Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/JlBOUuXo9lX52gu1jSMmtREgJfQ.roa
File: JlBOUuXo9lX52gu1jSMmtREgJfQ.roa (raw, json)
Hash identifier: GFSXn7h7bRkJOMMhNN/dXgaHl2k7qZKyZBTX2UHrIzo=
Subject key identifier: 26:50:4E:52:E5:E8:F6:55:F9:DA:0B:B5:8D:23:26:B5:11:20:25:F4
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0786
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/JlBOUuXo9lX52gu1jSMmtREgJfQ.roa
Signing time: Tue 29 Sep 2020 10:03:53 +0000
ROA not before: Tue 29 Sep 2020 10:03:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 210.241.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 10:03:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=26504E52E5E8F655F9DA0BB58D2326B5112025F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:37:2b:20:8d:a4:e7:e2:08:6f:ac:b9:6b:e1:
76:f0:67:41:08:19:8f:25:d0:3e:36:82:ab:e0:d7:
ea:59:80:0b:5c:0f:fb:c8:64:26:da:eb:f8:54:05:
ed:84:b4:70:38:29:f2:92:05:b3:47:15:2e:10:eb:
fb:52:35:b4:f3:2e:6e:f6:d0:85:e2:63:6b:90:24:
24:0f:c6:71:e8:22:2d:68:74:41:d8:a9:ed:9b:26:
8b:20:63:3c:d1:79:25:c7:f5:79:67:24:56:ca:de:
87:7b:1f:6f:d2:6b:38:5e:45:29:1c:b4:c1:22:e4:
f7:d3:e2:ed:d9:c2:f2:ee:5b:94:7b:aa:84:29:4a:
e7:0c:b6:2b:3c:70:dc:30:d2:cb:9f:b5:8b:76:d3:
2b:69:e9:f5:46:eb:db:13:66:c8:23:3c:22:dd:27:
48:94:47:97:72:52:9c:4d:58:32:41:59:01:27:a8:
1b:69:80:0a:10:f8:19:d5:cb:b5:9b:eb:f4:e3:75:
24:a5:70:a7:6f:56:c4:2f:c2:67:d0:56:e3:64:5f:
08:de:0b:0f:cf:a5:3d:4b:03:2d:d7:0d:90:db:be:
92:b6:d8:f1:23:31:dd:f7:f3:a0:29:ea:c6:7b:34:
99:ed:3b:e4:9a:48:7f:06:4f:b9:da:14:fc:c5:8a:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:4E:52:E5:E8:F6:55:F9:DA:0B:B5:8D:23:26:B5:11:20:25:F4
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/JlBOUuXo9lX52gu1jSMmtREgJfQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7b:c8:9e:01:4a:50:5a:57:a5:1c:2d:34:e0:e7:5e:e9:45:11:
0f:dd:4e:a2:bf:c1:7a:7e:77:85:12:61:ee:b6:60:ee:aa:90:
8d:f7:77:0b:b2:8b:72:72:61:73:c6:4e:5b:cf:72:15:47:2a:
d1:31:c6:f3:95:1a:b5:03:72:50:22:1d:40:04:10:d1:5b:23:
84:a2:50:dc:59:fd:ab:c6:7b:0f:8f:89:86:7c:42:78:8f:7c:
75:22:6d:2e:fa:10:d9:9c:38:56:9b:b1:5b:62:f1:48:6c:69:
fd:e8:5a:01:a5:01:87:ba:c7:a4:a2:33:3d:9a:41:71:c5:9e:
4e:11:c6:40:e2:d8:fc:45:77:1a:6c:47:66:15:b7:10:d0:6d:
10:07:a5:3c:1f:c6:79:f1:74:43:8e:8e:df:3a:c0:18:22:a0:
c6:ce:22:bb:ae:d7:f8:fb:4f:a6:9e:4c:20:df:3e:4e:9a:8b:
cc:7e:5d:3e:d8:f9:c1:79:50:2b:23:a4:b8:35:b6:df:75:fe:
1f:2c:06:57:72:cb:51:5d:80:c0:de:3c:e8:d1:43:e4:1a:21:
d1:f2:5c:d3:76:02:15:25:e9:76:64:09:26:e0:22:3a:fa:da:
01:39:b6:d5:fb:02:22:21:a3:97:98:77:ec:6a:ca:57:7f:ce:
9f:81:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org