Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/BDSwMpaYbWjMx_qLl0yWQWEGPxI.roa
File: BDSwMpaYbWjMx_qLl0yWQWEGPxI.roa (raw, json)
Hash identifier: NGCTO/rd0t9Wx+aBZilaCIWcTb0Yv1i6RncJQCEbTHM=
Subject key identifier: 04:34:B0:32:96:98:6D:68:CC:C7:FA:8B:97:4C:96:41:61:06:3F:12
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 08E2
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BDSwMpaYbWjMx_qLl0yWQWEGPxI.roa
Signing time: Sun 07 Feb 2021 11:53:34 +0000
ROA not before: Sun 07 Feb 2021 11:53:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 210.69.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Feb 7 11:53:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0434B03296986D68CCC7FA8B974C964161063F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:39:4d:9d:e0:b0:36:8d:14:92:e2:85:41:
17:95:a7:eb:2b:2f:60:70:99:dd:e1:8b:49:94:d7:
d4:2a:5b:85:64:f0:60:35:d4:a0:08:e0:b0:03:87:
ed:62:98:8c:7f:e8:24:76:49:87:33:83:38:24:a2:
93:e9:ac:d1:93:73:aa:71:24:57:ad:b2:ef:31:91:
c5:6a:b7:68:0d:bf:7f:4c:ae:67:19:c0:db:c0:58:
ab:d7:23:a3:b1:37:ab:d3:29:8b:8a:65:dc:cd:c2:
82:70:98:a3:89:6d:d1:8b:9a:93:39:eb:3a:6a:88:
fb:df:ad:80:13:1b:97:3c:58:2e:7a:10:be:67:70:
f3:a8:8d:fa:78:ca:98:59:80:3a:ce:cc:82:9b:d6:
5e:66:0a:57:3e:b1:a7:15:a9:c9:42:f5:90:1a:cf:
c2:a9:25:d3:bd:1c:93:23:59:cd:53:de:24:19:df:
da:51:e1:0b:57:7e:4a:84:3a:ad:9f:c3:b9:cc:15:
36:5a:ca:b2:d8:2f:ab:a5:b6:5f:0f:84:e8:0a:c1:
23:fc:fa:df:fa:fa:ed:b1:ea:17:44:1d:63:1b:0a:
8b:7e:ee:fc:70:99:af:b1:ee:94:3f:b5:34:6a:64:
67:a6:18:63:0c:3c:14:25:39:5b:47:c7:4d:7d:dc:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:B0:32:96:98:6D:68:CC:C7:FA:8B:97:4C:96:41:61:06:3F:12
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BDSwMpaYbWjMx_qLl0yWQWEGPxI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:5f:d2:e1:4e:62:22:8d:69:59:d4:3a:65:e6:54:b6:f0:5f:
22:1f:2e:af:0e:83:5f:94:69:89:da:bc:a9:47:07:8e:d1:06:
dc:58:8b:75:18:8a:5f:90:dd:21:01:09:08:3d:a0:ea:12:6d:
53:ff:12:8a:ca:6d:81:27:2b:1d:ce:dc:0f:c8:6f:89:16:ad:
dc:41:6e:95:3c:0f:41:79:e5:ee:ea:a1:10:7d:ef:1e:eb:68:
9e:dc:44:91:54:d9:f3:fb:3f:8a:1c:52:11:84:e7:15:9b:e8:
13:c3:db:53:be:6b:53:95:f0:a3:32:49:21:72:02:9d:74:d6:
0e:4f:dc:33:42:31:5f:0c:1c:f3:cc:4c:81:d8:26:9a:c1:f8:
e4:59:ef:e6:f2:c3:c4:68:e4:90:5a:2f:ac:ef:d2:e1:6c:1c:
de:f7:9b:e4:0c:79:ce:40:fb:9f:37:a5:46:d7:02:05:62:24:
ec:ef:ab:1b:06:d5:6f:d8:2a:fa:e1:3c:b0:53:7a:01:c9:28:
0f:29:57:2f:8b:c7:20:79:b0:b6:c3:81:08:d4:99:99:20:5e:
a4:e9:70:d6:4e:cb:e8:66:6c:4a:df:34:10:1e:70:71:0c:42:
92:d3:e9:a9:48:e0:c6:bb:66:16:3a:08:aa:87:03:3d:91:f0:
fd:b4:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org