Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/l8P_OX2fLPyjhJ9-Qk_FMzyJ3Pc.roa
File: l8P_OX2fLPyjhJ9-Qk_FMzyJ3Pc.roa (raw, json)
Hash identifier: ujcj3k2UfQt0E/HbUEmpVt0nNY4uSHyEmMpEChQAo4k=
Subject key identifier: 97:C3:FF:39:7D:9F:2C:FC:A3:84:9F:7E:42:4F:C5:33:3C:89:DC:F7
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0993
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/l8P_OX2fLPyjhJ9-Qk_FMzyJ3Pc.roa
Signing time: Wed 29 Sep 2021 02:38:08 +0000
ROA not before: Wed 29 Sep 2021 02:38:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4782
IP address blocks: 211.79.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 02:38:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=97C3FF397D9F2CFCA3849F7E424FC5333C89DCF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:c5:95:92:ff:b6:a2:48:45:78:59:d2:8a:
f3:ae:da:32:74:14:3c:04:a9:a6:f1:18:cd:c7:2e:
9b:a9:b0:f3:80:39:1e:eb:a9:c1:20:9a:ec:00:43:
aa:65:b2:a2:f5:1f:ff:63:79:ac:fa:ac:81:18:97:
b7:2e:02:b2:e8:5b:ce:78:0c:ea:c9:2d:7b:51:cd:
6e:4c:8c:8e:3a:cc:a6:4c:6d:aa:ed:a4:be:ff:ae:
24:1f:47:38:60:da:24:50:99:f7:16:8f:a7:91:64:
ea:67:8d:47:6a:f6:9f:0b:73:75:4d:32:40:20:54:
12:00:db:54:1e:b6:d0:95:90:90:ba:30:a7:6c:d6:
92:0f:b0:8d:e0:68:09:2d:06:33:09:58:2f:06:00:
15:bd:fc:1c:20:af:63:b3:0f:c6:6d:e2:e6:9f:75:
66:fb:0a:7c:a6:fc:64:e8:fd:d6:00:61:76:78:43:
59:c0:bf:f9:9f:eb:65:dc:d9:c3:95:7b:30:04:fb:
48:ab:48:42:8d:50:2c:4a:66:51:aa:c6:d0:ae:6d:
d2:59:b7:a4:eb:4d:4d:db:b6:d2:2c:43:5a:5e:0c:
3b:a2:e8:c8:db:ce:a5:4a:58:d7:52:28:7e:2b:00:
5b:4f:f8:ce:1b:90:ff:dc:74:0a:0f:9c:87:94:91:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:FF:39:7D:9F:2C:FC:A3:84:9F:7E:42:4F:C5:33:3C:89:DC:F7
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/l8P_OX2fLPyjhJ9-Qk_FMzyJ3Pc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.128.0/19
Signature Algorithm: sha256WithRSAEncryption
00:fb:4c:97:01:3e:16:1b:94:1c:19:35:42:4c:1e:12:10:08:
e2:9e:13:2a:ec:a0:13:17:31:2a:af:6f:64:90:58:57:9c:47:
d8:b3:2b:f3:dd:1e:c0:dc:c9:1f:73:95:c8:0b:a4:30:c1:0d:
c3:67:5a:fe:31:d6:17:6c:d5:ba:d4:c8:cb:06:ea:d1:26:54:
1b:ef:d5:69:45:fa:63:42:25:ef:42:73:4c:0b:98:8f:d2:89:
cb:9f:23:8e:75:2a:be:3a:cc:92:ea:79:99:54:0f:17:15:dd:
73:3f:61:54:37:a3:70:ef:69:90:49:e3:82:f2:2f:30:7a:67:
7c:5a:eb:92:29:3e:d6:6a:3a:6a:7c:db:b3:fa:07:39:04:12:
6c:03:ac:56:f5:d8:cd:27:ef:85:f9:c8:d7:52:d0:bb:06:29:
3b:bb:85:9d:1e:5d:fa:4a:7b:4b:29:60:b3:88:f5:9d:d3:95:
80:21:b7:96:00:e9:b5:e3:7b:0c:c6:93:51:76:de:5e:17:c0:
ff:e9:fc:46:8c:23:b1:93:94:dc:2c:7b:fa:5d:cb:5a:28:6a:
88:58:24:93:db:94:eb:6e:25:02:69:f8:69:02:57:84:b9:6c:
88:68:8d:47:a7:06:cf:ce:7f:04:60:24:2b:fd:56:f1:64:d9:
0c:33:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org