Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/2b51T_x5xhAP1c6WMxOn_IM4vng.roa
File: 2b51T_x5xhAP1c6WMxOn_IM4vng.roa (raw, json)
Hash identifier: xlL2qvCQOj4BFXiSHXDLqwsYDbMFKWApcq8y0O4NRxw=
Subject key identifier: D9:BE:75:4F:FC:79:C6:10:0F:D5:CE:96:33:13:A7:FC:83:38:BE:78
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 078C
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/2b51T_x5xhAP1c6WMxOn_IM4vng.roa
Signing time: Tue 29 Sep 2020 10:03:55 +0000
ROA not before: Tue 29 Sep 2020 10:03:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 223.200.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 10:03:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D9BE754FFC79C6100FD5CE963313A7FC8338BE78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:4e:c3:89:35:31:c8:13:12:b3:9f:0f:26:
34:0d:46:d9:9b:fa:a2:77:eb:67:f2:e7:e1:87:8f:
ef:2f:3f:d7:f7:41:d0:b5:ee:70:60:f9:33:50:f1:
86:d9:6e:46:6f:79:7d:0e:86:95:d5:49:24:56:7e:
b1:a3:92:80:04:81:ad:c5:88:f0:4d:f5:1e:c9:0f:
93:0d:0b:31:75:98:0c:fe:3e:00:6c:c3:cf:55:03:
58:95:f6:c1:cc:98:53:1d:f8:be:cb:96:dd:de:9d:
ce:6c:46:d6:5a:f0:4e:bd:de:a3:e2:0c:6c:fd:17:
b2:bc:26:05:d8:90:64:5a:1e:d8:5c:40:79:dc:9b:
8d:36:2d:80:ed:b6:fe:a7:f7:ee:13:c3:f9:00:21:
ec:35:98:38:d4:0b:37:92:65:78:4e:34:20:a1:09:
6b:6e:a1:d8:0d:d6:14:f5:1f:24:e6:4c:2c:99:e3:
54:bb:3d:71:9c:9c:e8:67:1a:e1:5e:a6:bd:25:85:
64:c6:b0:fc:36:0e:a0:fd:cb:54:b8:c3:27:ad:28:
32:5d:ab:6c:5a:c8:69:a5:7a:e8:62:2c:ee:cc:32:
ba:73:3a:d6:20:d0:f3:dd:46:8a:0f:fc:92:93:6a:
74:93:9a:5c:3e:a3:54:18:ca:98:4e:8b:05:8a:f9:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:75:4F:FC:79:C6:10:0F:D5:CE:96:33:13:A7:FC:83:38:BE:78
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/2b51T_x5xhAP1c6WMxOn_IM4vng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:e8:3f:c2:89:96:24:d7:3d:1e:57:26:45:c6:3a:aa:33:2e:
3b:e8:fc:a8:ab:1b:a0:dc:29:b4:1f:af:32:0e:d6:f7:c7:6e:
c3:a4:02:30:e6:1b:64:4a:05:9d:7d:1f:23:2f:81:e5:fa:67:
d8:b6:f1:c3:de:cb:66:3a:9a:d7:24:69:27:48:39:60:24:4f:
75:87:ce:e1:8d:6b:a5:9d:0d:93:05:3d:ba:4b:9b:03:fd:0b:
89:4a:cd:a1:b9:db:f5:b1:5e:4c:91:d1:bf:7b:2d:9c:b2:41:
d2:cd:d9:2c:a0:3a:01:8e:da:d1:18:b2:53:5e:a2:d5:85:ee:
d5:92:0f:b0:23:64:ba:fb:15:fa:aa:0e:c3:6b:bb:5c:a0:a0:
97:ff:5e:c0:83:29:77:95:0d:e1:cb:b3:ab:79:74:f5:a8:76:
a1:a5:37:03:a2:75:c0:ce:3c:63:54:51:f8:cd:c1:3e:af:ac:
7d:a7:9f:f8:a8:18:c1:dc:ed:e8:eb:ea:d5:9c:66:32:97:f0:
55:ae:4b:d3:70:b9:ef:0e:14:de:ec:eb:3b:9c:8d:ec:51:af:
0b:c5:9b:13:91:e2:bd:54:31:dd:76:9c:ec:7a:9d:c2:85:a4:
ba:5b:7b:34:11:17:fe:d3:95:3c:13:fc:19:87:1a:d6:20:4c:
68:3e:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org