Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/iaRf19h9_oUkk000oBjj-ozdtBo.roa
File: iaRf19h9_oUkk000oBjj-ozdtBo.roa (raw, json)
Hash identifier: mqVrVvI9eIOZPeYg2y6iNz5a8sRyGG7CYGpQ5TKI+VA=
Subject key identifier: 89:A4:5F:D7:D8:7D:FE:85:24:93:4D:34:A0:18:E3:FA:8C:DD:B4:1A
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 098E
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/iaRf19h9_oUkk000oBjj-ozdtBo.roa
Signing time: Wed 29 Sep 2021 02:38:07 +0000
ROA not before: Wed 29 Sep 2021 02:38:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4782
IP address blocks: 117.56.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 02:38:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=89A45FD7D87DFE8524934D34A018E3FA8CDDB41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:fd:c3:d6:9e:a0:60:dc:63:59:6e:26:ea:
60:c5:d1:c0:3d:59:8a:a5:f0:44:09:31:80:64:44:
b5:4a:3f:6f:69:d3:37:89:b3:95:91:68:03:3f:8d:
36:10:92:4e:de:4d:d2:bb:54:9d:76:58:ac:7f:82:
c5:7d:93:5a:5e:e6:51:f3:d8:d5:e1:90:df:09:29:
de:68:c6:5f:a7:75:24:69:d9:c1:21:01:f0:66:0c:
51:45:a7:2c:30:e4:20:85:78:f2:20:8a:6e:ce:45:
b0:1c:8e:f6:bc:4c:3d:bf:02:ac:97:c6:e6:e6:a4:
3c:48:44:f5:3f:57:ef:57:b0:48:6a:af:3b:23:a1:
3e:b7:36:0b:73:3d:40:c4:b5:9d:a1:48:15:9b:21:
17:49:e1:ca:ae:6f:56:19:49:1e:5c:ac:89:f6:e0:
0e:18:a5:2f:86:72:fb:e4:2c:00:71:15:77:0c:e0:
68:5e:6e:d9:bc:ad:c7:b0:2e:fc:a2:79:74:55:c1:
39:02:be:32:04:17:56:65:49:c9:d7:3d:c9:da:18:
f5:84:81:91:e5:cd:08:08:70:27:9f:09:1a:b9:66:
42:10:e3:f0:a3:c9:cb:b1:59:00:dc:1d:68:51:85:
7a:ea:bc:27:c0:33:d9:e8:13:b3:b4:71:a1:df:13:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:5F:D7:D8:7D:FE:85:24:93:4D:34:A0:18:E3:FA:8C:DD:B4:1A
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/iaRf19h9_oUkk000oBjj-ozdtBo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.56.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:72:9b:15:f3:4c:dc:cb:29:b3:1b:d1:fd:f1:aa:03:e1:bb:
4f:5c:e3:3b:eb:2f:22:d0:94:e3:cf:8a:ab:71:00:70:6e:ce:
c1:2a:7e:2e:ea:96:e9:97:e4:19:51:ab:fb:b6:0d:f0:cf:00:
1b:35:be:21:d3:93:73:e5:56:ce:7a:bd:79:89:03:b5:7c:c4:
3c:a3:92:fa:1b:43:98:3a:aa:7c:e3:68:ee:10:e7:09:03:fb:
67:fc:7c:7a:a8:71:43:42:38:41:6b:75:fb:f8:8d:b8:bd:7b:
78:63:0c:7e:87:6e:18:c0:d1:84:be:59:ca:50:b3:f8:60:f6:
fc:81:24:78:98:61:49:7a:18:cf:f1:71:91:77:86:d8:c0:ee:
40:8a:1f:e2:1d:2a:11:62:68:12:1d:5b:df:91:ae:17:00:ed:
ad:12:b2:0b:47:8d:e6:6b:c3:53:60:fd:e4:5b:c8:7d:1f:5b:
3c:7b:26:06:b4:63:71:ba:df:51:5b:74:27:e8:a9:74:ed:67:
18:02:53:5f:96:37:1b:3c:68:8d:66:cb:cc:47:48:5a:07:22:
31:d4:0d:e0:29:78:88:9e:5a:12:05:b7:3f:f7:da:05:3c:38:
b3:b5:0f:a9:ab:d9:5c:31:81:20:1c:cc:bd:e4:a6:93:e3:3a:
cc:ba:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org