Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/fSOOCYSVje3b955x-G2xpsIoJ9o.roa
File: fSOOCYSVje3b955x-G2xpsIoJ9o.roa (raw, json)
Hash identifier: w90A/4t3e5ZNLUN2rFOSvtELbvWg9Tpd3MaByipDzyU=
Subject key identifier: 7D:23:8E:09:84:95:8D:ED:DB:F7:9E:71:F8:6D:B1:A6:C2:28:27:DA
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0740
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/fSOOCYSVje3b955x-G2xpsIoJ9o.roa
Signing time: Tue 29 Sep 2020 10:00:27 +0000
ROA not before: Tue 29 Sep 2020 10:00:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4781
IP address blocks: 210.63.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 29 10:00:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7D238E0984958DEDDBF79E71F86DB1A6C22827DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:7b:62:44:ef:3b:16:cf:15:a7:00:db:4f:
2e:e6:43:bc:5c:2f:52:98:4b:4b:42:78:6b:f2:0a:
0d:23:00:b5:6a:e7:55:20:62:ab:86:99:10:93:4a:
1e:1b:75:1d:71:c5:17:c2:c7:d6:72:9f:1f:eb:34:
58:26:53:44:f3:cf:a0:cd:10:78:09:90:4e:6b:0f:
d8:25:a3:7e:30:88:e2:b4:70:74:04:b0:ec:ad:33:
fd:20:fc:78:bc:6b:ec:be:78:fd:07:cc:f6:e5:4b:
31:e4:da:2c:08:f8:bb:de:07:9f:14:fa:53:9a:f3:
b3:0a:d4:5a:13:44:1a:71:d6:31:18:2b:f9:8b:b8:
19:d1:09:e6:7e:dc:86:dc:0b:2e:4f:1e:ea:eb:9f:
ed:e5:fd:f5:87:ad:66:5a:2a:11:0c:8e:c4:03:e5:
e8:7b:76:8c:8b:57:5a:69:ba:d6:b0:29:44:57:d1:
3e:ce:28:95:3c:08:56:f3:b4:31:44:f6:27:3c:4d:
7b:cb:2d:db:d2:b4:96:85:f2:74:1e:3d:ea:23:73:
b4:8c:39:50:2d:b5:25:9d:ca:75:00:6a:d5:fd:57:
a5:98:41:fe:d1:d9:9b:18:b5:a2:81:b2:28:4b:c8:
61:80:e0:b9:c0:30:65:df:79:9f:50:96:74:55:be:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:23:8E:09:84:95:8D:ED:DB:F7:9E:71:F8:6D:B1:A6:C2:28:27:DA
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/fSOOCYSVje3b955x-G2xpsIoJ9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:34:1f:72:48:ce:4b:f9:bc:5b:b3:3d:e4:93:85:bc:38:e9:
9b:ec:75:2c:6c:af:0c:b2:97:bc:c5:f3:f8:2a:a6:27:00:3f:
51:b3:a2:1b:24:70:a1:e3:03:a8:d2:a4:84:2d:33:8d:e1:9f:
57:a2:b0:bc:17:c4:e2:66:3d:6d:08:2d:58:f1:bc:12:65:d6:
a0:a4:fe:e6:6d:c6:de:c7:37:71:41:aa:c4:12:2e:6f:a2:24:
3f:ce:d5:b0:11:0d:18:f8:f9:3e:1a:6a:7d:ac:d4:41:88:fe:
65:59:01:e9:cf:f4:5e:14:17:ff:7e:14:75:e1:f9:cb:62:58:
d6:60:78:c1:09:35:22:db:85:64:ac:1d:cf:53:48:38:a7:28:
69:9e:ff:69:09:ff:5d:9c:48:ea:4a:e9:f3:d5:91:7c:21:25:
f5:e0:6f:1a:a3:ff:00:1f:70:6d:b6:52:1e:1f:73:31:eb:e6:
1a:19:66:09:d2:71:3c:49:fb:83:9f:86:38:bb:c1:49:27:81:
b0:c4:32:38:7d:e4:8a:33:ec:41:28:db:bc:a3:82:15:fa:91:
c8:5d:94:a3:c9:32:76:e3:52:7a:fb:a8:ce:49:eb:32:e8:26:
f6:d8:7c:88:d2:a3:5d:5a:a1:92:f5:48:3c:24:0d:64:b2:a4:
7b:6d:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org