Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/450uu0h1vivjxS_vj2F2XeeRhG0.roa
File: 450uu0h1vivjxS_vj2F2XeeRhG0.roa (raw, json)
Hash identifier: BstDUD4fYQhplLvqf7EgXfmIFKcJOUJLMMNNqznu+lo=
Subject key identifier: E3:9D:2E:BB:48:75:BE:2B:E3:C5:2F:EF:8F:61:76:5D:E7:91:84:6D
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 093E
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/450uu0h1vivjxS_vj2F2XeeRhG0.roa
Signing time: Wed 29 Sep 2021 02:52:55 +0000
ROA not before: Wed 29 Sep 2021 02:52:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4781
IP address blocks: 210.63.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 29 02:52:55 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E39D2EBB4875BE2BE3C52FEF8F61765DE791846D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:f9:a3:3e:32:85:63:47:7b:4d:51:57:7e:
d0:60:6b:0d:3f:c1:ef:c1:26:12:7f:4e:43:a0:1b:
97:e5:86:8e:9b:95:1b:69:53:3c:e4:60:25:32:7b:
f4:05:01:83:02:5e:89:05:eb:6a:c2:3a:8d:56:ed:
22:f2:4b:35:0d:a0:8e:74:52:10:96:61:09:8d:f3:
f5:6a:58:3e:a8:2b:39:35:84:06:d9:3d:e7:a8:5f:
91:cc:85:fe:a6:d1:56:61:8e:25:a1:60:92:e0:99:
68:54:d5:47:cb:88:27:77:5e:b8:ca:8c:18:ef:4a:
c2:52:52:4e:46:fc:5e:71:26:1a:45:f1:e7:6a:a6:
4c:d0:fe:93:98:d8:92:0f:3e:24:cb:df:97:d0:b7:
41:63:e6:15:e4:47:85:56:0d:29:f9:35:86:a4:ae:
27:42:7d:e2:46:d7:d8:73:94:d9:2e:22:ca:39:19:
d9:8e:a8:35:d8:34:37:fe:cf:fd:68:56:4f:a3:14:
8e:59:a7:bd:dd:89:b9:0e:0f:2e:1a:f2:bb:34:a7:
a6:ff:6c:12:b6:46:3f:f8:8c:c2:62:11:f1:5e:e1:
ca:8b:4c:66:07:a9:b0:f1:95:91:21:df:6d:68:69:
b7:79:9f:ff:13:86:03:dc:98:2e:6e:ee:4c:9c:ab:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:2E:BB:48:75:BE:2B:E3:C5:2F:EF:8F:61:76:5D:E7:91:84:6D
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/450uu0h1vivjxS_vj2F2XeeRhG0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.102.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6b:a2:ee:66:66:a9:dc:9a:f5:97:18:1a:15:59:60:e2:2a:
c8:bd:9d:51:5d:5d:9a:a8:69:e0:7a:06:70:93:e3:0c:cf:69:
0e:e5:a7:a7:8f:dc:eb:81:d4:b2:b9:b4:1c:a8:8b:ee:7c:8b:
21:aa:5f:9c:fc:e6:78:b0:1e:c1:9a:b3:dd:0c:94:75:68:e6:
a3:bf:d1:2b:30:10:b0:7e:74:87:bd:18:a0:1b:5d:13:e5:bb:
29:a2:71:4e:95:f2:1b:01:d2:fc:5f:3e:4a:fb:1c:8f:38:b2:
29:90:9f:0f:d3:4d:75:e7:2f:f2:a6:7c:4d:26:2b:45:7c:f2:
84:9f:40:3d:a6:b2:38:cf:a8:77:1c:ae:54:cd:9a:bf:2e:f8:
de:c8:d4:5d:bb:68:68:6a:f8:79:83:2e:b6:92:2f:9f:c0:7e:
f7:f6:a9:92:38:52:b4:73:a0:58:1c:8b:ef:dc:04:f3:bd:4f:
46:e3:b8:0e:5e:17:45:37:f7:71:b2:06:66:50:02:b6:d4:44:
3c:f3:09:4d:ba:d2:0c:f1:22:ad:f9:7d:53:ba:7d:a6:b0:14:
66:a7:c1:d4:56:8a:60:a6:26:4c:d5:b0:f5:2e:61:02:b0:0a:
c1:8c:3a:b8:54:d1:23:05:28:91:1f:54:d3:fd:fd:52:11:c2:
af:18:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org