Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vfmLKT1U5MYdxNa7rqWX10DKvu8.roa
File: vfmLKT1U5MYdxNa7rqWX10DKvu8.roa (raw, json)
Hash identifier: NCuObr2gYqLs/UE45uCdT2xZqYgsirKrm0U7QY1Zge0=
Subject key identifier: BD:F9:8B:29:3D:54:E4:C6:1D:C4:D6:BB:AE:A5:97:D7:40:CA:BE:EF
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0A8F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vfmLKT1U5MYdxNa7rqWX10DKvu8.roa
Signing time: Thu 15 Sep 2022 02:42:16 +0000
ROA not before: Thu 15 Sep 2022 02:42:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9674
IP address blocks: 27.240.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703 (0xa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 15 02:42:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BDF98B293D54E4C61DC4D6BBAEA597D740CABEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:69:7d:66:c6:2e:5c:af:48:ba:01:47:47:
9f:94:ea:97:d1:63:8f:2f:08:87:d2:c7:7b:38:aa:
f6:13:53:30:25:0f:07:3c:37:16:db:0f:bd:32:e7:
7b:31:b0:d8:da:68:12:45:53:f3:d0:5c:b5:56:6f:
02:d6:24:0c:0d:a4:b7:80:fb:2c:91:a4:d0:54:f1:
a5:f6:34:13:55:38:c2:54:b5:cf:b4:f3:c6:cf:bc:
85:00:cc:fb:45:d1:b9:12:3c:52:15:75:67:8c:91:
4b:ce:5d:6a:ad:f0:be:17:8c:fd:9a:3b:ef:25:88:
d7:e2:1f:ec:6a:87:ee:3a:3b:1f:8b:cd:6d:bc:fd:
b9:bb:6b:d1:a7:81:a9:74:1f:05:c6:2e:e0:b4:5c:
a5:30:95:4c:e6:c5:61:05:b2:fe:d6:a9:08:b0:0d:
a9:94:47:0b:54:91:2c:84:a6:8e:87:40:a2:de:03:
ec:b9:fc:7d:71:8e:74:37:f6:ac:e0:58:7c:0a:f3:
c3:05:96:ba:97:6f:4d:b3:37:fd:c8:1e:a9:9b:1f:
67:c4:b9:c9:94:c1:bc:03:36:08:ef:27:cc:f0:f9:
a1:e0:51:6a:56:98:7d:69:ca:e7:ba:97:dd:4c:59:
c7:ee:c0:d3:e3:50:16:d3:29:f9:c1:d9:fe:9f:f4:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:8B:29:3D:54:E4:C6:1D:C4:D6:BB:AE:A5:97:D7:40:CA:BE:EF
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vfmLKT1U5MYdxNa7rqWX10DKvu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.240.0.0/13
Signature Algorithm: sha256WithRSAEncryption
53:ab:16:15:7d:2b:95:11:70:28:8a:55:06:f3:6a:f9:69:a6:
27:7a:80:f8:0d:cf:36:b1:c4:5e:35:b6:29:06:d2:3a:2f:d6:
b1:2c:a9:7d:f4:a3:25:c6:6f:a9:76:49:be:c6:d0:6c:a4:a8:
17:54:02:13:80:13:74:1a:11:1a:63:7b:88:94:60:26:97:83:
6c:c3:a0:af:6d:09:b8:81:e5:9f:ef:dd:4d:43:fa:84:d9:78:
6b:fc:1f:5f:5f:d8:31:04:55:f4:fd:b6:8e:b5:83:02:51:9f:
7d:16:2f:0c:b5:3c:c0:11:91:9d:69:a3:e4:92:c9:9d:ab:9b:
e8:7f:33:c3:17:29:40:c1:b9:22:0b:1a:43:90:12:a3:7a:21:
1d:1b:eb:a9:ab:6e:de:c4:2a:6f:3a:78:5c:f5:c2:b9:65:f0:
ae:0d:ec:74:1a:83:fe:11:24:f2:0a:0f:0b:a6:98:7c:3b:cd:
0c:83:69:ae:3d:cf:5e:78:2b:a7:ab:eb:c0:e1:58:23:d4:fa:
47:16:36:9e:1d:8e:bf:fd:e9:c3:82:ab:e3:c8:7a:4e:46:7b:
fe:f5:97:97:02:6e:fb:a7:a0:7d:10:2a:f0:a2:ad:65:cf:b9:
42:a8:5f:3c:cc:de:c9:46:2d:76:2d:9b:91:d0:6b:47:d1:9f:
bb:2b:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org