Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/rOS3ygMkjwL6fEJ1u8WibOqJ7zg.roa
File: rOS3ygMkjwL6fEJ1u8WibOqJ7zg.roa (raw, json)
Hash identifier: Yf+wUiFtmuIW0CXexXTFPK1zSzEW4MZ6Hy+09xydNBM=
Subject key identifier: AC:E4:B7:CA:03:24:8F:02:FA:7C:42:75:BB:C5:A2:6C:EA:89:EF:38
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0952
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/rOS3ygMkjwL6fEJ1u8WibOqJ7zg.roa
Signing time: Wed 29 Sep 2021 02:53:14 +0000
ROA not before: Wed 29 Sep 2021 02:53:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18179
IP address blocks: 211.78.240.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 29 02:53:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=ACE4B7CA03248F02FA7C4275BBC5A26CEA89EF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:fd:a2:8e:c6:e1:9f:d4:3f:96:26:e8:fb:
44:68:b7:d9:27:41:fd:17:b7:7c:a8:0c:6f:89:eb:
41:18:12:79:76:3e:d0:f7:4d:f3:47:3d:b6:d9:2c:
a8:a8:2d:96:95:46:32:d8:ba:45:b1:ea:dd:7e:28:
15:0b:a8:cd:2c:cb:31:5e:19:5e:ef:c4:94:14:64:
4a:b4:41:c3:31:a7:8b:5b:dc:cb:b3:69:fb:a8:8d:
c8:37:24:fc:d1:73:e8:6c:50:0b:f8:5f:fb:50:c7:
86:68:c6:4d:01:a4:f4:9e:c5:f7:e5:3b:6b:ff:12:
16:aa:65:3f:4f:cb:76:dc:89:9a:b0:ee:ce:9f:33:
53:ed:9a:43:bf:1f:e1:1d:9f:45:7b:c3:79:27:02:
7a:d9:d5:d8:28:bf:1f:cd:2b:7e:8b:bd:c4:8d:15:
eb:f4:37:f4:1c:ac:c8:81:52:53:fc:a8:3f:13:f2:
e7:c4:ac:84:02:87:17:fe:33:3f:28:5c:7b:ab:b2:
1e:85:0d:3e:ae:95:5a:7e:f4:4a:64:e4:b8:96:d2:
21:6a:d3:92:15:de:c5:a6:de:51:f8:bd:72:8c:23:
15:4b:14:dd:aa:43:0d:db:23:85:67:a9:00:1b:74:
63:a5:f4:56:4f:6d:2e:e8:04:84:66:46:24:0d:c0:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:B7:CA:03:24:8F:02:FA:7C:42:75:BB:C5:A2:6C:EA:89:EF:38
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/rOS3ygMkjwL6fEJ1u8WibOqJ7zg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:87:b9:9a:fe:a5:7e:a2:d3:85:4b:a8:29:b5:6e:84:20:0a:
12:58:be:d5:3b:7a:36:ee:2c:c2:41:02:ff:09:18:c7:c1:ba:
15:2b:11:fe:ab:6b:36:8e:13:50:02:72:ef:11:11:e1:10:8c:
9b:91:ec:40:89:db:0f:34:e7:e8:a4:b6:f5:97:f8:59:b3:02:
01:f0:c7:ad:38:dd:31:47:09:af:26:73:3b:12:23:91:c6:75:
4b:90:3a:90:f7:bd:e7:28:d5:3f:f9:24:c8:b1:34:7a:6d:f6:
bc:19:16:fa:80:27:cc:ba:41:2a:b0:b2:4b:5b:82:d5:39:4f:
a1:e5:03:43:58:7f:7b:5e:bf:1f:e4:4e:08:65:ba:f7:18:2a:
26:cc:7f:72:39:67:7e:e6:57:be:77:3b:e5:64:62:98:3c:fd:
8f:d3:24:c0:31:9a:5d:b8:17:ff:4f:26:ec:07:74:6a:18:98:
72:f6:43:fc:eb:d1:51:71:f0:59:ba:36:ff:38:d8:83:8e:46:
c1:d7:a8:7a:77:28:7c:af:4c:85:ab:ef:10:58:e4:3f:9e:4a:
b1:87:3b:9a:12:a1:b3:6f:03:f0:cb:6a:a2:8c:27:42:11:13:
9f:25:79:d0:ad:3c:a2:d7:2f:55:b1:6e:95:6f:03:70:b2:a6:
a3:df:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org