Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/uQCAcPjCfZpmnSD5lJSilRX-nyM.roa
File: uQCAcPjCfZpmnSD5lJSilRX-nyM.roa (raw, json)
Hash identifier: n/1FPAtMCxasDdD5yxyf9M+eK1ishBW5cueAE9RNv8Y=
Subject key identifier: B9:00:80:70:F8:C2:7D:9A:66:9D:20:F9:94:94:A2:95:15:FE:9F:23
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 078E
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/uQCAcPjCfZpmnSD5lJSilRX-nyM.roa
Signing time: Tue 29 Sep 2020 10:06:04 +0000
ROA not before: Tue 29 Sep 2020 10:06:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 29 10:06:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B9008070F8C27D9A669D20F99494A29515FE9F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:c9:22:e9:41:86:26:34:13:bd:32:07:64:
d5:97:6c:dc:81:ba:ee:bd:78:09:be:fd:cc:6e:aa:
3e:9e:79:a7:d5:b7:45:11:02:1c:e8:75:f5:ff:8d:
d6:9e:20:f7:16:05:cb:d6:61:12:e6:ba:a1:da:d3:
54:63:2e:b7:1d:5c:a9:ce:d8:7d:34:f1:dc:4e:05:
d1:39:8a:50:03:c5:5f:10:29:84:bf:b4:68:77:e1:
d7:41:16:eb:65:d0:b0:f4:78:49:f0:7c:0c:23:ed:
32:f9:51:81:d2:15:6d:a9:d2:9a:2a:d3:7b:7a:09:
45:d3:31:4c:31:99:23:20:c5:36:7e:a7:5a:c2:fb:
a8:2d:c5:89:60:fa:57:8b:65:ff:db:1a:19:24:4c:
49:53:95:89:03:70:30:f0:9a:8c:ec:75:cd:0c:20:
d5:93:c9:38:2f:65:ae:e2:72:47:fa:92:30:a1:71:
63:11:8a:33:75:00:f1:3a:b8:aa:a3:f6:b2:79:97:
5b:00:87:39:9a:05:b2:a4:b8:9b:27:e0:89:00:a5:
2c:dd:9d:80:3d:e4:cb:9e:a0:a3:a4:8a:8f:6b:4b:
cb:04:2e:f7:ad:2a:4b:ab:75:a2:44:cf:45:9f:95:
f1:a8:85:9b:cf:e3:45:4a:86:fd:41:49:ee:37:4d:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:80:70:F8:C2:7D:9A:66:9D:20:F9:94:94:A2:95:15:FE:9F:23
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/uQCAcPjCfZpmnSD5lJSilRX-nyM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:c8:0a:28:3d:f3:58:bf:4d:91:23:87:1e:63:c8:a1:66:bb:
e1:49:da:87:ee:c7:31:83:31:d3:ff:d8:2a:b9:67:56:de:2c:
e0:ae:71:3b:35:cd:88:e8:fa:58:e2:62:3c:90:18:92:7e:a1:
b8:87:b1:19:82:c2:d5:68:63:f6:30:29:f7:b2:da:d7:b3:87:
89:27:79:ba:01:47:f1:de:3f:4d:60:a2:27:d1:f8:3e:b2:80:
97:f6:de:0a:47:d0:db:03:27:48:e1:1b:12:5e:91:22:3c:0a:
2c:bb:f9:0f:31:1e:90:13:65:2b:1d:8d:1c:4d:5a:85:9e:4d:
3b:d6:27:b6:25:9f:aa:72:b9:a5:2f:f8:fd:af:c4:d3:77:a1:
29:73:2d:75:f4:dd:b7:5a:09:e5:a3:e2:22:04:a9:3f:38:b4:
4b:c7:e9:e7:93:9c:09:7d:b2:8a:2c:2a:30:18:0e:99:51:c2:
8e:f6:5e:78:e7:cd:ae:90:1f:39:f7:d3:f9:dd:28:f1:68:06:
4f:f9:c3:89:6c:7e:60:89:4d:e1:0a:15:23:87:6b:50:ac:34:
f2:b8:ae:2c:9f:41:b6:30:8a:25:44:52:e5:99:07:d6:d9:f8:
c2:90:26:ab:ed:7a:a9:17:f0:b3:1e:b4:fc:6d:ea:73:c8:b2:
3f:56:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org