Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/dx9hRCwh_NMAjYfgA-rOKj_4bxU.roa
File: dx9hRCwh_NMAjYfgA-rOKj_4bxU.roa (raw, json)
Hash identifier: wDdT5wLIKkJhtwlM2/jxqZSRMaLuU1v5IpSlUsTtTtE=
Subject key identifier: 77:1F:61:44:2C:21:FC:D3:00:8D:87:E0:03:EA:CE:2A:3F:F8:6F:15
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/dx9hRCwh_NMAjYfgA-rOKj_4bxU.roa
Signing time: Thu 15 Sep 2022 02:39:32 +0000
ROA not before: Thu 15 Sep 2022 02:39:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 61.65.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 15 02:39:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=771F61442C21FCD3008D87E003EACE2A3FF86F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:2b:3a:e3:cd:c1:2c:60:7d:7e:83:e1:77:
fe:6e:dd:8f:fe:d3:08:51:2a:08:a7:ac:cf:bb:0c:
f3:6d:31:49:0f:a3:40:c1:8b:ff:28:9b:14:d8:11:
73:7c:69:7e:da:62:8d:2a:67:dd:ef:10:ac:c4:63:
27:65:ca:5a:cc:6c:12:04:87:6b:3d:ea:e3:54:b0:
3c:59:3f:12:60:c3:d6:7c:e5:ed:94:18:5d:4b:68:
03:5a:40:fe:13:29:b9:61:ed:dd:c1:50:4f:b5:d9:
93:c9:82:12:0c:de:a3:23:57:d8:17:ad:37:64:8d:
47:9e:c2:fc:e3:dc:23:f8:ea:09:d7:00:37:d7:61:
cf:a3:c4:4a:5e:74:d3:ce:91:bf:f1:3e:8e:78:ef:
b6:48:5c:ce:19:00:7a:4d:2e:0d:e2:94:93:73:8a:
8c:aa:a1:6c:17:1a:bd:0f:64:42:53:e8:f2:c4:09:
05:36:70:11:ad:86:06:3c:1a:b1:12:6d:3c:e1:7c:
5e:ff:44:e7:f3:be:0b:d8:bb:99:45:90:fd:e3:79:
40:bc:37:95:f2:13:85:0e:6e:8c:43:88:9e:0c:04:
6f:f9:e7:70:b5:a4:70:04:e3:3f:ee:79:bc:9e:46:
a1:54:57:b9:b6:67:38:d5:e0:04:6a:8b:4f:4e:26:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:61:44:2C:21:FC:D3:00:8D:87:E0:03:EA:CE:2A:3F:F8:6F:15
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/dx9hRCwh_NMAjYfgA-rOKj_4bxU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.128.0/18
Signature Algorithm: sha256WithRSAEncryption
58:2c:cf:6d:84:71:a6:4b:69:03:47:58:57:1a:f8:d4:76:da:
b1:d2:10:f4:b5:88:4c:31:06:1a:1d:75:fe:a0:f6:57:78:66:
b9:08:10:5d:2c:fd:43:40:22:e9:36:24:7d:11:3e:0e:10:a2:
fe:36:88:5e:f4:f7:82:c6:12:c8:73:4f:36:7b:e2:b1:63:9e:
0e:0f:76:85:d2:c3:09:0a:a4:bd:c8:24:74:bc:ee:79:cc:1b:
99:b3:52:44:eb:e3:c0:3a:33:0a:0b:ee:7d:d1:25:2c:67:31:
24:34:c8:37:d2:d0:f3:64:ca:c7:43:4e:c4:df:d8:b9:70:8f:
3c:4b:cb:15:58:7d:47:5a:c0:53:13:48:5a:53:4d:56:70:2b:
2b:9e:e0:4f:2c:8c:9c:6d:0a:31:39:78:db:a1:20:e2:7b:9c:
82:81:02:45:d3:10:3a:36:31:d1:a3:51:95:ef:1d:0b:0b:e0:
7e:b7:84:89:3f:ff:72:c9:af:c3:55:49:37:1f:a5:e2:82:85:
13:c5:5f:30:7c:ce:a0:54:f0:a3:74:e1:8e:56:c5:c8:fb:4e:
5c:53:cf:d1:16:c6:ec:a5:a3:65:7f:bd:54:9f:85:e6:45:ce:
28:38:6d:20:11:9c:b4:a3:04:10:b0:ef:f5:e3:04:07:c5:96:
f5:b6:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org