9d:8f:
38:7d:88:d3:0e:92:64:8b:a6:1c:78:95:f8:5d:dc:
8e:59:6d:74:6c:d3:14:d9:96:9e:85:08:6c:53:70:
aa:f0:8f:24:c8:fd:05:72:ed:9b:fc:a6:65:00:99:
3e:be:c6:6b:48:0c:e8:26:e5:3d:72:ba:94:87:f7:
63:03:a3:40:a9:d1:11:dc:12:67:5d:8e:ff:9e:c2:
20:1a:36:54:a8:9c:11:e2:fe:32:9e:9d:c6:57:3d:
d2:f3:fe:8d:2e:db:ad:c3:1a:19:aa:a7:be:b5:64:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:DE:1C:26:E9:67:EA:54:3C:03:5D:F5:CD:5A:0B:94:EA:8C:FC
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/q8veHCbpZ-pUPANd9c1aC5TqjPw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.128.0/19
Signature Algorithm: sha256WithRSAEncryption
92:1c:f1:af:2c:78:e5:0b:88:23:86:d3:7f:f7:73:21:9c:2d:
4c:92:7e:65:11:72:c7:dd:38:f8:2d:11:16:22:15:9f:c1:93:
d1:bb:a6:bd:6d:bb:06:00:d4:2a:87:74:b3:ea:dc:43:da:e0:
fa:17:f1:4c:b8:62:06:4b:51:31:cf:f3:73:fc:96:2d:59:61:
b7:7e:94:3f:df:18:68:0f:4a:5d:26:28:a4:91:08:cf:42:2a:
84:60:d9:eb:43:81:6b:25:a2:3c:56:8b:4b:bc:ab:aa:40:6b:
8c:4e:60:03:e1:e1:bc:e6:8c:45:91:d2:95:dd:eb:b3:78:9c:
74:ac:69:53:bc:08:40:05:87:a6:07:d3:f2:c9:10:b3:33:aa:
39:93:88:2f:c2:20:8d:99:d4:c5:7a:fb:97:3a:7a:3c:cd:fa:
3c:49:c1:bc:74:e7:40:c9:e6:af:29:76:e5:f1:7b:37:05:e5:
b7:a0:c1:a3:3c:f3:77:ce:5a:0c:f6:22:45:56:12:00:16:8c:
50:cd:b5:75:41:6c:42:80:50:70:4b:93:0a:8f:19:08:97:02:
c6:61:a5:87:1f:29:16:b2:4f:3d:8d:62:f3:ae:eb:1e:c4:09:
64:52:be:64:28:6f:90:27:04:27:65:17:b3:0e:a1:78:e0:a1:
ec:e3:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org