Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa
File: cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa (raw, json)
Hash identifier: 1iihHVII10lgljwUJQi9VJi8kgmzE+gDP4pkcivymYM=
Subject key identifier: 70:1B:B8:2D:60:02:E3:89:02:48:39:EB:9B:90:19:D8:0F:D4:62:F8
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 07A5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa
Signing time: Tue 29 Sep 2020 09:59:48 +0000
ROA not before: Tue 29 Sep 2020 09:59:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 61.61.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 29 09:59:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=701BB82D6002E389024839EB9B9019D80FD462F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:28:a4:d6:4a:7f:5e:e4:1b:bd:05:47:40:
9d:01:47:08:89:7e:27:32:8f:eb:50:8f:b6:a8:6c:
ca:2b:f5:cd:d5:2f:92:f6:29:0b:53:8e:91:56:9e:
bd:d7:a8:b8:a8:43:11:d0:f2:4e:ba:7a:95:bd:f6:
e4:d3:81:fe:44:f1:93:b2:2f:c3:98:7e:ab:8a:03:
87:09:2f:4f:1b:64:2d:97:03:ef:60:81:e1:fc:5d:
6f:e9:e3:23:68:a7:36:90:ba:62:18:8a:78:c3:ba:
f4:e0:d9:fb:e2:73:fa:02:44:95:24:c6:25:75:d8:
dd:77:95:66:3f:06:32:54:00:08:0d:d7:91:a0:88:
b8:e5:b9:bc:10:90:a0:2b:5d:77:e8:63:cd:36:00:
cf:2e:20:c3:d5:d6:81:dd:42:4c:5c:97:ae:f3:35:
ef:b6:ec:01:3a:35:0f:10:cf:f3:fe:07:99:a8:bb:
84:d1:53:7b:4a:5e:c5:3e:20:89:6d:d2:32:09:2e:
25:89:f5:c8:b7:c9:4e:b0:8d:f4:31:a8:b1:17:3f:
6f:b7:a9:c3:84:52:ac:92:66:9d:5c:66:80:7b:58:
2f:c5:fe:6d:4c:c9:6c:a5:69:8a:89:21:3e:27:ac:
ae:1c:35:43:3f:00:22:5d:2f:a8:11:af:cf:c7:e5:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:B8:2D:60:02:E3:89:02:48:39:EB:9B:90:19:D8:0F:D4:62:F8
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.33.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fe:e8:63:69:1e:13:1f:d7:b7:cb:c6:ac:91:c0:68:10:e5:
30:d2:59:24:66:84:c4:54:05:38:8b:7c:78:cb:af:b8:23:2c:
1b:13:60:5d:f7:74:96:c4:c6:1b:7b:64:9b:9c:43:57:00:f4:
17:66:18:ef:6a:d7:db:76:d4:3f:83:27:8e:cd:4e:38:bb:3c:
96:f6:c2:44:75:e9:8c:54:a1:0c:f6:a6:92:eb:04:67:e3:34:
ef:13:32:f6:cd:83:f0:18:a6:92:80:96:42:b9:a1:2a:d6:48:
f7:14:c8:cd:06:22:42:ce:c6:df:03:8c:4c:b4:b6:0b:e8:78:
76:49:41:2d:12:3f:10:2e:6f:b4:48:3b:fa:64:c9:dd:8e:76:
69:35:72:18:8a:47:94:01:8e:2e:ad:1c:1f:01:8c:5b:3c:02:
96:c1:a2:a4:f5:4d:f8:aa:c7:fe:cb:f3:c4:d9:da:be:47:e7:
95:75:27:a7:5e:80:06:a2:32:09:8c:22:a4:9a:3c:0c:0d:15:
bd:49:4a:9a:e4:86:f0:1a:52:b5:7c:9d:4b:c8:63:99:67:9a:
4a:90:66:10:20:21:73:59:28:ca:b8:10:6a:d6:9c:a6:ed:25:
18:2a:c8:c4:32:a2:d1:88:0f:9d:1f:e8:ca:c0:bb:a0:d3:59:
94:7e:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org