Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/m9dpNYpb_EZ11TSHls-DxJvkryU.roa
File: m9dpNYpb_EZ11TSHls-DxJvkryU.roa (raw, json)
Hash identifier: RQHkes4zM/ckboufHDQZ0lMWVlmfuabgcJUnGln2nRU=
Subject key identifier: 9B:D7:69:35:8A:5B:FC:46:75:D5:34:87:96:CF:83:C4:9B:E4:AF:25
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0895
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/m9dpNYpb_EZ11TSHls-DxJvkryU.roa
Signing time: Sun 07 Feb 2021 13:00:58 +0000
ROA not before: Sun 07 Feb 2021 13:00:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4781
IP address blocks: 210.63.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Feb 7 13:00:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9BD769358A5BFC4675D5348796CF83C49BE4AF25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:dc:6b:ea:8c:db:1d:fd:c0:28:aa:4c:48:
10:cc:c0:b4:6b:17:f3:30:66:27:c5:9a:95:ec:ba:
20:28:0d:ce:6e:d8:03:f1:67:8b:bf:78:6b:6d:66:
03:ca:51:4a:ba:ff:bb:f5:d7:55:80:ec:9e:ed:f8:
e2:9b:a7:54:68:b9:b4:25:cf:75:a3:a6:9b:ee:b1:
2f:c0:fd:b6:d9:42:01:2e:30:0d:57:5a:45:ec:b8:
56:0a:02:bf:e8:f9:5a:df:c9:b1:cb:35:d1:1c:c8:
ec:f3:8c:66:1d:5c:a8:52:f7:84:b3:bf:93:a9:ac:
e9:45:fb:b2:0c:3b:58:cd:50:8a:78:13:3c:87:17:
5f:25:28:00:7f:12:60:c8:0c:07:88:bc:73:b6:cf:
fd:b3:51:f9:62:d3:fd:1f:a6:2f:7c:fd:e2:7c:fc:
24:c1:d3:fc:36:ff:be:25:7e:97:db:0c:ae:48:72:
b6:65:09:7e:b4:dd:be:7a:a1:cf:e3:b1:90:dd:c9:
c0:37:7f:ca:8a:11:c8:5c:83:5f:0e:d1:fc:92:8b:
fd:fc:d1:a1:81:c1:de:cf:71:af:d5:40:cb:53:7c:
70:00:e9:ec:81:2c:b1:02:28:81:cf:73:b3:a4:0b:
04:96:3a:7c:75:7a:74:33:52:71:86:9b:2b:fb:62:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:69:35:8A:5B:FC:46:75:D5:34:87:96:CF:83:C4:9B:E4:AF:25
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/m9dpNYpb_EZ11TSHls-DxJvkryU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a2:f2:6d:71:1f:1e:db:41:52:cb:73:8a:88:11:9f:97:69:
55:3b:94:15:a8:d7:ee:d0:b6:83:a1:e9:b4:a5:5b:00:4a:5d:
77:23:08:7a:16:88:07:1b:4b:3e:e8:f7:5d:60:f6:22:97:97:
98:ed:70:b5:65:00:d3:05:58:72:4c:a5:2a:eb:d1:82:5a:92:
17:d5:86:34:0f:38:cd:e1:91:bb:e1:70:80:b7:5f:c5:05:6c:
ca:e9:d6:d7:47:55:79:c3:0b:fe:2b:ad:82:d1:1e:76:42:4d:
34:de:51:65:ea:2c:4d:b4:6c:77:e7:34:a0:3a:fb:88:ff:c0:
c7:82:1a:92:f6:e6:05:d4:b5:48:c8:3d:f0:2b:c1:32:ae:4f:
5a:88:88:d8:84:7e:df:b7:8a:04:d0:72:c7:86:11:b2:0c:51:
2a:25:66:53:ef:d6:9f:11:0f:8e:06:0e:f4:db:67:d1:43:5b:
7e:55:1b:4a:b3:c9:ce:79:53:62:c9:7d:14:1f:83:ee:d8:c0:
32:45:26:ea:55:99:c1:31:87:97:f2:e1:8c:88:f8:e7:ad:c9:
58:ea:7d:81:4d:5e:37:04:6b:e8:8a:ad:47:1c:dd:53:df:37:
91:88:90:53:d4:6f:39:56:72:3c:6a:ff:35:86:b5:fe:3e:dc:
db:7d:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org