Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/psrA3YrIt7zqxxvis9DoaDr_bH8.roa
File: psrA3YrIt7zqxxvis9DoaDr_bH8.roa (raw, json)
Hash identifier: ubfUVHTwJ2D5OBvju2Ifn2myE48r05M3OitRfNeurv8=
Subject key identifier: A6:CA:C0:DD:8A:C8:B7:BC:EA:C7:1B:E2:B3:D0:E8:68:3A:FF:6C:7F
Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial: 0774
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/psrA3YrIt7zqxxvis9DoaDr_bH8.roa
Signing time: Tue 29 Sep 2020 10:03:59 +0000
ROA not before: Tue 29 Sep 2020 10:03:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4782
IP address blocks: 203.65.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
Validity
Not Before: Sep 29 10:03:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A6CAC0DD8AC8B7BCEAC71BE2B3D0E8683AFF6C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:9c:69:57:77:4e:64:76:82:73:81:46:d3:
b8:93:53:e8:49:85:da:ab:60:97:22:1e:50:d0:53:
3b:db:ae:3a:7f:e9:4d:91:49:cf:70:9b:cc:38:95:
d3:63:36:1b:1c:55:29:47:7b:82:d6:04:48:b1:d8:
b7:a5:ca:34:0c:4a:71:33:d6:0c:17:e4:80:b3:94:
de:e6:50:5f:8a:77:15:c3:cb:7a:09:d5:3c:ee:6b:
77:68:4b:e1:5f:9d:99:f1:fb:e7:c8:60:9a:53:19:
1b:07:33:f2:2f:50:dc:b0:2a:5d:c5:86:e7:4a:cd:
10:c0:1d:b7:ba:f7:11:b8:6e:64:ac:0e:68:e4:29:
a2:76:e0:26:20:23:d2:17:2a:e8:3d:fe:58:3a:0f:
0c:f0:8f:c3:bd:6e:87:e1:e5:c4:ed:4f:60:20:d3:
05:e8:4d:91:bd:6d:ad:04:cc:84:12:6b:40:12:3d:
45:3d:c6:3a:2a:49:bb:6a:27:ea:07:b7:f1:0a:df:
9d:ea:18:af:dc:19:ab:3b:7c:0a:f8:20:ee:05:87:
7b:47:0f:12:95:cb:35:5a:1d:5c:07:6d:d4:fe:b9:
fc:64:11:63:49:c3:3d:8a:93:26:d3:55:63:ba:5f:
d6:bb:57:f3:b8:ca:ca:0b:ee:d6:bb:c3:02:13:b4:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:C0:DD:8A:C8:B7:BC:EA:C7:1B:E2:B3:D0:E8:68:3A:FF:6C:7F
X509v3 Authority Key Identifier:
keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/psrA3YrIt7zqxxvis9DoaDr_bH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.128.0/19
Signature Algorithm: sha256WithRSAEncryption
90:dd:ff:c0:d2:b0:59:45:f2:72:75:6f:4a:37:60:b4:12:60:
6a:e2:ea:2d:a4:56:07:a4:fe:54:84:8c:9c:bf:87:e5:91:77:
77:3a:ea:e6:04:dc:73:18:35:ca:a9:df:d4:ee:da:45:ef:fb:
ee:e8:cf:7b:10:8e:ce:71:e5:56:f7:ab:0e:aa:df:d9:ee:37:
24:f0:e2:25:7d:13:ca:b1:6a:19:4f:36:da:ae:4d:2b:34:0e:
14:ac:6f:17:7a:85:a8:7f:b1:51:19:18:73:0c:65:4e:82:69:
5a:cf:ce:2a:b6:73:67:99:09:75:40:4d:63:79:6b:ad:a5:64:
07:35:e7:be:5a:93:a0:5b:ce:aa:cf:8a:dc:a1:25:21:ec:09:
ed:70:2a:75:f7:bf:af:90:fd:23:12:dc:1b:78:1e:3f:92:b4:
17:52:e3:e3:ed:68:39:fb:e6:88:fc:d1:32:2c:2b:73:99:db:
32:54:81:1f:29:d5:be:54:96:80:20:ed:70:67:03:f9:56:81:
53:7b:4a:28:94:37:b0:31:87:0e:f1:64:5c:e2:be:7a:72:f8:
9f:1c:1c:6d:a8:68:d7:ee:d4:50:d4:cf:57:c0:2b:b0:e5:54:
eb:fc:57:f5:5e:64:d6:54:97:d7:13:1d:f7:be:25:8e:e0:ee:
54:68:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org