Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa
File: bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa (raw, json)
Hash identifier: lGQ/+a6fv1pfqfTzs14d8tNCjVqE2H28MEVe819RyUM=
Subject key identifier: 6D:71:3C:8D:6F:FC:FE:9A:FF:A8:A4:B0:ED:2B:FB:2A:C3:69:1B:D2
Certificate issuer: /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial: 0770
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa
Signing time: Tue 29 Sep 2020 09:59:23 +0000
ROA not before: Tue 29 Sep 2020 09:59:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18422
IP address blocks: 61.61.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Validity
Not Before: Sep 29 09:59:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6D713C8D6FFCFE9AFFA8A4B0ED2BFB2AC3691BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:16:3f:ed:6b:0b:7b:17:6d:67:f3:6f:d1:
9c:5e:3a:f0:13:10:77:64:18:2d:17:32:08:2f:41:
fe:04:7d:1e:8e:c8:dd:5e:83:63:ec:6c:e8:ff:eb:
34:3c:9d:3e:f8:44:06:d5:9d:91:15:65:9e:cf:48:
06:6a:e1:9e:ed:4f:33:4b:2e:0c:67:18:4b:9c:da:
a1:bd:79:85:47:79:57:c4:b1:9c:86:c2:56:45:07:
cb:da:55:0f:44:94:92:d3:bf:a7:06:07:b5:b6:1c:
cf:16:cd:8f:1e:e7:b9:24:8b:0b:53:95:cf:93:1e:
5f:b0:44:4f:54:47:ac:bf:f1:27:fe:67:0d:ed:91:
b8:21:3f:ce:0d:aa:02:cd:9a:34:c1:c9:b7:ae:51:
84:71:fc:f4:e8:96:02:da:62:7a:f5:87:ef:f7:62:
c9:9f:00:08:3e:b5:3f:2f:57:25:1d:12:1a:0e:09:
36:23:7a:c5:42:12:28:a8:f0:71:7f:aa:0c:f5:ff:
6d:34:31:f5:7f:e8:d6:a2:a3:25:86:9b:24:c1:f1:
7f:fe:67:55:dc:10:17:61:65:ed:72:93:5c:41:a3:
27:e1:6d:66:36:6d:fa:d0:b7:73:34:d9:8b:89:25:
38:21:1d:73:70:9d:09:0d:98:46:c3:ba:b8:4b:6b:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:3C:8D:6F:FC:FE:9A:FF:A8:A4:B0:ED:2B:FB:2A:C3:69:1B:D2
X509v3 Authority Key Identifier:
keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.240.0/20
Signature Algorithm: sha256WithRSAEncryption
92:0e:e5:db:65:d6:aa:96:d8:66:a3:84:4c:80:16:bd:90:05:
6a:94:d9:a0:97:11:53:ec:37:68:ab:c2:50:71:08:75:79:b4:
d2:b3:62:aa:c8:c3:a8:a6:43:d9:89:1a:fd:76:3d:7b:5d:c0:
36:52:dc:9e:6e:57:fd:c9:f4:0a:83:a5:24:cc:78:bc:0d:dc:
d3:ae:ba:3a:7d:3e:83:2d:b4:6f:1d:c8:40:23:dd:b5:5f:53:
ca:2b:84:33:d9:a3:c8:a3:f9:2c:77:e9:9b:f7:cf:66:04:ef:
b3:30:68:2b:4c:20:67:d3:73:24:72:cd:4a:51:e7:8e:d5:f1:
17:9f:ab:ef:ee:27:c5:09:78:22:68:88:23:4a:2e:da:e7:52:
cf:cb:6b:3e:99:98:59:1f:9c:62:38:07:0b:58:e2:a1:94:8e:
6d:32:4d:31:69:d0:9f:06:e8:b0:87:ce:b6:05:97:0c:c1:92:
91:dc:98:7d:a3:92:21:9d:52:5d:c9:58:0e:31:79:f3:7b:e3:
17:0d:e3:6c:80:07:8c:4f:d3:32:4b:e4:f7:b0:cf:d0:06:a8:
b2:16:97:08:10:30:89:dd:2a:55:dc:89:a0:0a:f9:96:2c:d6:
d0:4f:ca:ae:62:17:1f:23:2a:51:ea:55:c0:a8:01:d7:a0:10:
ac:c8:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org