Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/H3sj17Y7DF9M_nE_gjrHP2y44a0.roa
File: H3sj17Y7DF9M_nE_gjrHP2y44a0.roa (raw, json)
Hash identifier: rNHkgyzmxkB2y0y19AqyENWvl6xPNbWz1MOucGbe/WE=
Subject key identifier: 1F:7B:23:D7:B6:3B:0C:5F:4C:FE:71:3F:82:3A:C7:3F:6C:B8:E1:AD
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0AA1
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/H3sj17Y7DF9M_nE_gjrHP2y44a0.roa
Signing time: Thu 15 Sep 2022 02:41:00 +0000
ROA not before: Thu 15 Sep 2022 02:41:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18042
IP address blocks: 58.86.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2721 (0xaa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Sep 15 02:41:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1F7B23D7B63B0C5F4CFE713F823AC73F6CB8E1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:34:21:c5:d0:73:92:a6:33:77:02:a9:5d:
bd:c9:f1:b1:c3:72:ba:1c:27:0a:ab:93:38:b0:00:
88:26:42:d3:09:f4:8c:8a:b8:e9:68:ba:bb:2e:8c:
57:b2:62:0c:2f:81:e0:b6:08:34:ab:83:e9:f0:87:
29:43:bf:22:12:dc:e0:7b:45:f2:60:a2:22:58:37:
86:9d:8b:84:94:4d:42:5f:54:88:31:3a:15:fc:53:
3d:1c:93:10:7f:d7:5b:94:02:43:71:15:3b:b3:99:
ef:8c:1f:97:cb:32:a3:6d:69:3d:75:28:d1:bc:03:
10:9e:c0:9e:37:aa:28:8d:f8:f1:64:c2:dd:81:87:
47:b7:09:99:e6:bf:bd:29:b8:46:3a:7f:1c:63:ab:
ef:a2:32:65:43:b4:d2:ad:d9:e4:bd:03:26:2d:8e:
5a:82:f9:57:52:a6:36:19:3a:51:c1:f1:64:dc:4b:
2f:3f:ee:08:dc:01:0f:4d:52:41:ed:ac:6d:8b:bc:
4b:38:80:41:5c:8c:64:a2:2e:fb:b4:58:d7:77:29:
3b:99:4b:87:f1:20:f8:f8:df:26:3b:2d:58:cd:11:
78:9e:64:1d:29:53:52:38:27:2a:1c:66:f5:e5:4c:
aa:9c:21:aa:05:74:92:92:75:33:cd:1d:26:67:9f:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:23:D7:B6:3B:0C:5F:4C:FE:71:3F:82:3A:C7:3F:6C:B8:E1:AD
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/H3sj17Y7DF9M_nE_gjrHP2y44a0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:66:a3:dd:2d:55:77:81:bb:3d:fb:2b:c7:31:8e:58:5c:ba:
51:0d:be:fa:d4:74:79:3d:07:1e:47:56:a6:2a:81:e2:0f:da:
4f:bb:bc:0b:ae:58:d8:ea:86:0f:13:b2:0e:28:48:d1:08:bf:
6b:f5:78:84:8f:67:08:9c:97:30:a2:2f:c2:ec:3d:a3:39:f6:
96:4e:64:0c:95:2d:a6:07:50:4d:87:97:0d:ec:46:f4:da:87:
cd:f0:0a:6a:61:27:89:0a:b8:38:fd:3b:48:ca:3c:68:7a:cb:
88:cd:95:22:cf:6c:e4:3e:bd:b8:a0:33:b8:c3:b0:01:0c:19:
a4:bf:37:91:bc:94:01:dc:d6:5f:b8:cd:d1:42:f3:b2:6a:d3:
28:61:0c:cf:6e:b6:49:bb:21:13:87:9d:08:b1:b2:6c:f4:06:
29:e9:0f:34:42:2e:f9:c9:69:4b:58:ad:70:b3:e3:b6:4a:87:
32:43:26:21:3f:ad:fd:4a:38:ab:27:30:76:f7:83:ad:cf:8d:
30:49:bd:1b:b6:b1:f7:3d:82:12:9b:b8:21:8d:e5:52:86:a3:
10:2a:c8:ab:87:2c:23:f2:d0:db:4a:ac:cc:ba:10:44:1a:f0:
ae:7a:05:39:be:03:89:ce:0d:55:f8:2e:35:c2:9d:17:5e:47:
ff:fb:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org