Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Fya3g0Izvm41SsSSRAnFYkqz5sk.roa
File: Fya3g0Izvm41SsSSRAnFYkqz5sk.roa (raw, json)
Hash identifier: Zq6/l9NcIodNrjrKRvTFy7Ut1jgiCIS+M+8VfdJbqvw=
Subject key identifier: 17:26:B7:83:42:33:BE:6E:35:4A:C4:92:44:09:C5:62:4A:B3:E6:C9
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0947
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Fya3g0Izvm41SsSSRAnFYkqz5sk.roa
Signing time: Wed 29 Sep 2021 02:52:58 +0000
ROA not before: Wed 29 Sep 2021 02:52:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17420
IP address blocks: 210.241.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 29 02:52:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1726B7834233BE6E354AC4924409C5624AB3E6C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:6d:ed:7e:27:cc:27:e7:e2:be:39:a2:3a:
68:95:25:e5:e2:31:44:14:6e:d9:f9:e7:3b:1a:6b:
44:02:45:e1:da:5d:1d:ae:8f:13:a4:17:a6:6e:42:
84:01:80:cd:05:77:b0:85:25:83:b3:90:9a:2d:09:
b0:97:2e:ed:56:00:ab:bd:50:66:bd:00:ea:44:b4:
ef:8d:e7:5b:dc:f7:ea:14:81:18:69:0a:33:a1:d1:
70:af:f7:80:55:02:f9:a3:a7:1f:be:ee:44:7e:8d:
a9:8c:fb:a1:90:3b:28:6a:c4:43:df:ea:2d:5c:b8:
39:62:20:1b:50:72:aa:46:9a:b6:93:ce:fb:01:53:
5f:d6:1f:bb:3f:be:fd:6f:dc:ca:df:08:3a:dd:91:
d8:bc:43:9d:fd:6c:95:63:02:1e:e0:ac:d3:54:39:
19:b0:5b:68:71:8e:66:9d:bd:c1:1f:7a:93:c5:3a:
10:46:bc:5e:61:fd:ef:23:f9:5c:4b:2b:c4:61:6f:
40:de:d7:ea:5b:3b:e7:c3:76:83:5d:cf:7e:7c:b0:
79:f6:91:3e:5a:92:9e:39:47:0b:16:c5:fa:a2:7c:
e8:69:df:6a:13:5e:c7:85:64:0a:75:42:12:f5:2d:
75:d2:3f:0f:d0:e2:68:c1:36:b7:5b:e5:f6:6f:94:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:B7:83:42:33:BE:6E:35:4A:C4:92:44:09:C5:62:4A:B3:E6:C9
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Fya3g0Izvm41SsSSRAnFYkqz5sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:8f:53:ea:e4:6f:aa:ce:bc:fa:88:80:c2:d4:f4:13:5c:4a:
1f:a7:db:0e:4d:fc:2b:ce:7d:1e:a7:c7:00:1d:66:c8:47:e7:
46:2e:93:b9:9c:37:cf:58:e7:81:67:c3:2b:1b:21:99:fa:0d:
2f:6d:6d:8a:af:7c:5f:35:3b:41:a2:1f:9f:67:d3:67:fa:3e:
99:62:5e:80:aa:5e:bd:7c:62:9b:37:75:cf:41:b5:ee:73:f3:
af:11:9e:3e:c3:3c:01:b0:57:1d:92:8f:98:6b:ff:4e:bb:76:
3e:98:3a:af:e3:bc:6e:d1:f5:29:29:df:08:ea:95:7f:7f:a5:
50:68:4b:d1:c5:b3:e2:e6:40:49:f5:99:f5:10:b5:f8:d2:6f:
2f:cf:80:e7:f3:d4:59:29:a0:24:20:08:02:2d:73:81:46:2a:
d9:8c:bc:15:78:3a:c9:8d:96:21:4c:f9:d7:56:30:92:30:77:
38:bd:28:87:50:2e:06:ed:6c:5d:6e:1a:ac:97:2b:e1:f8:0d:
cb:2e:4f:26:dd:f2:c6:b1:bb:58:46:fb:f0:fd:6f:84:56:ff:
ad:a1:39:b1:dc:02:9c:b8:6c:44:bb:7d:be:bb:5e:07:df:da:
c6:eb:cb:c1:6c:7d:2e:de:bf:e9:fa:1a:75:96:7d:25:52:54:
b1:83:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org