Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/2wy1nCyqbSJP1h2ExJPZA2-h0Hg.roa
File: 2wy1nCyqbSJP1h2ExJPZA2-h0Hg.roa (raw, json)
Hash identifier: EuMmHwYzqZVX9TDgNYI66cCwl9CN5khv9sh7lE3o+iE=
Subject key identifier: DB:0C:B5:9C:2C:AA:6D:22:4F:D6:1D:84:C4:93:D9:03:6F:A1:D0:78
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/2wy1nCyqbSJP1h2ExJPZA2-h0Hg.roa
Signing time: Thu 15 Sep 2022 02:39:34 +0000
ROA not before: Thu 15 Sep 2022 02:39:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 61.63.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 15 02:39:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DB0CB59C2CAA6D224FD61D84C493D9036FA1D078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:ef:a7:5f:b8:87:7d:83:6d:10:dc:9e:2a:
93:45:2a:84:f8:68:57:4c:92:50:45:4c:8f:76:f0:
56:1c:76:9e:e1:a6:66:b1:46:e6:92:7d:64:bf:0f:
47:b4:b8:b0:ce:b4:d3:a5:f9:3b:ea:f8:2d:13:d0:
e8:4a:af:a5:96:c5:20:a1:2e:f5:ce:df:a6:2a:10:
ef:7e:c0:6b:1f:42:e2:fa:c6:64:5c:a9:46:1d:4d:
24:41:fc:97:f3:19:d4:c9:4a:74:56:14:04:8e:1e:
c9:5a:8e:d5:0d:d9:9d:60:9d:ee:aa:82:46:8d:a4:
b5:2a:69:cd:e9:94:9d:09:7a:b1:95:ef:33:5f:b1:
55:ca:5f:1a:52:ae:e4:b7:49:76:99:9b:27:2f:5b:
af:2a:94:bb:3c:23:9b:f2:b8:7f:8d:83:8e:a7:e7:
43:67:b7:ae:79:ef:f3:d0:9c:dc:ed:d6:18:1b:92:
5f:e0:71:48:a0:0c:7e:88:9b:ea:6c:33:4c:52:0a:
d8:13:07:6e:c2:7b:c5:42:69:11:f6:5c:59:a6:42:
8d:4d:69:5b:37:ed:ed:06:f2:b6:f1:1f:6b:f0:5d:
38:d6:15:4a:f9:c8:19:55:61:9e:a7:55:6c:11:5a:
75:b8:df:05:0d:7f:44:60:81:83:c7:40:d2:de:f2:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:B5:9C:2C:AA:6D:22:4F:D6:1D:84:C4:93:D9:03:6F:A1:D0:78
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/2wy1nCyqbSJP1h2ExJPZA2-h0Hg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.128.0/19
Signature Algorithm: sha256WithRSAEncryption
16:0b:91:30:b9:91:15:5a:5b:61:e5:2a:88:2b:c9:df:54:08:
6c:65:50:73:80:7b:fe:f2:cd:e9:4c:9a:fb:ff:b3:c6:cc:04:
e9:e3:1d:d6:62:ba:7a:50:2e:d9:3f:ef:e1:d2:43:78:b8:7c:
1e:c3:88:84:c3:2a:83:fb:42:c3:7b:06:0e:74:a6:ac:ee:f4:
18:c7:1f:b6:a6:7d:f3:9a:7e:8f:e8:dd:30:ab:2c:57:a9:67:
ef:38:dd:13:76:bd:26:2e:19:c3:7f:03:37:d7:25:04:fb:e3:
7d:b8:4b:f5:47:43:46:5e:aa:7c:d6:1e:48:a8:fe:8f:ac:d3:
12:67:74:49:d5:a1:6e:fd:c3:87:19:7f:59:0e:36:a8:b6:21:
b6:3d:64:f8:f4:b8:04:8a:ba:2d:3b:82:79:e5:4b:2d:fe:9a:
9a:86:af:6e:62:30:85:95:24:42:21:9c:bd:3a:24:cb:1a:18:
8d:fe:94:b7:80:13:04:98:9c:55:02:12:69:1d:db:1d:b6:46:
d3:20:4e:3a:9c:90:60:52:93:0e:c3:83:cd:ad:65:16:05:50:
a6:26:a9:be:92:99:80:1e:11:53:a7:ee:c8:b9:84:46:1f:1e:
87:bc:f3:d3:21:81:80:46:67:5a:82:c2:b0:2a:74:e5:92:34:
27:9b:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org