Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/n3CM0DjnLScJUza9TbVDdmaBjqI.roa
File: n3CM0DjnLScJUza9TbVDdmaBjqI.roa (raw, json)
Hash identifier: RfW6uKSsj/aT6kmKU2fYr8BahARarwZHtaV7Xkgman0=
Subject key identifier: 9F:70:8C:D0:38:E7:2D:27:09:53:36:BD:4D:B5:43:76:66:81:8E:A2
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0781
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/n3CM0DjnLScJUza9TbVDdmaBjqI.roa
Signing time: Tue 29 Sep 2020 10:03:51 +0000
ROA not before: Tue 29 Sep 2020 10:03:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 211.79.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 10:03:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9F708CD038E72D27095336BD4DB5437666818EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:4f:8d:79:b7:99:e5:a1:05:25:38:89:23:
50:29:96:bf:66:5e:40:82:fb:38:56:e8:e9:dc:e8:
81:40:31:b5:1d:ec:d6:da:6b:3f:2f:98:a6:0b:37:
6c:1b:82:44:2c:2c:45:1d:01:0d:0f:59:13:ed:a5:
90:47:2c:4d:10:fa:04:cb:f7:80:ce:33:e4:d7:54:
51:8d:ba:c6:03:53:9c:07:6e:9a:11:cb:e3:82:94:
90:60:df:d3:9a:2b:2f:a4:a1:37:26:02:3e:13:aa:
fe:3b:61:27:26:84:18:33:24:07:1c:cc:30:c6:99:
30:78:d6:b9:a6:5d:9f:3a:39:c3:3f:45:60:c9:9e:
79:b8:41:4a:42:83:d7:1d:df:69:dd:15:56:cf:d1:
ac:cb:09:e7:4e:34:f2:5d:b0:0e:c2:e6:ae:c5:ca:
eb:fb:99:b1:fd:ee:c9:96:d7:b2:29:f0:60:70:df:
26:49:9e:3f:fd:22:1b:9f:65:ea:8e:81:1c:39:5c:
30:b8:70:63:e6:d0:c0:d0:c9:90:31:9c:9c:be:93:
c5:0f:45:e2:f4:78:fb:52:eb:12:f2:23:9b:e4:27:
c4:91:ce:0b:10:0e:37:a0:d9:52:62:08:f3:98:7a:
1a:88:f3:1f:5d:51:4b:84:45:d6:2f:85:bd:22:6c:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:8C:D0:38:E7:2D:27:09:53:36:BD:4D:B5:43:76:66:81:8E:A2
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/n3CM0DjnLScJUza9TbVDdmaBjqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.128.0/19
Signature Algorithm: sha256WithRSAEncryption
54:fe:4c:5e:7d:ec:f0:d6:50:3c:ba:fd:08:a5:a3:48:4f:37:
9a:d9:f3:57:ee:ac:68:aa:5c:7b:d0:7b:57:ee:fd:40:39:8c:
2c:7f:e6:8a:71:5a:85:cc:65:ba:23:cf:7d:c8:6b:29:3c:18:
72:7d:5b:5a:bf:6f:b8:0a:d8:e9:ab:44:29:28:44:5d:bb:8b:
a2:f7:5f:db:90:e4:46:d3:df:38:10:80:9a:eb:4b:61:35:98:
af:96:b1:23:13:42:80:eb:6c:f9:5b:01:89:12:36:e5:0b:a3:
c3:35:bb:77:90:6b:5a:bb:34:6b:c8:9f:c2:2b:4c:d3:c8:ec:
f2:be:39:5f:f0:1e:69:25:cf:8d:78:06:ae:ee:7e:e3:66:80:
d6:5e:b4:65:40:f4:e2:3f:f2:50:5e:f5:20:07:88:11:10:e7:
d0:86:b3:cc:15:24:73:30:4c:9b:4f:46:63:82:7d:c0:5e:8c:
4a:71:25:c6:ef:7a:a3:37:f8:13:04:bb:f6:6c:73:c7:66:49:
21:00:f1:ad:bb:fc:70:3f:94:3a:63:10:64:2b:74:52:bc:68:
c1:d3:34:47:5b:c3:fc:67:4e:66:6c:ef:12:c8:88:c9:cf:63:
76:8e:85:d4:75:20:8e:cc:b9:05:7b:8a:4c:b3:34:d6:b3:30:
51:6d:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org