Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/JBfwjzaEF1fCKWEi_K3_qMZ8QdY.roa
File: JBfwjzaEF1fCKWEi_K3_qMZ8QdY.roa (raw, json)
Hash identifier: uXRbzNynEw+uQncwmPWfpDVDLrEN1u6MFO6PgN/AwZc=
Subject key identifier: 24:17:F0:8F:36:84:17:57:C2:29:61:22:FC:AD:FF:A8:C6:7C:41:D6
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0799
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/JBfwjzaEF1fCKWEi_K3_qMZ8QdY.roa
Signing time: Tue 29 Sep 2020 10:06:07 +0000
ROA not before: Tue 29 Sep 2020 10:06:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 180.214.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 29 10:06:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2417F08F36841757C2296122FCADFFA8C67C41D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:45:59:67:f9:6e:e2:53:cd:5d:de:06:0d:
c6:46:76:29:5d:c6:80:3f:e0:80:66:e0:3f:5c:4c:
be:4e:b5:85:84:4f:6c:db:9d:d1:c7:a4:78:0c:aa:
cf:78:46:2f:fe:5b:10:93:1e:83:b1:f9:69:e2:cb:
bd:e2:1f:4a:33:b4:98:58:0a:3c:a7:19:8f:00:ad:
9a:1e:66:65:95:02:02:8e:4d:8c:48:6c:36:63:c6:
62:47:e5:08:df:73:38:88:c3:a5:c7:15:7a:80:58:
a3:ae:90:fa:d5:9e:2b:ef:ed:a1:4a:50:05:e5:c4:
90:e4:94:2c:7e:ba:4c:83:3b:9f:d6:53:8e:94:85:
84:7a:5e:27:23:8a:a2:d4:f7:89:f2:70:86:80:ae:
fe:72:6f:4b:d4:4a:ff:01:19:a9:bd:58:b5:bc:13:
ae:37:6c:77:f1:a2:03:8d:b1:f4:ca:7d:ad:01:6d:
34:95:7f:fa:94:bf:48:6b:5d:d6:34:7b:5f:0a:bd:
81:d1:71:5a:1b:0e:e7:fc:84:e7:4e:da:1e:6c:fa:
d5:60:4b:c5:a7:d2:46:e3:86:39:48:c3:b6:53:2d:
7e:59:15:ce:ec:63:3a:a7:ef:ea:d3:2c:95:8a:cd:
8e:7d:8b:5a:6c:9e:87:4e:ee:c7:c5:af:18:67:50:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:17:F0:8F:36:84:17:57:C2:29:61:22:FC:AD:FF:A8:C6:7C:41:D6
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/JBfwjzaEF1fCKWEi_K3_qMZ8QdY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.214.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:d8:6c:ad:6b:c8:9f:ae:de:69:79:2c:14:16:5e:cc:20:f9:
3e:39:07:1b:82:05:0a:96:3f:c7:a2:70:83:f3:7b:a7:87:51:
5a:ec:7a:05:e2:52:40:c5:57:7e:ef:32:6c:86:77:92:24:a4:
a0:e5:81:03:21:cd:f8:8d:11:38:a3:cc:4a:8e:44:04:de:9e:
e1:b0:1b:c9:fb:fe:f5:32:5a:ed:c2:33:66:84:f7:af:5c:95:
0b:2d:68:56:4b:c7:b7:3a:9f:84:fb:5a:34:24:0b:8c:4c:30:
e9:85:7a:8a:f0:f4:d9:7c:c5:38:fc:06:4a:97:d3:bf:70:83:
32:1c:18:11:d8:cb:a8:1f:a5:a7:af:ba:b5:7d:a7:8f:ae:fa:
1a:0f:a0:04:75:61:02:34:05:a4:4e:88:22:e5:be:7a:a5:ce:
0c:14:90:ca:31:0a:46:24:c5:51:44:21:c6:c7:15:11:25:75:
67:44:6e:31:cc:0d:01:b7:b1:d6:dc:d4:cc:ff:cf:32:5b:2d:
0b:38:d5:aa:43:ab:1d:26:73:89:a6:64:01:a0:c7:e9:5a:92:
c0:45:70:f1:c7:13:a3:16:eb:01:0c:e1:19:66:ed:ad:5b:b7:
a1:97:59:f2:3d:ce:b7:af:c9:85:dc:e9:7d:03:d5:cb:35:b9:
f1:bf:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org