Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8KqCElz9dE5ewSA1gnTsHmAlKio.roa
File: 8KqCElz9dE5ewSA1gnTsHmAlKio.roa (raw, json)
Hash identifier: bil+SpBe0kw+38SSMiF1d7h4psYx8L09p0ozBhSMrSU=
Subject key identifier: F0:AA:82:12:5C:FD:74:4E:5E:C1:20:35:82:74:EC:1E:60:25:2A:2A
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0B05
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8KqCElz9dE5ewSA1gnTsHmAlKio.roa
Signing time: Mon 24 Jul 2023 09:21:17 +0000
ROA not before: Mon 24 Jul 2023 09:21:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17420
IP address blocks: 211.73.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Jul 24 09:21:17 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0AA82125CFD744E5EC120358274EC1E60252A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:e2:fb:4b:46:6b:7e:b0:16:04:2b:4c:03:
60:9a:c9:13:f0:53:1d:94:d4:3b:13:40:eb:35:37:
da:1e:ec:d6:ce:d7:d0:bd:8d:7f:58:66:90:69:a6:
f2:c9:6c:a3:0d:22:8b:a8:59:b3:ee:ec:db:4b:4f:
d1:c6:9f:46:c1:99:0d:90:5f:ba:0a:8d:0c:98:7a:
4b:a4:7b:32:90:c3:80:ae:a0:db:79:aa:38:bc:09:
80:43:c6:70:16:29:9b:52:18:b8:0e:77:ba:fe:38:
be:56:f4:3a:c0:68:45:88:10:39:74:85:41:a0:7d:
59:ba:fa:33:c7:31:0b:4b:d2:bd:4b:36:2d:c1:db:
d2:da:e0:9c:31:09:be:8e:fe:98:ce:a1:60:8f:51:
ea:41:21:a1:62:c8:e6:e1:78:77:2f:5d:5a:2a:92:
5e:a0:29:52:6e:3d:29:9e:43:c5:9e:ac:88:a3:d5:
2e:0f:12:3c:ce:5b:5d:45:42:8d:d9:2a:bf:f8:ea:
3a:db:54:0e:82:12:29:dd:a3:f6:5c:51:87:a9:b8:
6e:4e:98:37:9d:32:9a:b5:bd:5e:6b:3a:c6:f5:6b:
ad:43:58:96:22:14:a0:7b:ac:73:59:34:d9:6a:33:
25:05:db:ed:b7:e8:62:2d:4b:9c:2a:3c:a7:55:ee:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:82:12:5C:FD:74:4E:5E:C1:20:35:82:74:EC:1E:60:25:2A:2A
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8KqCElz9dE5ewSA1gnTsHmAlKio.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:e7:54:58:2a:58:56:12:6f:eb:a0:22:b1:04:43:0c:80:87:
57:fc:d8:51:7e:f0:6a:4a:39:44:0f:fb:72:bf:73:cc:8c:9f:
b5:8d:30:64:12:c5:f2:88:94:d4:f1:3b:95:5c:93:a1:c0:dd:
29:45:3b:eb:e9:20:f9:6b:0a:18:b9:db:ea:09:35:9d:b8:85:
e5:62:f6:28:33:d0:8b:b1:77:be:41:ea:9b:dc:62:9d:46:c6:
93:3e:ef:3a:5c:3a:c7:71:f0:48:0d:ac:2a:bf:a6:2a:dc:89:
8b:06:18:a9:6c:d2:36:98:35:b9:64:5d:8f:41:e2:55:28:d9:
1c:49:db:19:a9:74:0d:14:87:37:2f:51:10:27:45:76:bb:ee:
24:3d:58:70:b2:6a:6b:3f:7f:f2:db:f9:42:9d:96:05:56:27:
ce:31:89:c2:1c:f4:05:bb:7c:e2:70:f9:26:b3:c7:a3:c1:9c:
cb:da:5f:58:f2:53:12:01:2c:90:df:5d:7b:66:cf:77:a6:eb:
50:76:6d:64:96:10:83:8c:f8:56:85:bf:29:9b:47:fc:b9:c9:
3e:20:7b:9a:e3:bb:81:4b:34:4d:14:7b:2e:91:45:ac:b6:60:
84:7b:33:80:58:6e:c5:06:31:84:10:64:7c:0c:a6:38:f0:19:
7a:85:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org