Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/BTKEuf2un8P2ZZznAvXHNfnQbjg.roa
File: BTKEuf2un8P2ZZznAvXHNfnQbjg.roa (raw, json)
Hash identifier: I+1CU6bIzIVPgZ7aO6sVjb6md5Rc+YS6hQMpJwCPP5A=
Subject key identifier: 05:32:84:B9:FD:AE:9F:C3:F6:65:9C:E7:02:F5:C7:35:F9:D0:6E:38
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 078B
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BTKEuf2un8P2ZZznAvXHNfnQbjg.roa
Signing time: Tue 29 Sep 2020 10:03:54 +0000
ROA not before: Tue 29 Sep 2020 10:03:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 2001:4420::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 10:03:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=053284B9FDAE9FC3F6659CE702F5C735F9D06E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:fe:2d:39:69:16:82:f5:4c:2d:88:05:b1:
19:ca:12:11:d0:d0:23:23:3b:a8:93:50:b7:8a:8f:
62:ed:06:11:05:55:b4:83:e7:66:cf:c1:3b:ad:d1:
e9:37:1b:99:24:08:54:2a:92:b0:54:d9:58:b4:80:
85:a1:bc:ea:6e:8e:e5:33:92:c9:ff:e2:bd:51:f9:
0c:4f:c4:6c:c0:e3:e6:32:c3:47:bb:48:34:a5:e8:
bb:2e:df:38:2a:36:7a:82:c0:25:24:00:2a:55:e6:
db:6a:8c:5c:f5:6f:17:88:15:bd:01:f3:28:fe:8e:
9f:c4:ac:46:a0:f2:3f:d0:6e:8e:66:d0:98:f5:17:
c1:26:45:48:ab:9e:a2:88:f1:d9:8e:3f:49:62:f3:
03:3b:4e:cf:61:07:06:63:c2:53:18:6e:5d:b9:7a:
20:8d:0e:4a:45:53:c1:45:4c:d9:2a:8d:5f:bd:2c:
3e:5c:65:10:84:4e:0a:de:18:86:2e:ce:6c:33:ad:
c3:19:3d:f4:59:db:29:94:71:0d:f7:f6:d5:07:83:
b5:d0:f4:53:a6:26:d6:0b:ea:2e:4e:c3:f6:c2:1f:
ee:ce:d9:37:88:b1:bd:83:54:ff:34:c7:b1:58:a2:
bd:0a:0f:00:e3:55:5d:3a:44:13:77:2a:fa:d9:40:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:84:B9:FD:AE:9F:C3:F6:65:9C:E7:02:F5:C7:35:F9:D0:6E:38
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BTKEuf2un8P2ZZznAvXHNfnQbjg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4420::/32
Signature Algorithm: sha256WithRSAEncryption
5d:05:6b:bc:02:42:38:14:43:81:c4:fc:6c:3f:da:69:6b:e8:
0d:01:b2:14:3a:fb:73:4f:b6:fb:f9:07:38:92:2f:c9:f4:0c:
cc:9c:74:8e:54:db:e2:a3:91:af:e7:67:08:33:bc:ec:26:ea:
ae:3d:78:3b:7e:e5:78:f1:4b:58:e7:01:83:8c:9b:4f:b9:b4:
b3:97:6d:87:1a:e5:6d:3f:7e:37:5d:53:ce:03:ab:e3:bd:d7:
5b:35:c9:ec:30:0f:7d:5a:25:0d:42:39:db:00:63:5b:c7:98:
71:e4:1e:65:2d:5a:93:72:01:59:08:72:70:e3:4c:d4:48:87:
50:1f:7b:47:d8:5f:b2:88:58:0e:bd:52:f0:3c:88:3d:94:92:
94:2f:1b:7d:6d:45:1b:ba:dc:db:67:4d:c8:8f:bf:11:ca:ce:
01:db:a4:71:92:a4:6d:64:ec:5b:5e:08:0e:c4:0e:29:27:3b:
48:18:86:23:26:71:d3:b3:45:af:32:e5:36:0b:97:63:58:f4:
c9:90:b1:89:96:4d:95:eb:b9:92:d5:29:10:9d:59:d8:ec:e3:
3b:a4:7b:64:a8:6c:3b:a2:af:d6:01:ca:18:9e:d4:1e:12:a3:
c4:8b:40:26:4c:ec:f4:9d:b5:e0:a6:7d:eb:75:a4:0a:6b:c0:
be:f8:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org