Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/cMzpY-E5-JmJohFqU3arfNmDB7A.roa
File: cMzpY-E5-JmJohFqU3arfNmDB7A.roa (raw, json)
Hash identifier: GAg/CH0aq1gGzOKJ0hlKwR/Ku6m3jL5AO5ZOV0cLHjI=
Subject key identifier: 70:CC:E9:63:E1:39:F8:99:89:A2:11:6A:53:76:AB:7C:D9:83:07:B0
Certificate issuer: /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial: 08AA
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/cMzpY-E5-JmJohFqU3arfNmDB7A.roa
Signing time: Sun 07 Feb 2021 11:54:27 +0000
ROA not before: Sun 07 Feb 2021 11:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18422
IP address blocks: 61.61.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Validity
Not Before: Feb 7 11:54:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=70CCE963E139F89989A2116A5376AB7CD98307B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:a4:e6:6e:62:43:be:5a:59:17:e5:eb:c3:
53:23:e4:d9:47:e6:e8:dd:1b:7c:ce:2e:88:35:a0:
34:85:a4:09:05:28:f6:fe:a2:da:ab:a7:a4:0a:12:
54:6b:42:88:fe:aa:bf:c0:18:b6:ef:3a:f9:ee:63:
04:9d:4e:dc:5e:de:b7:19:73:86:9e:e4:33:48:9c:
c0:eb:6b:07:58:0d:57:52:0b:6e:05:eb:4c:be:1e:
b3:63:45:fd:f6:46:db:95:ad:a5:29:f8:19:8e:68:
2f:e5:b6:f2:37:f6:5a:7b:3d:fa:dd:83:c7:9b:5e:
22:17:4d:8a:a7:7d:60:73:96:0f:84:c8:20:ef:95:
29:1b:1a:26:58:53:a7:8b:c4:f2:96:3b:c3:54:3d:
88:1e:ab:4b:f6:0a:de:6f:cb:53:17:3b:b8:8e:2f:
4a:85:03:64:27:c5:1b:2a:44:1a:c0:2d:4d:9b:3a:
74:94:64:56:0d:a1:6c:d9:39:cb:7c:88:53:45:8b:
9e:1c:8e:ae:94:37:ba:34:18:a9:d6:21:61:6d:12:
04:d3:68:46:1f:3f:75:67:17:a6:77:d3:07:fa:00:
6a:80:73:0b:7c:dd:51:af:62:57:34:7b:80:13:52:
01:69:e5:26:4d:b1:c2:9d:1a:25:b5:a5:00:d7:89:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:E9:63:E1:39:F8:99:89:A2:11:6A:53:76:AB:7C:D9:83:07:B0
X509v3 Authority Key Identifier:
keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/cMzpY-E5-JmJohFqU3arfNmDB7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.240.0/20
Signature Algorithm: sha256WithRSAEncryption
34:35:b8:03:09:3d:72:30:83:b9:41:31:1a:9d:f7:c5:b9:26:
0a:f7:03:7e:01:09:d3:44:df:f5:ca:5f:08:44:22:48:bf:0e:
59:72:04:2b:7d:22:4b:a3:d8:7d:eb:dc:99:37:e9:25:03:b0:
87:5a:13:0d:41:44:af:fc:15:1f:34:3c:56:ba:e5:ac:bb:cf:
ce:1b:d9:49:72:9f:48:e8:a7:88:c9:ea:c2:aa:3a:1d:f5:76:
d0:ec:2f:47:ef:f9:52:53:e3:d0:26:50:5d:8b:db:18:4f:a5:
4a:33:67:a3:1b:98:53:4b:66:d4:a3:e1:af:95:e7:7e:9f:fc:
8a:2e:42:d6:cd:e9:8b:51:42:86:58:b6:a6:46:53:0b:68:cc:
43:df:4e:4a:6c:03:bd:9b:69:1d:91:20:62:02:d8:5c:05:44:
e6:ae:f3:40:ce:d5:b2:ab:f4:95:9a:22:af:ac:a5:6b:22:e4:
27:8b:8a:64:41:e6:63:8c:67:d8:c8:21:dc:d5:4e:43:18:1b:
4e:00:b0:9d:f2:5b:9a:18:f5:20:c1:2c:ab:03:af:41:84:06:
9a:e9:02:af:cc:98:99:19:8a:7b:75:8b:dd:d6:2d:6c:0a:45:
ea:b5:7a:e8:6c:64:ab:25:55:83:3e:dc:f6:13:4f:14:bd:6b:
2b:41:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:07 2023 by rpki-client on console-fra.rpki-client.org