Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/ZCU_aXcJpRa1FxbBlD4jApLnuNQ.roa
File: ZCU_aXcJpRa1FxbBlD4jApLnuNQ.roa (raw, json)
Hash identifier: 3VoMZBkCK4oAKtWRppFIYFie36g8ZF7wdsC4MqJZe4k=
Subject key identifier: 64:25:3F:69:77:09:A5:16:B5:17:16:C1:94:3E:23:02:92:E7:B8:D4
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 08E4
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/ZCU_aXcJpRa1FxbBlD4jApLnuNQ.roa
Signing time: Sun 07 Feb 2021 11:53:35 +0000
ROA not before: Sun 07 Feb 2021 11:53:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 223.200.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Feb 7 11:53:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=64253F697709A516B51716C1943E230292E7B8D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:14:15:2a:72:15:77:4e:a7:b3:02:bc:02:
54:c0:b1:88:5e:49:96:f9:0b:bd:0d:c0:1b:33:23:
7e:f5:ec:98:16:e6:10:c1:9b:fb:de:02:f1:cb:bd:
a2:9d:fd:0f:ce:8d:dc:02:72:2e:4e:ff:5c:aa:13:
e1:6f:bd:eb:d1:ff:f8:fb:90:6f:e7:42:06:2a:2b:
df:50:27:aa:3d:0d:31:87:e8:ae:8c:b7:8b:0b:3f:
e1:1a:16:8f:02:bb:4c:b1:2f:1b:c2:8e:4d:05:64:
b3:d2:04:7a:ed:4b:c1:8c:1b:56:f3:8a:0f:7f:0e:
9f:61:04:81:61:13:08:df:66:b1:63:14:17:cf:eb:
c2:78:34:71:e9:13:8c:6e:a2:36:99:93:75:20:a0:
6c:de:e2:94:42:90:58:f3:f2:2c:8f:78:fe:89:f7:
a3:61:e5:78:c9:28:a5:f1:4b:14:8c:4e:8b:39:7f:
7b:3e:6b:56:76:6c:cf:32:0e:06:91:79:23:5e:7f:
5d:bc:71:c6:11:ba:4b:6b:19:dd:ca:d8:bc:98:fb:
1b:e3:b3:b4:27:36:ec:1e:5c:cb:e4:ed:b5:8e:1b:
92:3a:c3:fe:fb:20:9f:13:c9:f5:ab:77:04:f1:4b:
36:bc:9a:e4:9b:05:78:91:17:c5:35:31:d6:3f:c5:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:3F:69:77:09:A5:16:B5:17:16:C1:94:3E:23:02:92:E7:B8:D4
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/ZCU_aXcJpRa1FxbBlD4jApLnuNQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:d5:64:e8:f6:18:a1:7c:2c:a0:df:be:4c:15:83:60:2b:02:
c5:0b:ff:84:27:7c:e4:10:51:eb:fe:8d:3b:eb:00:a9:56:b5:
86:90:ef:bf:48:f4:eb:d9:c0:11:0d:de:17:b7:6f:01:bd:8e:
d1:a4:25:e2:db:e7:7c:f7:fa:9d:d5:8d:42:51:be:cf:3b:22:
6b:29:99:5b:2d:b3:9e:29:dd:a1:1a:dc:4b:63:36:d7:48:b5:
8d:2c:e3:78:78:50:c1:5c:17:e5:63:9f:34:89:c1:46:8d:58:
b3:19:fa:07:22:ed:a0:31:07:3c:8e:04:02:7a:af:a0:fa:39:
26:20:fd:39:1f:8a:63:54:ae:86:e3:85:3b:ae:7b:22:46:46:
01:9d:3a:25:74:81:93:c4:8a:76:8f:c9:40:00:21:4f:88:2f:
0d:8a:e8:da:c2:99:fc:c6:1d:69:ca:75:6e:f5:f6:b8:5c:40:
a7:15:15:c9:cb:4c:2b:58:58:f1:ff:34:2d:f8:ff:93:63:28:
2e:ca:7e:b9:bf:d3:c9:ca:9c:17:f1:64:aa:05:0d:6b:58:68:
21:4c:a3:42:51:24:5a:3a:03:97:a0:51:cf:ef:73:e1:e2:e0:
26:f8:c3:db:76:ee:5e:84:e5:a8:1b:5c:ca:53:0f:68:df:93:
14:65:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org