Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/TB-C5ah40ntFfEKHp263McpLZ1U.roa
File: TB-C5ah40ntFfEKHp263McpLZ1U.roa (raw, json)
Hash identifier: X7BT9cDhvHkhehprwn6AulkJwYCDcORkWfXWkB9zrq4=
Subject key identifier: 4C:1F:82:E5:A8:78:D2:7B:45:7C:42:87:A7:6E:B7:31:CA:4B:67:55
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0A87
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/TB-C5ah40ntFfEKHp263McpLZ1U.roa
Signing time: Thu 15 Sep 2022 02:38:42 +0000
ROA not before: Thu 15 Sep 2022 02:38:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4782
IP address blocks: 163.29.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2695 (0xa87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 15 02:38:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C1F82E5A878D27B457C4287A76EB731CA4B6755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:0b:ff:2f:44:6f:e5:85:4f:76:01:06:a5:
f3:11:8f:d1:b9:9c:a6:68:cf:12:f8:7f:85:0a:16:
4e:29:c3:a1:4c:68:56:32:8c:ff:a7:9e:af:ec:bb:
21:cb:fa:7d:86:52:5c:ce:83:40:1a:e2:6f:36:00:
15:16:83:85:6a:fb:10:2c:bc:b8:74:30:8d:74:e0:
b0:6e:29:55:9d:c4:fc:0a:32:ce:54:9e:f7:51:bb:
86:11:fb:10:4d:06:45:ca:29:32:d3:a1:bc:c5:62:
64:d7:d2:65:6e:f5:19:ad:15:16:65:4f:2c:ab:94:
8a:48:ff:23:1b:81:01:22:dd:48:bb:df:72:f8:27:
78:aa:f5:7f:f2:8d:d7:ee:54:87:f5:64:30:ec:58:
00:49:15:15:6e:7f:43:5f:7e:d4:a2:79:c4:d9:b7:
7b:9f:15:09:61:5a:7d:35:2f:64:3a:ac:1d:8b:fc:
92:52:85:89:bf:74:75:07:19:04:72:9c:71:88:f5:
4c:d7:a5:03:7e:ca:eb:c6:da:90:8e:6d:45:16:af:
d2:7f:4e:18:cb:7f:d5:3f:bf:9b:4f:e8:ad:cb:e4:
be:be:0f:d2:3f:5d:64:bb:4f:90:92:e8:af:a6:a4:
5e:b9:be:66:aa:3b:f9:fa:34:3a:7a:09:da:3a:a1:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1F:82:E5:A8:78:D2:7B:45:7C:42:87:A7:6E:B7:31:CA:4B:67:55
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/TB-C5ah40ntFfEKHp263McpLZ1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.29.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:ca:be:6c:23:8e:05:91:51:78:02:d5:09:75:75:5c:a3:f9:
3d:6e:0c:2d:fa:52:d1:fc:df:b8:96:9e:e2:75:90:b2:80:e5:
c8:3c:02:bd:16:35:ea:c2:d5:34:9d:eb:b5:b3:05:b0:d2:55:
d2:a0:9b:95:9d:b8:41:4b:5b:3f:87:28:bf:5d:93:89:c1:e0:
d7:a2:3f:b0:f8:90:2e:69:78:4a:21:e2:8a:5f:d7:bc:83:10:
c1:0b:7c:6e:3e:cb:4e:8f:fe:c5:1b:0d:65:cd:9d:18:f5:df:
b3:6e:83:ab:47:ce:df:89:46:7f:d8:9e:d4:a8:28:ee:44:10:
70:e3:9f:dd:f3:09:bf:20:ea:ab:24:e4:d2:50:f3:a4:9b:1f:
f1:60:44:4a:c2:77:47:1e:ff:a1:7d:87:7a:ad:1a:2e:4b:a0:
dc:4d:1a:42:ff:a6:bc:35:33:54:5c:23:f1:63:75:21:93:f4:
4c:a9:13:00:db:ef:e9:84:13:32:a8:8b:d9:bc:a8:28:64:c1:
39:07:68:24:bb:dc:06:fc:25:98:ef:7d:34:25:1c:20:fa:02:
b9:7e:fd:dd:47:c5:2e:fd:f3:c5:37:c0:21:db:24:b9:f5:6c:
7b:5d:71:b0:72:78:04:c2:52:fb:40:5f:06:47:56:5e:86:6b:
b4:11:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org