Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/Os1T1vvbAv6GzqHQTdaHokq7GH8.roa
File: Os1T1vvbAv6GzqHQTdaHokq7GH8.roa (raw, json)
Hash identifier: h7G+ngy0to9uURviV+4FipTk2h6m0HpY4FI+0MhxchA=
Subject key identifier: 3A:CD:53:D6:FB:DB:02:FE:86:CE:A1:D0:4D:D6:87:A2:4A:BB:18:7F
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Os1T1vvbAv6GzqHQTdaHokq7GH8.roa
Signing time: Thu 15 Sep 2022 02:49:47 +0000
ROA not before: Thu 15 Sep 2022 02:49:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9918
IP address blocks: 61.61.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3ACD53D6FBDB02FE86CEA1D04DD687A24ABB187F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:16:a6:4e:46:93:4a:38:c3:84:d2:1f:44:
7f:c9:60:65:3c:d5:f4:05:bd:ee:43:84:c6:7f:9f:
c8:55:31:99:a2:4e:ce:97:e8:90:8a:ac:b0:88:cc:
5c:7c:50:7f:e0:2a:49:bc:fc:74:f5:ba:91:2d:5d:
0b:12:61:8c:c6:b0:52:ee:3e:aa:11:ce:d7:e9:3c:
d3:b7:59:04:f7:0c:2a:c4:13:f9:72:31:03:fd:7f:
75:09:f5:43:98:9d:2b:c8:ee:5f:c1:e1:c2:df:e0:
f3:3e:71:3d:7d:d3:04:31:df:8f:87:77:57:2d:45:
8e:e9:84:f8:e3:d0:1c:8d:b4:18:f1:33:5e:72:26:
6d:0f:a5:2a:7b:9c:f6:61:e3:ce:33:ee:d1:be:e5:
26:01:6f:e2:b9:36:97:26:a4:db:01:69:97:ae:7d:
aa:a6:cc:26:b0:06:16:fc:2b:9e:a0:ad:d3:15:dd:
e9:e4:bf:62:b4:fa:cb:28:c9:69:b2:16:f9:24:52:
17:fa:67:0d:0b:90:6e:63:90:dc:f6:cb:7f:bd:e5:
48:c9:d4:a4:09:e8:61:f1:73:a0:af:52:c5:84:6f:
da:1f:9a:a3:f1:5e:a6:49:5b:10:78:8b:e0:98:77:
fc:39:6a:15:d4:b9:53:21:3c:5b:cf:2b:ad:a9:8b:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:53:D6:FB:DB:02:FE:86:CE:A1:D0:4D:D6:87:A2:4A:BB:18:7F
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Os1T1vvbAv6GzqHQTdaHokq7GH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5f:1a:1c:97:69:71:5a:38:57:90:34:ef:e3:72:19:aa:b9:e8:
d0:a5:82:3f:8c:e5:81:04:be:c5:ee:5e:7b:d7:f4:72:bb:ec:
76:0d:0b:cd:95:79:2f:4d:3b:15:40:22:cc:00:09:9d:f3:d8:
0a:e4:bb:7e:ea:dc:67:e9:63:0c:2c:f4:1d:af:55:4c:05:55:
35:48:8c:f2:d0:eb:cf:22:a8:4e:13:04:68:8f:65:3a:75:35:
db:55:56:d3:9d:2f:3e:49:73:1c:a2:71:99:ba:54:36:c1:4d:
9d:a0:e4:cb:d0:55:2d:7a:23:4e:9c:85:c0:a4:b4:6c:5e:00:
bf:87:5d:10:34:85:b8:21:d5:66:81:cc:32:85:cb:28:72:d2:
1f:14:fe:3d:56:62:64:8b:ea:cf:56:5d:e2:07:83:91:5c:12:
97:16:7a:e2:dc:a6:ba:b8:17:f3:e8:a2:17:c2:5a:3b:a1:c9:
b1:22:6d:25:d6:2c:d6:24:27:83:01:07:9d:2d:2e:bd:aa:cd:
d0:63:63:fd:2c:e2:56:31:aa:0c:d9:a2:a0:16:fa:a2:86:a8:
31:99:15:5e:63:41:84:fc:c5:ff:f0:96:d3:78:80:e7:82:4a:
ea:56:8c:a2:7e:fc:29:e1:fd:1d:f6:cb:44:6f:32:f1:8a:d5:
ea:b6:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org