Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/GVwm8orbljpOBv0PqatkOYvZVQ0.roa
File: GVwm8orbljpOBv0PqatkOYvZVQ0.roa (raw, json)
Hash identifier: vHCkbukCCJe77yWSYUAIEhX9BBVmx37E/rKyf7A54P8=
Subject key identifier: 19:5C:26:F2:8A:DB:96:3A:4E:06:FD:0F:A9:AB:64:39:8B:D9:55:0D
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0743
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/GVwm8orbljpOBv0PqatkOYvZVQ0.roa
Signing time: Tue 29 Sep 2020 10:00:28 +0000
ROA not before: Tue 29 Sep 2020 10:00:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4781
IP address blocks: 210.63.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 29 10:00:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=195C26F28ADB963A4E06FD0FA9AB64398BD9550D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:24:2d:9c:0d:dd:4e:25:32:85:f2:af:e2:
64:76:fa:1d:9a:7c:50:a1:b9:84:5e:48:05:7a:a8:
68:3b:09:71:de:2e:67:cf:ed:1a:b3:fc:7d:0a:a4:
90:26:e0:00:2e:ff:fd:e2:b6:df:aa:81:d0:1b:53:
36:40:e1:c7:25:6d:a2:26:f6:e7:01:12:0a:7c:7a:
37:77:ff:76:e0:de:8b:63:51:5d:bc:c6:3f:16:35:
43:dd:5a:b5:f9:15:59:6d:b6:f2:45:89:b6:43:64:
43:16:60:9e:fc:da:df:c1:0f:35:f6:13:92:a7:3d:
da:61:db:af:05:78:b5:39:62:70:a2:4b:1e:29:a8:
74:bf:1c:b3:e5:6c:04:ce:1c:6a:66:83:c5:a7:13:
5d:4f:88:2f:ba:da:63:85:3b:30:25:0d:37:c7:c2:
31:d6:a6:9b:5c:15:b3:11:53:36:91:3b:ed:40:e3:
9f:4a:8d:cc:e6:a8:b8:a9:5d:90:14:a9:24:cf:4b:
8f:63:5e:5b:4a:93:0d:c6:02:73:67:7a:0b:0d:cd:
d1:02:e2:a5:26:4e:ab:d5:25:38:e9:a6:69:7e:45:
01:7d:92:d8:4b:6f:e7:e1:d0:cb:83:ee:16:38:07:
ea:ca:79:80:27:79:d1:b0:9c:7d:cc:73:ec:1d:34:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:26:F2:8A:DB:96:3A:4E:06:FD:0F:A9:AB:64:39:8B:D9:55:0D
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/GVwm8orbljpOBv0PqatkOYvZVQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:b1:17:c4:e9:03:30:0c:8d:62:9e:9d:f3:93:74:52:46:
9a:a3:1e:18:09:10:ce:8b:f6:e9:aa:88:97:7e:56:5c:2e:1a:
d5:8e:aa:be:d9:9c:f4:73:60:91:d0:f0:16:68:6a:74:b4:a8:
08:31:a4:14:00:02:03:39:c2:92:9f:0d:20:1e:28:96:9a:ab:
f7:14:4d:42:e7:bc:a5:de:cb:66:f0:dd:c8:bd:e0:94:bc:cd:
17:5c:a1:b6:3a:f6:ff:67:06:2d:e7:29:ac:a0:80:ba:f2:b8:
67:26:1c:ff:d3:ab:1a:60:ef:22:71:9b:2a:18:f2:44:a9:41:
38:46:68:66:aa:bc:b0:a7:ca:e2:5a:0c:59:9c:7b:38:a7:e0:
e6:8c:17:29:91:4b:cf:4d:2f:f9:53:40:0a:81:68:6a:fe:10:
50:a5:7e:a0:fa:01:11:d8:21:03:e0:33:22:fe:84:ac:c4:61:
3b:ca:8a:92:ac:60:d5:b6:84:ed:de:e1:57:d6:24:ae:44:cc:
e6:94:90:aa:b8:a9:f1:2a:e0:c9:0c:50:44:67:d9:4f:80:f6:
72:25:b4:ed:6b:be:30:9b:4d:04:04:93:77:d3:1c:09:8d:f3:
81:35:9c:5b:83:c6:31:66:30:51:e2:17:cf:d5:b9:6c:95:1f:
dd:93:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org