Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/QSWyLWY8t2oq_Zh-vwSChUXlGlI.roa
File: QSWyLWY8t2oq_Zh-vwSChUXlGlI.roa (raw, json)
Hash identifier: ctfnD6hHOE7aFuwHH0voLDsKaTwTApYzxZW/J5eJ25c=
Subject key identifier: 41:25:B2:2D:66:3C:B7:6A:2A:FD:98:7E:BF:04:82:85:45:E5:1A:52
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 088F
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/QSWyLWY8t2oq_Zh-vwSChUXlGlI.roa
Signing time: Sun 07 Feb 2021 13:00:53 +0000
ROA not before: Sun 07 Feb 2021 13:00:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17420
IP address blocks: 210.67.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Feb 7 13:00:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4125B22D663CB76A2AFD987EBF04828545E51A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:6d:48:e1:0e:9d:fe:2d:3e:3a:95:18:82:
b4:91:0b:ab:ad:6d:c1:f3:d3:02:36:06:f3:a4:5f:
c7:69:65:c2:ab:4a:1e:83:aa:1a:0b:4a:6a:95:9a:
5b:c6:50:8f:5c:ee:11:5c:9c:c3:5f:63:cf:ee:a2:
ca:e9:c8:87:ef:70:92:37:aa:23:8c:2f:74:cb:5a:
2a:aa:8f:be:37:a0:a3:11:1e:75:77:e5:3a:11:25:
a6:81:7f:c6:78:d5:7e:a3:93:1b:c5:95:6d:75:dc:
f9:2d:52:7d:7c:fc:19:37:10:74:db:3f:f7:d1:f9:
0d:ae:c3:da:85:11:13:de:f1:60:39:14:80:a7:dd:
39:0e:6d:2c:32:52:04:dd:5c:1c:08:3f:1b:79:0a:
86:ba:2f:33:7c:9d:c9:14:d0:eb:ce:33:27:21:f4:
47:ba:de:15:53:c3:75:29:9e:21:b8:84:19:de:88:
fb:2e:29:6e:b3:37:df:5d:19:10:8f:22:35:26:d7:
ae:02:6d:0e:da:84:9f:0f:05:7e:70:b6:4b:de:03:
06:d6:87:d5:bc:1d:84:82:4d:06:1e:94:1e:36:d3:
27:d0:ee:77:1b:ff:dc:d1:a5:cb:e5:2c:8e:38:7d:
1f:77:98:27:ec:4e:03:75:b3:59:7d:7d:63:71:4e:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:B2:2D:66:3C:B7:6A:2A:FD:98:7E:BF:04:82:85:45:E5:1A:52
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/QSWyLWY8t2oq_Zh-vwSChUXlGlI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.64.0/19
Signature Algorithm: sha256WithRSAEncryption
48:ef:ef:da:89:64:2d:c5:33:38:5d:82:84:8a:ac:a9:a2:6e:
a9:2a:8e:73:60:54:94:4c:db:ad:2f:f6:88:65:a2:2d:6c:74:
ad:36:9d:17:77:55:7b:54:a8:76:66:0b:bd:eb:02:ab:90:26:
5c:0f:f8:e4:ef:a3:3e:ae:88:91:b4:d4:fa:40:64:56:41:3c:
9a:17:f6:82:70:02:d3:e0:e8:fd:8d:ab:0c:fe:1c:d2:39:0b:
3b:5b:0a:50:73:fe:e9:19:38:34:39:67:1d:e0:68:be:7a:a8:
ff:a2:30:e1:fd:7e:26:7a:e7:7b:1d:99:2d:a7:4a:87:fe:3c:
59:cc:b5:fc:46:3e:28:48:39:f0:a5:1a:5c:1c:65:3a:a3:45:
cd:43:58:61:59:d7:ce:9e:94:66:3a:e6:d9:4d:05:40:38:2f:
89:dc:e2:95:4d:17:cd:8b:d5:f9:e1:dd:11:13:5d:56:b6:83:
38:b0:c2:af:ef:27:d0:ed:85:5a:63:ab:5e:8e:73:e4:ca:f9:
a3:53:c5:91:c5:03:0a:28:1c:db:65:19:ec:ce:2f:e5:cb:ce:
09:c2:e1:7b:be:11:71:d5:ac:71:b8:08:22:83:02:f7:73:ca:
14:7d:7b:17:98:47:01:e5:f9:90:e7:e1:4e:dd:2a:07:6e:0d:
82:3e:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org