Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa
File: FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa (raw, json)
Hash identifier: yoqsUrc7wkodjuR90IgX5sYrmq081Cy5eNERv5egUo0=
Subject key identifier: 15:5E:FD:51:75:D8:3A:BA:BA:AD:8B:92:4E:EC:C9:D5:6F:04:4B:F8
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 09DD
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa
Signing time: Wed 29 Sep 2021 02:52:18 +0000
ROA not before: Wed 29 Sep 2021 02:52:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9922
IP address blocks: 61.61.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 29 02:52:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=155EFD5175D83ABABAAD8B924EECC9D56F044BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:2d:fc:82:df:21:df:f6:21:d3:98:47:8d:
c0:f6:e2:89:48:89:5c:71:ca:dd:ec:db:d3:86:79:
d1:e6:ef:1d:fb:1d:06:f9:34:58:b1:7c:95:c5:59:
27:67:c6:a4:61:25:21:68:b8:26:f4:10:6b:8c:8d:
10:39:68:96:86:25:59:20:ea:65:b4:de:58:54:75:
43:b9:8d:05:15:c8:27:b7:7f:73:7f:84:a3:9e:1c:
c7:2a:42:7c:92:ba:c5:01:74:af:92:d7:3b:7c:53:
d9:82:f5:88:bf:d9:91:d5:7b:ec:8c:ba:21:06:6c:
5f:fe:4a:86:97:57:f0:07:0a:e4:d2:46:cd:65:b4:
da:04:63:2b:90:3c:94:e4:3b:e5:1d:7c:7e:8f:bc:
75:ff:07:c8:7a:4a:65:2b:4b:27:07:d2:c7:46:34:
41:b0:ea:2a:a4:06:f0:a8:5a:e6:2b:d1:87:d5:77:
5a:31:39:05:46:4e:c1:40:27:15:36:f3:2c:7c:2f:
ce:6a:f0:c4:76:c6:c3:4a:51:c6:81:e6:51:b6:bc:
ea:db:a6:4f:99:d7:a8:35:1b:4a:0a:2f:50:90:49:
3b:19:0f:b9:b3:fb:c8:ca:3d:d9:a0:42:88:e5:c5:
29:fc:47:72:ac:ea:ce:67:79:48:72:c4:fd:f5:6c:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:FD:51:75:D8:3A:BA:BA:AD:8B:92:4E:EC:C9:D5:6F:04:4B:F8
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:28:46:bb:18:10:3c:99:a1:be:24:ff:7a:3a:a7:19:06:7d:
0c:01:08:70:3d:54:df:c2:5d:d1:de:96:14:40:49:00:6e:65:
8f:1a:8e:b6:d0:dd:e7:80:fc:ff:cd:72:6a:d8:da:df:3c:9f:
bc:3f:56:22:11:ad:4c:72:06:54:53:85:cc:b0:95:da:6b:eb:
80:eb:6b:65:1d:7a:ac:42:18:a7:d0:0d:4b:1f:dc:df:89:e0:
7c:8a:f3:ff:c3:03:70:eb:3b:7e:1a:29:91:19:bc:7e:82:cd:
f5:26:ef:27:18:15:a1:57:ce:8d:bf:c3:a6:07:f8:19:24:29:
b2:1b:d9:d9:24:ee:16:c7:11:5f:b9:58:44:a9:6e:9f:e0:26:
a9:21:7e:cb:5e:1a:a7:8c:52:d3:26:49:5a:64:92:0b:54:fc:
80:31:fd:12:a3:5c:86:9d:75:c3:86:92:05:00:9a:fe:66:f5:
1e:ac:6a:02:3c:32:d6:a1:7f:06:45:75:4e:7b:b5:4d:72:5f:
56:5f:b8:6d:89:46:7b:9b:26:5b:a7:8e:6d:1f:15:ac:0f:41:
11:5b:43:31:ed:e9:07:46:3d:5c:ba:5f:17:3c:69:dd:66:c7:
44:b6:7e:60:84:26:4c:c4:85:b4:69:1b:1f:80:3e:5a:72:81:
c9:4d:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org