Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uvF3UNKKe00Np9fv3VePtOqD6UE.roa
File: uvF3UNKKe00Np9fv3VePtOqD6UE.roa (raw, json)
Hash identifier: 9/KNVqlvhoG8oFHg6P5EFhTbOpwMgNPEsxjxszI+mOE=
Subject key identifier: BA:F1:77:50:D2:8A:7B:4D:0D:A7:D7:EF:DD:57:8F:B4:EA:83:E9:41
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 088D
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uvF3UNKKe00Np9fv3VePtOqD6UE.roa
Signing time: Sun 07 Feb 2021 13:00:51 +0000
ROA not before: Sun 07 Feb 2021 13:00:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17420
IP address blocks: 211.73.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Feb 7 13:00:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BAF17750D28A7B4D0DA7D7EFDD578FB4EA83E941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:43:95:b4:e9:21:4d:16:19:f5:c0:85:14:
e7:84:04:a2:3f:81:6a:7f:42:90:d6:db:02:11:8d:
c4:0a:43:07:19:2d:fc:0e:07:a4:3e:42:4c:9c:20:
60:55:5a:72:07:2f:a5:3e:bc:f0:ab:27:0a:21:23:
8a:30:e7:21:67:98:f0:c7:8f:73:44:19:e7:c9:fa:
57:43:ea:19:68:68:6c:cc:cd:26:1f:07:9d:07:79:
b4:f2:64:c0:1d:9a:ee:a4:c9:a7:01:4d:11:8a:86:
92:e5:1b:ca:3a:f5:51:36:3d:8b:6a:ba:b7:21:57:
86:c1:4b:e7:be:09:32:20:05:8d:f3:38:f4:b7:d3:
d1:0e:42:31:ee:1e:e1:e9:b3:fd:65:dd:8c:ab:56:
70:40:d4:0b:4d:a4:03:56:58:b6:b4:59:52:10:44:
a0:48:01:b2:cd:11:b7:91:19:1d:f9:31:46:8b:b2:
3e:11:54:18:36:01:3d:28:9a:b2:65:13:d3:f4:8c:
6e:db:68:ab:54:64:25:d9:bb:f8:2c:49:80:52:85:
67:9c:84:58:6d:99:a9:b4:6b:c1:04:1d:2f:72:d2:
06:51:89:c5:59:8f:50:16:4b:c5:a5:db:23:68:f1:
42:1d:c1:e6:4e:49:45:77:3d:2a:d6:ef:aa:d6:8a:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F1:77:50:D2:8A:7B:4D:0D:A7:D7:EF:DD:57:8F:B4:EA:83:E9:41
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uvF3UNKKe00Np9fv3VePtOqD6UE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:ef:8c:22:85:1f:83:ae:a0:ee:80:f9:c4:40:6f:4c:5d:b7:
0d:e6:e5:49:5b:8b:d3:3b:82:a8:43:ac:88:5d:df:75:81:9d:
13:c7:77:b8:25:af:3c:1b:d0:4f:88:32:70:b3:e9:c2:be:7c:
aa:36:fb:33:5e:43:fd:44:fd:25:a1:0a:33:9c:7b:26:41:cf:
18:17:40:8b:cf:6d:13:3d:c2:99:0e:4b:06:97:01:54:08:88:
50:0b:33:a5:b0:4d:95:8d:1f:2a:44:c4:cc:5d:67:47:fc:33:
c9:57:00:58:5f:d6:68:7f:83:c6:9f:dd:cd:68:ab:4b:64:46:
f8:46:3e:54:a9:37:ad:b8:46:7b:6b:3f:57:d5:69:e6:74:1a:
9b:09:02:17:be:b7:ff:f2:cc:ce:13:ab:e1:d0:f6:5c:97:e1:
50:9b:87:db:31:4b:9a:4e:f4:4d:c6:73:a3:c9:3d:4a:52:aa:
92:4f:40:d2:db:ee:e6:18:1f:ae:f8:4b:c5:aa:a5:65:ec:25:
ba:97:b6:49:ce:b9:50:a2:bc:81:56:bb:79:e8:d5:d1:e7:aa:
37:08:37:74:02:8e:98:9c:ee:73:0d:93:a0:79:51:b9:6b:94:
53:25:78:db:98:7d:27:de:c0:6e:77:91:0b:33:83:30:dc:41:
0b:e7:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org