Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/decESJd6KPScE0h9ysNriRvf6aw.roa
File: decESJd6KPScE0h9ysNriRvf6aw.roa (raw, json)
Hash identifier: uwxFun1dFLxo/o/CjVwrAmAeLYPLxQo9G0jUu5gHERw=
Subject key identifier: 75:E7:04:48:97:7A:28:F4:9C:13:48:7D:CA:C3:6B:89:1B:DF:E9:AC
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0777
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/decESJd6KPScE0h9ysNriRvf6aw.roa
Signing time: Tue 29 Sep 2020 10:00:20 +0000
ROA not before: Tue 29 Sep 2020 10:00:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7539
IP address blocks: 203.145.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 29 10:00:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=75E70448977A28F49C13487DCAC36B891BDFE9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:62:23:bb:b3:06:2d:56:23:53:ff:9c:af:
08:5a:a7:97:a9:bf:3f:46:90:2b:d0:7d:f5:26:bd:
c5:2e:7e:c1:0b:23:e1:f3:2a:52:e2:ea:41:fd:26:
74:8d:66:50:ae:b3:c1:83:ee:33:61:72:eb:d3:f9:
98:1e:84:81:6e:8f:11:ec:7a:e4:7a:de:9f:11:7a:
c8:79:53:d7:ac:65:c7:2d:ee:23:eb:4b:10:28:62:
cd:39:4c:1a:2d:a9:4e:39:6a:65:f6:9c:87:13:3c:
75:a1:35:99:d7:61:7b:c4:5d:63:c0:57:3a:4c:9a:
02:9d:a1:59:f7:07:cd:f5:30:73:89:ee:80:e7:12:
c6:c0:23:1c:4f:f4:cb:ba:bd:d9:9c:31:53:e8:50:
13:bf:35:b4:de:3e:c1:05:53:6b:52:45:27:dc:0b:
14:8b:c5:ba:97:55:0e:ba:11:7d:5f:b9:93:be:e3:
b9:2c:b8:4c:71:24:43:f7:a4:a3:ca:b8:b5:c1:c4:
1a:0f:fe:45:59:ed:e2:99:32:89:b9:f1:a1:8d:b9:
aa:53:e3:ac:f2:d4:15:30:89:88:56:4a:9c:2a:08:
4c:ec:cd:3d:3f:f5:8a:83:da:93:30:6e:0f:ea:9c:
c9:7d:72:13:e6:b8:48:74:04:ae:ee:29:00:d1:91:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:04:48:97:7A:28:F4:9C:13:48:7D:CA:C3:6B:89:1B:DF:E9:AC
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/decESJd6KPScE0h9ysNriRvf6aw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.208.0/20
Signature Algorithm: sha256WithRSAEncryption
39:bc:d0:02:71:18:97:d9:d9:75:fe:3e:6a:4e:d1:5e:db:b7:
cf:e8:7f:08:17:9f:0a:85:d0:7e:a6:d6:7f:19:8a:50:84:4a:
62:f9:90:64:c1:7c:03:56:91:f4:45:79:ed:62:4b:3a:87:3a:
e0:85:fe:2e:b8:60:2c:65:f1:d0:b6:13:88:d9:ea:c3:81:f8:
eb:54:18:9c:25:bc:0b:d9:91:99:b0:27:6c:2a:73:94:e5:17:
a2:c6:e8:22:51:01:05:f3:ed:86:c9:ea:57:b8:53:9d:e9:c2:
0c:c0:91:db:0b:b2:a9:95:78:2e:96:5c:a6:2a:7f:27:18:e2:
c6:82:98:11:0e:aa:c0:73:77:f7:02:b7:db:12:4d:8b:92:38:
22:68:3c:44:ca:a4:88:11:0f:6e:11:9d:6e:7f:c8:5f:f5:ed:
d6:58:ae:36:d2:e1:9a:1c:66:d3:c8:62:2e:00:db:58:31:5e:
0c:8b:94:d0:f1:00:71:dd:33:3e:5d:9b:e6:4d:c1:f8:a4:eb:
36:88:11:c7:19:f7:f1:d5:62:b7:5c:c6:a8:8f:cc:25:b0:0d:
86:68:bd:34:68:f8:86:c3:c8:a6:66:b5:f8:1f:b9:52:67:cc:
71:f2:29:6e:bb:b0:04:e1:29:12:ac:40:26:08:be:3a:a4:26:
19:3d:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org