Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/c66JGRlwNiXkCIfymn3JCwTmIpo.roa
File: c66JGRlwNiXkCIfymn3JCwTmIpo.roa (raw, json)
Hash identifier: F+8PGLEzy/m20K8xCgTn/VKx05a/Q8MQ4XN2XTc4WO0=
Subject key identifier: 73:AE:89:19:19:70:36:25:E4:08:87:F2:9A:7D:C9:0B:04:E6:22:9A
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0A32
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/c66JGRlwNiXkCIfymn3JCwTmIpo.roa
Signing time: Thu 15 Sep 2022 02:50:36 +0000
ROA not before: Thu 15 Sep 2022 02:50:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4781
IP address blocks: 210.63.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 15 02:50:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73AE891919703625E40887F29A7DC90B04E6229A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:bc:e3:0c:ff:16:3a:9d:97:0c:8f:32:c5:
48:80:3a:a8:f3:d3:dc:d3:3e:36:6e:61:28:68:60:
5b:7e:a0:31:ae:4c:ab:8c:78:c1:49:2f:82:5e:36:
a7:f9:07:2c:ae:5e:75:1f:19:ef:7e:5c:08:3c:12:
86:c3:03:ef:26:07:7a:cc:86:f1:90:c9:34:df:c9:
da:4f:6a:68:77:d4:5b:8e:97:06:0e:3a:c6:a4:5d:
1f:9a:3c:38:29:b5:fc:09:b5:08:13:58:84:9f:95:
f7:ae:90:56:ea:f8:53:34:11:74:8f:9b:97:81:78:
86:b0:42:ac:e7:37:38:9a:41:af:3c:08:7e:0b:a5:
85:47:3f:25:6c:bd:c1:af:1a:00:c6:c5:93:f2:99:
eb:e1:2c:eb:71:10:4b:27:2f:08:83:35:5c:62:83:
44:e3:c0:07:5f:2d:55:20:73:d8:35:a3:7a:8f:af:
d8:07:ec:96:60:7e:29:68:49:33:41:d6:a3:5e:82:
91:00:56:ce:39:0a:b4:a5:ce:8f:05:c2:f2:e2:44:
72:fd:ea:6a:94:5d:00:f4:64:d9:d0:61:f1:0f:ac:
e0:f7:58:a9:af:56:ca:e9:ac:b6:b3:f9:1d:27:f1:
31:c6:b3:3b:73:85:c7:53:e4:91:5b:59:13:64:b5:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:89:19:19:70:36:25:E4:08:87:F2:9A:7D:C9:0B:04:E6:22:9A
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/c66JGRlwNiXkCIfymn3JCwTmIpo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:dc:a1:eb:f8:aa:94:da:83:7f:cf:c4:c2:10:a9:8c:57:c9:
41:65:fb:4f:0c:91:3a:d6:19:cd:5b:14:24:14:28:01:d3:e5:
ad:25:5e:25:e2:6a:e8:82:29:95:a8:8e:6e:7f:58:04:8d:70:
4c:a8:b6:f0:8b:6e:8b:20:df:ac:fd:17:e9:ce:1f:8b:41:c1:
9e:b9:c4:0f:a3:26:7f:92:bd:29:46:07:bf:8b:3d:ab:62:57:
82:53:b6:da:e5:7d:d5:64:a6:b8:a7:09:c5:1d:98:bb:40:2e:
d4:aa:ca:c5:92:93:c5:93:80:43:a2:c8:50:5c:c2:d3:e7:ce:
0c:98:a1:19:68:85:13:a8:10:30:a3:3a:b2:8b:d9:dd:8d:72:
57:ac:45:76:07:9b:c0:76:d7:f2:77:75:e0:11:ba:80:e6:56:
34:1e:14:3d:2b:2b:0a:4e:05:62:ce:cc:36:ee:f9:99:fc:cf:
75:ac:b2:87:a9:85:27:4c:f8:d5:53:b2:c4:0a:b5:27:9f:cd:
82:b1:13:22:b7:6b:76:59:39:6f:50:4b:15:00:bc:90:86:08:
aa:93:b7:2d:16:af:cc:42:54:7c:a6:b0:bb:31:30:93:42:21:
3c:c8:c8:b6:b4:0c:a1:30:89:81:98:98:a4:dd:e6:c9:4e:b0:
42:67:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org