Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/pBKE9g1VpqDA2O6TD8N27ldm2Y0.roa
File: pBKE9g1VpqDA2O6TD8N27ldm2Y0.roa (raw, json)
Hash identifier: lauxCd0GMgAkyiED/gYG7EWXPzRPkTm9qS9BQTL9QUs=
Subject key identifier: A4:12:84:F6:0D:55:A6:A0:C0:D8:EE:93:0F:C3:76:EE:57:66:D9:8D
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 089D
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/pBKE9g1VpqDA2O6TD8N27ldm2Y0.roa
Signing time: Sun 07 Feb 2021 13:02:41 +0000
ROA not before: Sun 07 Feb 2021 13:02:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4781
IP address blocks: 210.63.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Feb 7 13:02:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A41284F60D55A6A0C0D8EE930FC376EE5766D98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:ed:12:e5:cb:65:74:20:3d:60:49:19:69:
65:0d:44:e6:ee:97:1f:f3:ec:51:93:06:4e:50:af:
38:18:b5:d3:b1:5a:fc:28:f7:b2:65:a7:f6:cf:9f:
f8:7a:71:98:42:40:cf:6f:38:6c:96:c9:a6:cb:35:
6b:48:fe:b3:43:7f:a9:2a:94:e6:70:be:6b:49:1c:
32:db:57:4b:eb:67:b6:0a:0d:70:6a:b5:41:41:1c:
bf:1e:e0:a1:21:47:5d:fe:04:3b:96:e7:6e:94:5b:
75:50:00:6d:1a:89:11:f8:e8:0e:6a:12:a8:58:de:
96:2e:81:42:92:19:ec:01:db:b6:7e:66:15:0f:6b:
05:dd:c0:11:40:9d:37:ea:a5:42:5d:d9:78:7b:5d:
fb:10:70:66:7c:32:20:b7:50:5b:6b:a0:ef:ff:ed:
33:63:10:fc:e2:e2:a6:fd:81:59:64:04:90:e0:ed:
d6:d0:f5:bb:5e:88:6c:7a:3d:6d:e1:c6:45:14:36:
23:3d:b0:dd:7c:30:b8:f3:f7:5c:c7:2d:68:60:78:
18:0b:8a:22:97:be:92:80:b9:a8:f0:0e:d1:b5:64:
70:09:95:ce:5d:b2:d3:aa:20:c4:ba:40:4c:1f:11:
bd:2a:b2:94:39:f7:64:2e:d3:e7:d1:42:c3:65:f8:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:84:F6:0D:55:A6:A0:C0:D8:EE:93:0F:C3:76:EE:57:66:D9:8D
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/pBKE9g1VpqDA2O6TD8N27ldm2Y0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.102.0/24
Signature Algorithm: sha256WithRSAEncryption
46:91:e8:23:a5:3f:59:af:de:9c:2d:32:9b:48:6d:8e:9f:52:
af:68:fa:47:6a:5e:9d:2e:e2:c7:9e:49:67:0b:67:d4:70:06:
df:02:da:6e:d3:d6:7d:e6:a4:0d:ec:86:52:be:25:3d:5c:92:
22:25:85:42:0a:bc:ac:84:3f:1d:b3:72:f1:5f:3e:bb:40:4a:
84:b5:db:cd:aa:1a:7e:a5:71:1c:06:ab:52:07:b0:fb:06:57:
a9:3e:f7:00:d0:2f:50:0e:e1:20:cc:52:96:08:ae:23:4b:e8:
7b:5b:99:e3:97:4b:5c:f2:98:66:df:a2:bb:36:7b:45:89:0b:
40:50:f2:85:3f:d2:ea:53:4f:0d:a2:62:59:0f:d5:e1:79:dd:
09:4e:ec:52:32:09:6e:73:85:30:ed:ec:4a:ef:87:20:82:b4:
9f:25:e7:84:db:1e:5d:99:58:f0:49:a3:ad:6c:41:2b:2b:6c:
38:1a:2b:f4:c9:98:34:d5:e7:41:c3:ca:f9:37:a2:8f:fe:09:
f2:10:8b:ef:85:78:01:5d:a0:ca:bb:05:61:d5:da:62:6a:ff:
a3:3c:a3:a4:ee:69:bc:2a:20:4d:55:8f:90:78:e8:79:3e:dd:
bb:7f:52:43:27:4b:62:37:72:26:3f:8a:44:df:8b:f5:61:0d:
11:b5:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org