Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/yprz954RX746lPetehokqCtUS3c.roa
File: yprz954RX746lPetehokqCtUS3c.roa (raw, json)
Hash identifier: AbfsfCtC+Abpit/+kMtkeOcoR5X9na5GWGtpPn6jItw=
Subject key identifier: CA:9A:F3:F7:9E:11:5F:BE:3A:94:F7:AD:7A:1A:24:A8:2B:54:4B:77
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 073F
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/yprz954RX746lPetehokqCtUS3c.roa
Signing time: Tue 29 Sep 2020 10:00:27 +0000
ROA not before: Tue 29 Sep 2020 10:00:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4781
IP address blocks: 210.63.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 29 10:00:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA9AF3F79E115FBE3A94F7AD7A1A24A82B544B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:25:28:90:ec:fe:97:fa:78:bf:07:57:a7:
ef:f0:81:49:35:52:17:2c:9c:84:b1:4e:e8:e8:f0:
03:d5:89:01:79:c8:33:dc:d0:8f:2a:a5:af:b5:8b:
97:98:d1:a0:c7:83:10:a6:95:3d:bb:e4:f9:3f:0f:
f9:0d:a3:36:62:93:4e:18:53:59:cd:fe:d8:11:18:
74:46:78:b6:8d:2d:b2:9b:e7:72:46:36:76:8e:a9:
99:3e:97:0c:94:c6:d4:aa:0a:4b:89:d5:4d:3a:45:
85:ab:87:9b:75:3f:6a:c1:03:d5:69:1e:cd:ea:3e:
51:d1:34:b4:be:c2:04:09:1c:4d:d5:66:84:08:a3:
7c:2f:aa:52:c0:10:4b:cd:fd:8a:74:fd:18:1f:ed:
cd:10:31:6b:69:9a:82:67:6f:25:5f:78:b9:55:24:
d2:57:b1:56:7d:9c:3f:ce:bc:7c:63:e1:65:f7:2a:
89:04:a9:db:62:19:9c:38:ef:f1:dc:86:25:61:8e:
5a:c1:bc:52:2e:7f:7b:1d:5d:1c:c5:bf:98:a6:5e:
f2:a5:4e:5b:f0:bf:c0:59:9d:5c:fd:22:cd:48:ad:
86:c3:14:1c:4a:d5:97:d2:b2:46:12:ef:fb:fc:69:
66:59:da:aa:4a:91:f3:4b:9e:5d:67:68:3c:ff:a4:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9A:F3:F7:9E:11:5F:BE:3A:94:F7:AD:7A:1A:24:A8:2B:54:4B:77
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/yprz954RX746lPetehokqCtUS3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:96:ef:94:bb:42:ee:9d:fe:89:f4:36:9a:d5:83:3b:92:4a:
66:03:f9:09:c2:ba:68:48:30:ff:6f:8a:d3:8f:85:b2:02:e7:
05:6a:8b:e6:ae:56:2c:91:88:44:2f:06:fd:2c:04:5e:b8:44:
91:ae:bf:c6:36:55:09:b4:a2:3f:a0:81:04:09:45:ae:80:81:
c8:68:f6:5f:d2:58:b8:10:f4:8a:cf:84:d9:e1:e6:38:1d:b5:
00:8d:14:41:4e:21:1b:fe:b5:bd:0c:7d:02:27:1c:29:0b:79:
ed:d2:e9:8a:09:82:b1:00:9b:c4:82:0c:00:3c:41:0d:ba:5b:
ec:5e:1c:4c:a3:78:db:1b:f1:3f:46:7f:6a:bb:e7:73:32:79:
48:1c:d0:df:fd:90:00:2f:da:86:10:1a:94:86:14:23:1b:f9:
56:c9:73:bd:7d:39:75:da:2d:45:be:de:5e:23:42:58:8e:d4:
f3:d8:17:31:f5:57:05:cb:a1:f6:c1:5a:53:55:23:a8:fd:e1:
c5:09:ed:29:43:94:fa:86:af:2e:84:71:16:3d:84:8a:91:bc:
dd:0f:14:bc:c1:16:b7:c1:4f:4d:b7:8f:12:2f:e7:43:64:78:
92:05:f2:eb:ab:a0:96:54:7e:af:cf:c1:2c:ae:1a:02:c9:b2:
01:96:16:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org