Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/TMu7JtTMEedVjUd6oZVADRwcPy8.roa
File: TMu7JtTMEedVjUd6oZVADRwcPy8.roa (raw, json)
Hash identifier: TFgOeagLGi3LRZ92oeO4ssmd+ZuQsa/TSG7LpX4j9oE=
Subject key identifier: 4C:CB:BB:26:D4:CC:11:E7:55:8D:47:7A:A1:95:40:0D:1C:1C:3F:2F
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0798
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/TMu7JtTMEedVjUd6oZVADRwcPy8.roa
Signing time: Tue 29 Sep 2020 09:59:45 +0000
ROA not before: Tue 29 Sep 2020 09:59:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9918
IP address blocks: 61.61.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 29 09:59:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4CCBBB26D4CC11E7558D477AA195400D1C1C3F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:63:29:60:64:b6:48:4e:ec:ad:71:56:b6:
36:f9:b6:46:08:d4:a8:2f:fc:7e:ea:14:da:d0:be:
23:73:0f:56:ee:3d:12:59:dd:42:41:e4:86:af:03:
9d:af:4a:9f:c4:d4:65:d8:a7:39:02:79:b7:61:ac:
8e:04:05:cf:df:c3:16:84:f8:98:96:1b:01:d9:60:
a9:6c:8c:c3:18:df:53:81:8a:1c:ae:f4:52:6b:25:
11:c3:7e:38:35:99:67:aa:89:4c:d5:8c:37:58:8d:
0f:63:6b:ab:ad:6d:83:f6:7c:f7:20:de:54:50:ed:
63:ad:3e:b5:c2:e8:bb:37:02:ef:a7:fc:96:89:80:
e1:1b:61:62:ba:74:2b:ed:6b:24:2e:08:87:a9:14:
ed:46:04:cc:d7:09:cb:3e:54:86:ba:2a:7c:cf:55:
04:bd:f1:7f:47:de:7a:86:c3:65:62:f2:44:3c:12:
a6:ac:12:a7:2a:a9:4a:0f:3a:5d:de:20:03:c5:0e:
aa:bb:eb:e3:f9:2e:f7:b5:a8:a8:c1:c9:79:c8:ca:
e4:51:08:b4:f1:8a:5a:71:38:5e:fd:30:25:97:ca:
69:bd:01:01:44:b3:8a:5e:25:94:b4:b1:4a:4b:24:
d6:ec:5a:af:c4:9b:74:a6:68:35:3f:f2:a0:bf:fb:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:BB:26:D4:CC:11:E7:55:8D:47:7A:A1:95:40:0D:1C:1C:3F:2F
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/TMu7JtTMEedVjUd6oZVADRwcPy8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:f7:3e:0a:69:d1:fc:f3:24:d4:83:a5:d0:b6:79:6a:98:16:
5e:6d:2b:a0:d4:2c:63:56:91:6f:7f:16:71:52:a1:db:28:da:
dc:e8:ba:06:ec:4f:af:31:86:90:ad:57:b5:60:0d:87:7d:43:
eb:c4:74:3a:94:0e:11:10:07:8f:be:a2:08:2e:64:49:10:91:
61:06:bc:ab:44:85:f3:4b:35:23:5c:96:8d:e9:1a:f2:61:84:
ac:cb:00:f6:aa:00:32:c7:1d:1f:69:87:4f:f0:6f:f0:a1:7b:
b0:d2:63:34:b5:3c:3e:a6:c6:7f:6c:1f:37:f7:66:9e:89:7e:
d5:fc:07:3f:aa:b0:4a:7f:fa:80:70:00:bc:82:25:20:f4:1c:
2b:7b:9b:6b:7e:2e:88:ce:f8:62:db:7d:0e:0e:cd:74:e5:9b:
d0:10:22:45:8e:8d:b0:e0:4c:9d:48:4e:3e:51:30:8a:02:31:
31:73:5d:af:9d:42:23:cc:36:ad:71:d1:5c:b0:99:c6:76:19:
ac:4e:12:8d:04:f4:a3:7d:cb:bb:71:b2:18:7c:cf:fa:95:de:
7a:e5:47:c4:5c:f2:3a:e1:68:2f:88:ee:23:fe:38:d3:01:90:
d0:70:93:2d:8b:55:c3:c9:84:9b:53:07:a6:dc:27:b8:ee:e1:
27:be:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:56 2023 by rpki-client on console-ams.rpki-client.org