Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/K4anJmcv6MLWkkLMgkk30-5Cnu8.roa
File: K4anJmcv6MLWkkLMgkk30-5Cnu8.roa (raw, json)
Hash identifier: tOaBsXOF4CV00mTVN/QoQYDyUcVsn0rkEYyFgFjGr60=
Subject key identifier: 2B:86:A7:26:67:2F:E8:C2:D6:92:42:CC:82:49:37:D3:EE:42:9E:EF
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0A1D
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/K4anJmcv6MLWkkLMgkk30-5Cnu8.roa
Signing time: Thu 15 Sep 2022 02:51:04 +0000
ROA not before: Thu 15 Sep 2022 02:51:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17710
IP address blocks: 61.57.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589 (0xa1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 15 02:51:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B86A726672FE8C2D69242CC824937D3EE429EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:0c:74:76:b7:f0:95:af:c5:0c:74:5b:67:
6b:30:9a:81:4f:8e:e6:b0:91:ab:6e:60:ee:f5:7a:
ae:cf:35:fa:8a:32:42:ef:eb:b4:67:b3:92:50:cf:
55:0f:a0:46:fe:bc:d5:70:51:85:bc:1e:c3:6a:fe:
76:a6:68:74:34:52:ad:8f:23:06:35:32:5a:89:73:
2f:8c:d9:f8:f8:b4:70:6e:54:f1:e6:d9:ab:77:8b:
e3:14:06:0c:fc:82:98:6f:fa:bc:1c:09:46:75:90:
60:cc:19:2e:19:2e:92:da:36:de:dd:62:fc:1a:e2:
82:4a:6a:06:59:97:ac:0d:e6:6a:54:68:86:1a:77:
18:7d:41:2b:0c:11:45:3e:07:67:fe:7d:ed:49:fb:
a6:07:3c:a5:bd:5f:e5:f3:5b:fe:bc:4c:2f:0c:6f:
a1:9c:e7:09:cb:3e:7b:32:1f:09:eb:b8:8e:64:30:
b0:77:a0:a5:5c:bc:8e:0f:90:1c:7b:ba:2e:8c:61:
fc:0c:7f:be:f2:60:77:3a:e8:dd:4b:1f:ea:53:18:
1e:b5:73:3a:5e:be:09:4b:f9:03:ce:f3:f3:ee:0d:
e4:79:67:8e:d5:1f:0d:c9:a4:d7:23:a1:6a:f2:3a:
65:0b:bf:57:ee:fc:7d:89:c9:8f:e5:35:12:1a:fc:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:A7:26:67:2F:E8:C2:D6:92:42:CC:82:49:37:D3:EE:42:9E:EF
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/K4anJmcv6MLWkkLMgkk30-5Cnu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.224.0/20
Signature Algorithm: sha256WithRSAEncryption
96:f9:02:bf:a6:bb:39:9c:db:57:2d:bd:77:26:da:ef:34:85:
98:00:2c:55:b5:6c:5a:8a:fa:2b:99:a3:af:78:d8:be:31:80:
00:37:1e:ce:bd:1a:dd:ce:ca:8b:f9:80:20:25:31:e5:ab:8b:
9d:bf:83:94:a3:76:d5:0e:6d:00:83:6c:0f:ec:a8:ad:28:29:
4e:94:e9:29:a1:6b:40:78:3c:3d:88:16:d3:a6:ce:83:82:8e:
56:21:23:71:75:eb:04:53:00:6b:49:55:5e:76:a7:d6:dc:57:
76:71:17:3b:54:fd:90:86:b4:fd:54:56:a7:6c:c2:1a:c7:2b:
4b:83:96:d1:81:84:a5:90:74:d5:29:fa:8c:ea:b6:e7:d2:46:
ac:10:92:47:73:f7:b7:5b:cf:28:77:ef:c9:41:77:46:74:b1:
46:c6:6d:cd:04:b9:7d:78:85:90:f3:50:12:10:08:7e:06:d8:
ee:db:66:f6:12:f2:7c:23:6c:f7:b8:66:3b:27:f7:b0:55:27:
e2:a2:2d:ff:7a:23:04:07:b5:33:f2:12:c7:a2:bc:b9:c9:16:
59:7d:e7:5b:56:ff:5f:82:bb:c7:c0:5d:fd:c9:94:f1:b9:af:
83:4b:8d:f9:a8:5e:f7:53:f9:d6:ea:c2:c4:88:79:b5:c2:26:
dc:68:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org