Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vG_2FS_H2cdqbhj7Corm2-jHfDI.roa
File: vG_2FS_H2cdqbhj7Corm2-jHfDI.roa (raw, json)
Hash identifier: n0F4zSaCCjNIax2q/Gzn7Zcpb6FqxM984BFeMaz4yQc=
Subject key identifier: BC:6F:F6:15:2F:C7:D9:C7:6A:6E:18:FB:0A:8A:E6:DB:E8:C7:7C:32
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0789
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vG_2FS_H2cdqbhj7Corm2-jHfDI.roa
Signing time: Tue 29 Sep 2020 09:51:36 +0000
ROA not before: Tue 29 Sep 2020 09:51:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 27.51.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 29 09:51:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BC6FF6152FC7D9C76A6E18FB0A8AE6DBE8C77C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:9a:0a:82:af:05:05:a4:f3:56:8a:8c:98:
2a:ef:d0:f6:57:51:fb:ba:3f:5c:62:e2:cf:d4:47:
8a:76:c8:e4:f7:6b:5e:83:09:4c:3c:5e:19:a3:5a:
98:8c:13:d9:76:c8:63:ca:ef:e2:e2:fe:33:26:e7:
49:9a:d4:8e:d7:0f:49:14:14:0b:94:86:aa:a3:a9:
12:98:bf:eb:9f:6b:0f:96:bb:eb:fe:a0:2a:46:dc:
93:e0:d3:16:b3:2d:df:2a:1f:57:75:62:6a:2b:32:
b1:21:94:48:f4:24:9d:df:8c:08:89:5e:40:a5:c0:
46:6c:cc:2e:fe:13:72:e3:6a:b0:21:ac:f0:9f:52:
3e:14:7e:c2:fa:4e:ed:9e:ad:ed:70:35:26:91:7d:
2c:d9:78:12:88:77:fe:91:ba:71:ea:a9:10:fe:d8:
13:cb:70:cc:c1:01:e3:1b:b9:b2:1a:4b:0a:e6:67:
02:06:ac:e0:18:ca:37:aa:62:75:0e:39:65:d2:c8:
d6:e9:cd:5e:95:2b:35:b5:3d:f0:81:f2:09:1a:e0:
b8:b8:a9:89:ae:8d:13:d0:c3:d1:a9:d6:d7:70:04:
d4:ac:d7:12:71:e8:79:e6:c6:fa:a1:55:91:5b:50:
82:7f:e3:e3:e0:51:89:df:58:5f:4c:2f:7f:e0:ee:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:F6:15:2F:C7:D9:C7:6A:6E:18:FB:0A:8A:E6:DB:E8:C7:7C:32
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vG_2FS_H2cdqbhj7Corm2-jHfDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:de:c1:c6:a0:fb:c0:7a:4e:d6:98:e0:10:1d:29:47:66:a3:
7a:0d:f7:ae:4c:1d:d6:99:d6:de:47:21:5f:23:08:0c:c7:52:
c8:bf:30:49:0c:e2:13:bc:bf:0a:cf:ab:f7:82:44:44:f1:4e:
cc:29:94:2e:9a:ba:29:6c:c9:f7:0e:bc:ab:5a:b2:c0:7e:0f:
fd:de:80:85:47:4b:15:01:eb:20:d8:57:89:64:fe:ee:68:f5:
33:a8:80:74:1f:c1:46:35:41:48:d5:58:06:25:1e:66:8b:80:
bf:fc:59:1c:66:0a:3f:a6:69:18:4b:41:84:37:7f:64:3e:bb:
64:7a:f4:d3:75:1b:af:d4:e1:81:51:4c:c7:7f:24:1e:8d:dd:
2c:b0:9b:66:57:1b:e4:c3:bd:ae:93:f3:f1:32:7e:79:6c:51:
2e:40:64:9d:09:be:13:bc:55:22:be:f9:40:b6:b6:04:03:b2:
e8:80:ea:ef:2f:41:0d:cc:5e:23:33:af:4d:f8:f5:d3:1f:99:
d3:2d:4a:5f:a4:ab:22:97:ea:87:0b:b2:6c:f3:4f:19:20:18:
33:ad:63:69:0f:1c:35:a4:c6:03:02:84:28:3b:44:8b:57:37:
ce:0d:c7:7d:fd:84:d0:d4:a0:d1:49:92:18:5b:0d:4d:d7:c3:
c5:df:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org