Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/79yaNjAoSVIyO_azuNhjNKlGY2w.roa
File: 79yaNjAoSVIyO_azuNhjNKlGY2w.roa (raw, json)
Hash identifier: 6mUvebZFhSL6Vr+snA1dhAipX1W/QbUjBSGuHPy98wE=
Subject key identifier: EF:DC:9A:36:30:28:49:52:32:3B:F6:B3:B8:D8:63:34:A9:46:63:6C
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0A3F
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/79yaNjAoSVIyO_azuNhjNKlGY2w.roa
Signing time: Thu 15 Sep 2022 02:50:56 +0000
ROA not before: Thu 15 Sep 2022 02:50:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18179
IP address blocks: 211.78.240.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 15 02:50:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EFDC9A3630284952323BF6B3B8D86334A946636C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:a5:62:a8:6b:5f:bd:04:4a:e9:1b:c2:aa:
6f:4a:33:fc:e5:9b:36:66:fa:3c:4e:c3:fe:d6:96:
91:7e:ab:e9:b0:d2:d4:29:49:c0:9f:7e:e7:f1:52:
42:95:f4:18:01:95:f6:e9:9c:17:97:61:80:f5:a5:
e7:49:15:fc:41:a9:12:98:aa:bf:9e:19:f3:61:16:
d6:f0:bb:07:9e:14:19:1b:ab:cf:1f:6d:07:bc:27:
6c:67:b9:c2:40:17:e0:66:f5:c5:ef:ed:ae:d0:af:
24:7c:81:b6:77:33:54:8b:2e:7c:94:b5:ac:03:66:
1b:27:13:f3:82:86:f1:f9:58:65:74:7c:04:ff:e8:
86:e5:60:4d:8b:6b:fd:fa:10:c3:a9:81:31:24:73:
63:6a:e2:10:0c:93:5e:f5:85:c3:c2:df:3a:1c:6c:
70:1c:f2:16:43:4e:e6:02:11:c5:7e:72:c0:ce:a1:
2f:77:e7:0e:83:85:86:76:be:0f:a5:ab:e6:8a:a1:
78:30:3d:bc:f1:47:42:01:9b:db:98:8b:d1:fd:6f:
6b:11:38:3b:37:39:ca:eb:57:3c:c0:34:82:e0:e0:
95:e2:01:ce:96:08:f9:50:34:66:eb:d9:e2:81:2d:
ab:3e:77:fc:d4:65:79:06:78:49:02:8a:1a:4e:84:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:9A:36:30:28:49:52:32:3B:F6:B3:B8:D8:63:34:A9:46:63:6C
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/79yaNjAoSVIyO_azuNhjNKlGY2w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.240.0/20
Signature Algorithm: sha256WithRSAEncryption
33:4c:fe:ea:d9:1f:fb:b0:c8:9c:61:b5:03:56:19:59:0a:ea:
d4:c4:66:51:82:26:14:bf:c1:88:61:f2:7b:22:00:45:14:a7:
2c:98:9e:ec:9d:11:e5:0c:3e:0c:0b:7d:2a:75:0c:27:96:b8:
fa:fb:2a:4a:29:52:2a:c7:7b:8d:f3:2b:5c:e6:16:e9:a9:55:
c0:15:29:10:00:b5:66:42:39:ca:32:2a:cb:f6:28:5c:a2:75:
8f:49:d5:23:ea:b4:c4:b1:e1:5e:23:8c:b6:eb:9f:89:2f:7b:
dc:0f:84:4d:c8:32:e5:4a:5f:0f:a7:e5:2c:b7:3e:9a:80:d4:
20:e3:49:0b:23:20:a3:74:c5:30:6a:47:a6:6b:16:70:f8:63:
31:a9:5d:41:f9:eb:bc:03:82:6d:72:90:c0:44:c9:bd:67:df:
d5:d1:aa:62:ef:5e:df:08:f0:c9:24:31:a8:fb:38:46:07:17:
30:0d:24:1c:2b:87:a1:a8:42:8b:90:3f:f3:20:6c:8c:a1:43:
e3:1a:f0:ef:3b:1b:2e:0b:fe:b5:4a:a2:2e:0b:ef:ef:de:0f:
15:51:f2:b9:c3:49:af:61:87:cb:f8:22:15:a0:11:b3:80:ef:
2e:ef:c3:58:c5:ad:1d:e4:f4:bd:4b:d0:3e:5c:e0:a8:58:d0:
a0:55:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org