Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/SojIFVk43mrIq4tx5CsoqO3F0oI.roa
File: SojIFVk43mrIq4tx5CsoqO3F0oI.roa (raw, json)
Hash identifier: e2A6APQSrDyVDC/2rvxPNYQJhQoDyn8wPbW1hiN4QgU=
Subject key identifier: 4A:88:C8:15:59:38:DE:6A:C8:AB:8B:71:E4:2B:28:A8:ED:C5:D2:82
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0A32
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/SojIFVk43mrIq4tx5CsoqO3F0oI.roa
Signing time: Thu 15 Sep 2022 02:50:37 +0000
ROA not before: Thu 15 Sep 2022 02:50:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4781
IP address blocks: 210.63.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 15 02:50:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4A88C8155938DE6AC8AB8B71E42B28A8EDC5D282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:5c:e3:cb:01:e1:ef:ff:9b:22:9d:cc:55:
81:ab:8f:b9:50:d0:68:bf:fb:e1:04:7a:3c:21:c4:
80:bf:36:64:24:5e:cd:1a:5a:bb:82:b3:86:ba:58:
f6:1f:fb:ba:83:dc:4c:f0:77:5d:b5:07:c6:37:17:
c2:5a:47:d1:6c:ab:ba:fa:38:f4:40:97:e0:d0:8f:
63:ec:11:a1:80:b3:2d:ab:d9:d1:e7:32:f7:fd:b1:
1c:33:cd:39:1c:57:8e:94:ce:2a:58:ac:ae:ee:32:
fc:33:15:17:61:97:5f:47:4c:d5:30:0a:99:fb:64:
74:d6:71:2b:d4:ce:05:41:f4:84:c1:00:5b:fd:f2:
35:15:4a:0e:a8:aa:73:f1:d0:41:0d:f3:7e:64:6f:
03:44:43:e9:d2:50:90:7f:72:13:45:cc:05:27:03:
95:e1:97:ce:c8:67:88:6a:c3:3e:25:b6:cd:b8:94:
38:b0:d3:d1:bd:c1:a7:3b:77:81:7c:5a:98:dd:6d:
01:b1:8f:46:82:18:08:78:2f:af:8e:c5:4c:00:d2:
e0:8e:e1:ad:fc:7c:67:b2:65:c2:69:2b:05:1b:c4:
c5:a7:f1:19:a6:df:d6:bc:c3:d8:69:68:3e:74:86:
72:37:58:84:49:aa:29:17:fc:63:c1:fe:ef:2f:f4:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:C8:15:59:38:DE:6A:C8:AB:8B:71:E4:2B:28:A8:ED:C5:D2:82
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/SojIFVk43mrIq4tx5CsoqO3F0oI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9e:53:7b:2b:8f:d4:8d:e2:2d:c4:2e:c8:49:fc:2c:c7:75:
90:8e:45:8a:55:fb:af:ed:79:3a:13:bb:d2:f3:8e:1b:6c:bf:
57:69:49:82:b5:b0:09:a1:05:b7:d6:2b:30:59:ba:bf:c7:15:
3d:51:11:f9:e8:cf:04:cf:72:61:be:a7:cf:92:03:7c:98:da:
2d:cd:e6:4d:b4:96:14:b0:43:82:ed:a3:04:53:fb:aa:a5:d2:
b1:0a:c0:a7:20:11:ad:b4:d2:63:71:b3:c2:be:23:7e:cf:c0:
e1:9c:45:a4:27:3a:5c:59:bb:f1:d1:ea:e9:5f:28:dc:6c:15:
e0:82:4f:4d:b0:ae:02:4c:c5:bb:35:0a:dc:9a:51:87:ec:4a:
43:a8:57:96:f5:39:04:0d:d9:2d:9a:ac:a4:79:84:2f:7c:f9:
0c:dc:1a:68:c5:c4:72:57:78:84:b6:63:b7:37:f5:d9:d1:5c:
a2:81:bf:34:d3:47:41:e1:d5:27:1c:1c:4c:dc:43:0d:a0:63:
a3:e3:0b:ba:e2:cf:ba:8e:41:dc:de:59:1d:d1:28:0f:54:f3:
cc:fe:d9:7f:8c:f7:36:44:3f:7f:b6:80:61:b6:49:62:71:1f:
7d:5c:5a:68:5a:76:98:8b:e9:c8:54:85:ca:46:30:93:c8:a3:
b0:cb:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org