Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa
File: 7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa (raw, json)
Hash identifier: j7UxlI2EVXKecY5ACr3PgALmnQCbU+Up3GUb6TiHp7U=
Subject key identifier: EE:4F:59:44:56:79:F3:E3:3A:86:23:03:90:B2:54:06:7C:5E:DA:2E
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0795
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa
Signing time: Tue 29 Sep 2020 10:05:46 +0000
ROA not before: Tue 29 Sep 2020 10:05:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9676
IP address blocks: 61.63.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 29 10:05:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE4F59445679F3E33A86230390B254067C5EDA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:7c:ae:c0:84:d5:e4:f0:4c:23:8e:f6:30:
88:83:03:b2:dc:3b:f3:96:c0:da:c7:8d:e0:71:97:
ba:71:5a:9d:0f:92:c1:af:37:cb:47:7c:34:5f:83:
b3:f5:f4:03:6e:f1:09:24:a3:f8:1c:ba:c6:1c:e6:
04:02:ec:47:4a:b0:0a:39:93:23:07:16:8d:d7:29:
07:5b:e6:6a:38:59:9d:af:01:df:74:3b:fc:2f:74:
bd:4e:f9:d6:d1:2b:4d:9b:6e:b1:05:8e:90:94:74:
7a:bf:a6:10:d6:f1:6f:d3:ac:81:44:5f:fd:5f:11:
12:42:e2:c5:64:8f:34:0e:1c:94:56:0a:56:ef:ac:
05:62:a2:74:fb:93:7d:89:b0:b4:67:7d:a3:25:ba:
67:47:db:af:c3:2e:2f:34:62:3f:1c:f9:35:32:a6:
07:a2:fd:17:3c:51:56:98:6a:2a:fe:cb:78:ec:49:
47:7a:68:ce:43:10:4c:7b:2f:af:53:15:7b:ba:5d:
a4:82:f6:ac:21:e2:7c:dd:3d:e0:ac:bc:94:9a:bb:
da:58:8e:7e:da:f2:56:a5:e1:77:08:eb:45:d8:b8:
19:f3:90:b6:47:f2:54:54:93:e3:20:3e:bc:36:62:
6e:40:89:d3:99:b9:90:45:98:6f:94:e0:f3:14:37:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:59:44:56:79:F3:E3:3A:86:23:03:90:B2:54:06:7C:5E:DA:2E
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:b0:11:15:20:f9:c3:98:fe:65:ec:2c:6e:3e:7b:ce:a9:5a:
7a:ab:ce:d7:e8:88:f6:83:cf:70:24:e8:60:a5:f4:39:19:86:
2a:bd:da:e6:a4:bb:4c:dc:81:ca:98:43:37:ee:5e:f0:39:2a:
bf:c1:30:06:0f:51:1a:b9:b3:cf:df:7f:d1:07:34:0b:47:1f:
c8:9a:1d:5b:ea:fc:d0:77:77:c6:0b:70:ad:bd:8e:28:b8:10:
55:f9:b1:1d:98:25:a4:bb:2d:bc:14:ff:e7:f6:15:3a:31:8c:
38:bc:e1:00:37:a3:75:a1:30:6b:6e:6e:01:8a:7a:ce:73:a2:
96:e6:62:26:f6:84:10:8a:8e:34:5b:3c:90:76:57:f9:57:3f:
95:67:a6:f2:1b:6c:55:6e:76:1f:59:f0:52:20:f4:5f:88:47:
dc:b2:c7:a1:4c:12:3e:80:e5:07:f9:43:03:2f:47:00:d4:4f:
72:0c:75:e8:67:48:81:ad:d5:d5:0d:38:55:0f:ad:be:da:6d:
63:4c:b5:58:a0:82:0b:c0:6d:e2:11:1e:cd:c8:3c:34:48:c5:
99:21:60:5b:01:2d:c5:2f:8e:28:74:92:4c:a0:a6:63:a1:73:
1a:f8:98:73:a1:90:02:51:3c:9a:42:35:c2:18:34:92:62:f0:
81:2b:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org