Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/SGhxL6KbbAiECt16jVOaKatfcWc.roa
File: SGhxL6KbbAiECt16jVOaKatfcWc.roa (raw, json)
Hash identifier: WdrgxqiUNVo55vgtpeT4MPVcceHcNYeTkTK3xT/404o=
Subject key identifier: 48:68:71:2F:A2:9B:6C:08:84:0A:DD:7A:8D:53:9A:29:AB:5F:71:67
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 09BA
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/SGhxL6KbbAiECt16jVOaKatfcWc.roa
Signing time: Wed 29 Sep 2021 02:41:57 +0000
ROA not before: Wed 29 Sep 2021 02:41:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 203.121.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 29 02:41:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4868712FA29B6C08840ADD7A8D539A29AB5F7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:88:6c:2e:73:aa:2d:6e:42:cd:97:3d:8d:
d1:22:18:41:2c:44:4c:7d:9d:0d:a9:57:4b:a6:13:
f9:e7:66:cb:01:dd:a8:9f:20:de:52:89:fa:e4:cc:
e0:e2:9a:a6:04:ee:e9:79:0d:12:6f:8c:5b:44:74:
fd:95:ec:25:58:51:7b:40:05:46:01:e3:9a:5b:5f:
b6:e9:f1:de:15:18:ff:7c:e0:ff:03:0a:6d:92:2e:
e7:08:4b:52:53:10:9d:58:23:9b:de:c5:0e:95:ad:
8c:bd:9b:da:1d:70:4e:80:bd:7c:dc:37:58:1f:17:
40:45:23:17:54:90:12:51:b5:c8:28:ce:b2:17:fe:
ae:60:c6:37:1f:85:18:13:e1:1b:b4:9d:d6:9b:f8:
e9:6e:10:42:62:a2:36:e8:8c:6a:a6:c3:34:d4:e2:
60:34:e6:89:69:86:95:60:72:63:c8:b0:65:68:89:
6c:80:9c:13:b0:84:92:fe:2d:77:2a:7f:30:20:55:
b9:e2:35:aa:77:c4:1b:00:00:2e:41:f0:8f:63:58:
87:58:80:b9:f2:7d:1f:18:11:2f:f1:bd:be:bc:4b:
e2:6d:a3:a3:1d:b3:51:b2:68:84:e3:77:a8:73:91:
68:43:9a:85:75:f5:0c:ec:85:2d:7b:1f:bc:8a:6c:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:68:71:2F:A2:9B:6C:08:84:0A:DD:7A:8D:53:9A:29:AB:5F:71:67
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/SGhxL6KbbAiECt16jVOaKatfcWc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.121.240.0/20
Signature Algorithm: sha256WithRSAEncryption
64:8d:0f:8f:b1:98:fb:2e:b0:99:09:b7:20:ba:81:cd:c7:6a:
c9:97:35:84:fa:e5:04:e4:f1:d5:24:19:1e:61:ad:98:ab:a5:
10:3f:b3:f3:ca:a1:3c:28:64:7d:19:73:6d:5d:15:35:fa:fb:
0b:57:d1:30:76:26:1c:a9:aa:07:32:8a:4c:44:8f:34:a1:bc:
06:6e:3f:fc:cb:4d:6e:7e:82:da:f7:db:88:2d:d8:e5:9b:16:
0f:82:16:92:72:37:b4:73:73:ff:5d:6f:b5:dd:57:0f:ab:c8:
91:95:13:5c:19:b2:73:85:42:50:ec:3f:12:77:56:ea:0b:91:
7e:27:75:0b:a9:d7:f3:8b:93:c0:2d:8b:ff:bf:ff:d2:e3:bb:
5b:67:76:d5:3d:6a:49:49:f9:52:2c:39:15:ba:c2:15:d4:b5:
30:89:41:14:85:57:9f:c3:99:ee:9b:4e:18:ab:80:b6:59:ee:
1b:bd:96:2c:cf:70:1a:11:c6:04:78:b3:d0:6b:e0:3c:39:7b:
8c:a6:5b:d6:7c:2f:1e:66:06:a5:e7:24:b6:f2:78:18:19:c2:
28:ba:38:46:0d:74:58:20:c5:d2:bc:3f:2d:fd:4e:65:4f:20:
2e:81:c0:e0:4a:f7:46:b8:cd:d4:c4:1a:80:73:73:e1:3e:45:
d4:ba:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org