Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xphcLYQubl6Oc3WeX4W3kVhLI8E.roa
File: xphcLYQubl6Oc3WeX4W3kVhLI8E.roa (raw, json)
Hash identifier: gdH1eruD4Fp84Rr+w8rV2pTnSi84n0xK54fbuFiWOL4=
Subject key identifier: C6:98:5C:2D:84:2E:6E:5E:8E:73:75:9E:5F:85:B7:91:58:4B:23:C1
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 078F
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xphcLYQubl6Oc3WeX4W3kVhLI8E.roa
Signing time: Tue 29 Sep 2020 10:06:04 +0000
ROA not before: Tue 29 Sep 2020 10:06:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 29 10:06:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C6985C2D842E6E5E8E73759E5F85B791584B23C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c2:3d:3c:d2:ab:9b:66:67:49:62:b2:6e:89:
9a:a7:e4:bd:47:c9:04:35:9c:9e:1d:18:14:89:70:
44:91:09:e2:8a:3d:4c:b8:db:4c:67:78:3c:b3:b0:
0f:22:87:21:53:e8:c4:00:de:d1:07:1d:f1:62:81:
2f:94:9a:4d:63:7e:97:0c:8f:1a:a9:29:c2:55:b2:
94:a3:dd:27:80:cf:76:0b:25:52:cb:3e:33:f6:f9:
52:91:9f:97:80:4a:ff:2c:1b:60:44:06:8a:8f:98:
eb:c8:d8:4f:ff:bf:de:b2:9d:98:47:65:7e:e3:48:
3d:e3:df:35:74:0d:c9:c6:4f:74:dd:b7:96:95:80:
ab:e2:02:a4:97:ef:56:72:1f:ec:89:9d:48:52:31:
dd:d6:03:63:e1:c1:35:7b:27:65:80:bc:ea:6c:d7:
91:4d:a7:46:83:1c:36:af:57:15:af:4f:63:70:48:
b2:c4:8b:a2:5b:f8:2e:1c:28:59:1e:e8:6d:83:56:
89:68:b3:ec:8d:9d:21:19:3d:11:cb:83:01:5d:b1:
d8:04:c0:30:40:cd:91:b8:81:77:84:0e:1e:26:d6:
11:f4:34:25:8c:cc:4c:45:04:00:2f:11:8f:5b:86:
a5:77:42:86:5f:2d:1e:12:c4:85:38:5f:19:0c:fd:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:98:5C:2D:84:2E:6E:5E:8E:73:75:9E:5F:85:B7:91:58:4B:23:C1
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xphcLYQubl6Oc3WeX4W3kVhLI8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:f1:ae:94:51:36:01:c3:c8:af:82:9b:5a:11:9c:81:d3:1c:
19:04:40:b9:c8:75:f1:58:5d:83:80:3c:7b:73:75:85:be:4f:
0f:5f:e4:d7:f8:66:e7:db:2f:a6:ee:a7:5d:fc:8b:46:26:07:
09:49:6b:58:01:ae:b4:43:0a:5c:33:7b:86:7d:3a:34:28:24:
06:e8:07:78:18:44:82:99:15:e8:29:6d:7b:ea:84:17:c0:98:
75:d4:af:5a:39:1f:51:65:37:49:70:b8:db:2a:26:71:fc:ca:
f4:e2:db:61:f8:af:4f:3d:56:99:b8:34:92:74:cb:58:1f:08:
54:6c:46:16:c3:c8:d7:f5:e3:9c:67:84:13:77:a1:f7:98:7c:
4e:dd:ee:b6:be:00:7c:ca:71:ee:50:30:91:e7:ce:54:67:0d:
0a:00:22:e1:43:4c:10:a5:35:36:33:25:24:56:71:77:ce:73:
40:75:0a:9e:97:00:2c:5a:99:bf:de:6b:25:c0:52:4d:46:40:
c0:3f:96:e7:8e:bf:38:d6:ff:b3:38:3d:fd:be:ff:45:95:52:
5b:63:08:74:e0:75:53:6e:f0:60:7f:b7:01:8f:e0:34:6c:48:
07:2a:90:94:ef:4c:ea:31:69:77:e7:21:14:75:31:98:18:44:
bf:7f:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org