Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/LzdVFBp7vdU2DdsJsEhZr7pOZ0w.roa
File: LzdVFBp7vdU2DdsJsEhZr7pOZ0w.roa (raw, json)
Hash identifier: c6eVZvk3SKyKBE5/N9jyitGwLty8wnkhGwMfcTZ8/TY=
Subject key identifier: 2F:37:55:14:1A:7B:BD:D5:36:0D:DB:09:B0:48:59:AF:BA:4E:67:4C
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 073B
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/LzdVFBp7vdU2DdsJsEhZr7pOZ0w.roa
Signing time: Tue 29 Sep 2020 10:00:26 +0000
ROA not before: Tue 29 Sep 2020 10:00:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17420
IP address blocks: 210.241.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 29 10:00:26 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2F3755141A7BBDD5360DDB09B04859AFBA4E674C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:48:b4:d9:4d:33:c5:30:9e:87:c5:cb:26:
c9:8b:7e:89:a8:ff:6c:f1:89:52:82:0a:58:a0:e6:
71:e9:ef:49:25:cd:6b:19:7e:f7:3f:9a:81:2f:5c:
4a:a2:0c:7a:7b:8b:10:5b:e9:49:36:60:e3:ca:50:
aa:1c:46:8d:8d:6b:68:37:3e:2a:a5:54:fb:bd:33:
04:6a:75:19:a3:34:0a:bf:da:b7:37:38:a9:a0:80:
71:6c:e9:1b:c2:52:4f:46:c8:25:41:94:5e:56:d9:
94:16:27:d9:b8:28:70:f9:70:1c:e5:a5:d7:1b:52:
ba:60:67:05:a0:2e:7f:31:87:bc:21:30:1c:cc:30:
69:47:d7:58:7f:79:37:13:70:64:de:9f:13:3d:2f:
85:e7:b8:c7:40:c8:6b:6f:07:fc:d9:52:3a:c5:7b:
bf:b6:72:57:f3:01:53:bc:35:a3:67:7d:67:96:cc:
64:19:9e:ae:ab:b2:56:25:9d:18:6b:e4:2b:dc:45:
23:12:cf:e5:d3:0d:f6:b1:e2:60:82:71:cd:e2:d1:
cc:63:8d:43:50:67:06:06:4e:2c:42:95:16:5c:b0:
4b:c4:85:e1:99:9f:0a:0c:d2:cc:a8:ee:6f:02:37:
7e:75:1b:2c:da:8e:bc:42:2c:40:46:de:72:1f:17:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:55:14:1A:7B:BD:D5:36:0D:DB:09:B0:48:59:AF:BA:4E:67:4C
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/LzdVFBp7vdU2DdsJsEhZr7pOZ0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.128.0/19
Signature Algorithm: sha256WithRSAEncryption
83:c5:45:0f:aa:88:82:2f:3d:ee:d1:72:2f:1b:33:17:5a:8f:
7c:03:ac:e1:fe:20:c2:bb:5c:4a:2c:b6:a4:6b:4e:6f:03:36:
0f:a8:d8:d4:1e:11:c5:83:5c:fd:f4:d8:56:64:59:8a:08:a7:
89:0d:65:20:2a:b3:0d:c3:f6:bb:04:a1:7b:25:29:5e:a4:93:
4b:1e:fa:5c:7e:22:67:a7:ec:ad:aa:3f:dc:12:bd:3c:63:3b:
9e:88:b0:83:a7:f8:f5:37:4e:04:e4:54:c5:bc:96:34:58:77:
69:74:7b:50:55:d1:d3:b2:d5:91:d9:b7:98:35:3c:07:bb:d4:
46:26:7b:a0:c7:c3:c8:a2:d7:07:d2:26:0b:f7:c1:aa:61:fd:
ce:4f:c4:20:41:0b:32:4c:8e:f4:51:a0:6e:28:d8:cb:fa:88:
e5:b4:9b:4c:60:9f:35:cd:d9:6b:44:10:ec:3e:d0:70:10:55:
19:1d:8d:ab:bc:ba:4e:88:6d:64:08:38:6b:09:a7:f5:9c:9c:
74:60:bb:ed:d1:be:f1:47:0d:b5:0a:20:b2:d1:9a:cd:f3:37:
c2:06:4a:16:60:38:86:61:e8:ac:e0:13:cd:59:ac:03:6d:d3:
34:31:49:cf:17:82:ae:10:64:b2:02:b0:78:80:44:b6:39:fa:
9c:94:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org