Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/A3XMAfOdUnaRT_7X8oPFgdNC6AI.roa
File: A3XMAfOdUnaRT_7X8oPFgdNC6AI.roa (raw, json)
Hash identifier: sj9ZwI/y3ofIoukKLoOQFUvIKPCcomnYJUQV8q/ra+A=
Subject key identifier: 03:75:CC:01:F3:9D:52:76:91:4F:FE:D7:F2:83:C5:81:D3:42:E8:02
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 08F3
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/A3XMAfOdUnaRT_7X8oPFgdNC6AI.roa
Signing time: Sun 07 Feb 2021 11:52:51 +0000
ROA not before: Sun 07 Feb 2021 11:52:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 61.67.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Feb 7 11:52:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0375CC01F39D5276914FFED7F283C581D342E802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:84:15:9a:cc:61:83:ce:f6:dd:07:91:09:
dc:a6:7a:a9:27:1e:f7:36:33:8c:1f:48:ff:34:21:
69:00:5d:a6:f1:7e:f5:7d:74:e0:fa:01:77:57:2c:
ec:8f:37:29:d9:9b:01:a2:1a:f4:0b:96:ea:a1:da:
99:08:59:5d:60:f6:30:10:dc:a2:91:87:24:4d:ed:
af:7b:ff:d7:e8:f6:40:25:8a:2a:79:c7:4a:bc:95:
78:d7:10:75:95:ef:ef:b9:cf:fb:f4:12:4c:45:02:
94:b1:a0:c4:aa:43:3c:a1:bc:06:fc:1b:9c:5c:b8:
97:21:65:02:f6:e3:1d:00:5b:fc:09:77:ab:8c:2e:
81:d7:ab:fd:6c:17:1b:ae:12:f4:5b:a6:23:75:c5:
98:e1:b8:c2:63:09:fe:b8:6c:fd:f0:eb:65:d2:5f:
7d:11:17:bd:81:82:1c:fd:dc:a2:da:4f:c9:fc:76:
bc:f3:d7:0f:29:2c:e8:b8:ce:15:53:9d:84:c9:a3:
ba:42:ec:cd:73:5b:87:97:85:f7:9e:10:ba:5c:0f:
8b:cc:27:b2:bb:d9:49:d5:1f:7f:d1:76:92:d4:db:
81:26:87:38:8c:09:a1:69:99:21:e1:f6:c4:c9:d6:
eb:ef:1a:c2:fd:db:05:c1:c3:c1:60:8c:e2:8e:90:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:CC:01:F3:9D:52:76:91:4F:FE:D7:F2:83:C5:81:D3:42:E8:02
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/A3XMAfOdUnaRT_7X8oPFgdNC6AI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8f:9b:20:d5:c0:ed:fe:40:7b:7e:69:f8:13:e0:67:f1:3d:03:
51:b9:13:4d:12:82:ee:8d:46:73:3d:9c:f6:bb:96:c0:dd:09:
da:fb:dc:8a:b4:51:3f:0b:85:e7:02:62:61:eb:a3:08:f2:0f:
d7:74:ba:26:7c:2f:c5:b1:45:be:d2:96:21:03:62:a1:cf:9c:
c8:5c:19:8f:eb:71:a9:9b:43:06:08:f3:d7:45:f0:7a:a0:d8:
9e:60:1e:29:ad:b7:f3:09:5f:51:50:0a:b4:47:7f:f5:6e:5c:
fd:cf:6a:93:86:c5:65:fb:8c:42:b2:fd:39:8d:0c:e8:7c:3f:
a1:78:ec:13:bb:c4:f1:43:20:8c:8d:25:16:c6:16:7c:bb:a3:
c0:a6:5e:41:2a:4f:af:89:4f:0e:50:5d:dc:e7:b3:78:0c:cc:
98:3c:75:e0:a0:65:7b:1a:03:91:cb:ae:c6:18:5c:43:e1:56:
3d:95:24:95:ad:63:d0:56:01:11:56:71:82:72:b6:6b:05:f6:
ee:3d:14:05:9d:ce:5a:c8:1b:29:ae:8c:03:62:df:c9:4d:a7:
b4:37:bd:d6:42:51:8c:fd:27:31:cf:cf:26:c8:d6:e6:9b:3e:
5a:8b:03:a1:24:9a:21:3b:09:99:95:a9:1f:69:90:02:89:d2:
26:84:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org