Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/_uZwBGALz_YqGiS88rXHy1gMEfI.roa
File: _uZwBGALz_YqGiS88rXHy1gMEfI.roa (raw, json)
Hash identifier: bmJC9AAF9WCVjHO4iVu4E0J8hjPvSBTfZG5PiSiViOs=
Subject key identifier: FE:E6:70:04:60:0B:CF:F6:2A:1A:24:BC:F2:B5:C7:CB:58:0C:11:F2
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 09E9
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/_uZwBGALz_YqGiS88rXHy1gMEfI.roa
Signing time: Thu 30 Sep 2021 13:49:50 +0000
ROA not before: Thu 30 Sep 2021 13:49:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 211.78.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 30 13:49:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FEE67004600BCFF62A1A24BCF2B5C7CB580C11F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:e9:12:f5:25:b6:5c:4f:b8:73:88:a2:23:
3f:ac:1c:de:f0:dd:24:3d:ad:bc:91:16:d5:22:24:
e3:df:19:5a:41:38:7e:8f:8c:af:a5:fb:ff:a2:2d:
5c:c7:6b:20:2c:37:f4:43:5d:6e:47:a7:be:8f:c6:
28:ed:64:78:7f:f8:79:a3:bb:29:e2:3c:3f:d9:a5:
e3:98:0e:0c:ac:99:5e:97:fc:dc:5e:39:75:9d:2e:
f9:ef:25:93:28:90:b4:dc:e9:d8:53:bc:6e:0c:5f:
ed:14:b5:77:0d:c3:81:78:4d:21:b3:32:44:8a:6e:
27:46:0f:ed:8f:42:a7:1d:9f:d0:d6:54:9f:d0:31:
41:05:3b:36:01:85:f4:16:78:76:3d:5a:9c:7a:e0:
5f:da:ee:54:ce:ce:58:d6:0b:f3:3c:3e:ab:18:f7:
be:14:95:a9:c8:4f:89:5d:c3:d4:b9:96:7e:fc:01:
be:d8:2a:ab:44:33:60:8e:a4:eb:7c:f6:30:2f:de:
de:da:2c:78:4b:29:de:47:a1:e5:9e:82:b8:f9:b4:
26:5e:a1:e4:0b:de:b2:42:d9:c7:b0:0e:b5:d3:f1:
5b:5c:4f:04:90:3b:9b:14:25:36:e6:dd:05:23:8d:
e5:5f:c3:6a:fb:56:04:65:49:34:47:d1:44:3b:2b:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:70:04:60:0B:CF:F6:2A:1A:24:BC:F2:B5:C7:CB:58:0C:11:F2
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/_uZwBGALz_YqGiS88rXHy1gMEfI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.0.0/18
Signature Algorithm: sha256WithRSAEncryption
22:88:cc:20:a1:d1:24:b1:05:3f:c4:bf:2d:89:50:4f:8c:f5:
0f:87:2d:01:80:cd:81:c9:e9:d8:2c:ab:51:2c:9f:b4:29:7b:
80:ac:23:4e:2d:45:09:d3:3f:27:2e:67:cd:e6:c1:48:47:d1:
a9:35:b3:94:25:7d:ce:e4:0f:eb:71:3d:08:fe:4a:3e:dc:f1:
c7:7a:e0:a5:85:d5:8c:9e:73:60:bd:0c:76:12:df:00:43:bc:
7b:a9:12:01:72:a1:fa:8e:d3:ef:d3:80:9b:0b:5f:bf:8b:69:
82:11:77:64:cc:32:d1:c4:25:46:e5:85:87:d6:b6:06:20:02:
d9:41:bc:38:56:b5:09:7a:cc:dd:b7:3c:4b:3e:77:7c:77:5b:
79:d6:55:8a:27:2c:25:ef:e6:21:fd:fa:6d:62:0c:c2:03:fc:
ac:ee:3b:37:64:34:ee:24:dd:db:87:7f:86:1f:7d:89:b8:ff:
2f:5a:a9:7c:f8:27:e7:1c:70:fb:d9:20:77:79:32:0a:84:de:
40:ba:c0:be:1a:50:c3:b7:62:82:e4:67:c5:e0:d2:a8:58:f5:
df:8c:07:f1:78:00:44:14:06:9e:6d:4c:4e:b4:1c:23:dd:dd:
4e:b2:74:45:c9:fb:23:f3:7f:c3:82:57:bb:62:57:1c:a2:2a:
9b:af:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org