Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/w79_VzIKip4NPtUlPpNJLk8tcT4.roa
File: w79_VzIKip4NPtUlPpNJLk8tcT4.roa (raw, json)
Hash identifier: 7PwLQhZiRWjk5VXPEYKx4KKu5XzOWpKbS9QWrWquP9E=
Subject key identifier: C3:BF:7F:57:32:0A:8A:9E:0D:3E:D5:25:3E:93:49:2E:4F:2D:71:3E
Certificate issuer: /CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1
Certificate serial: 076F
Authority key identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/w79_VzIKip4NPtUlPpNJLk8tcT4.roa
Signing time: Tue 29 Sep 2020 09:59:09 +0000
ROA not before: Tue 29 Sep 2020 09:59:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18045
IP address blocks: 211.76.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1
Validity
Not Before: Sep 29 09:59:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3BF7F57320A8A9E0D3ED5253E93492E4F2D713E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:53:3d:96:da:59:c5:16:b2:9a:2b:38:30:
4a:5d:bb:bc:5e:b9:9b:87:7b:11:0e:66:41:56:f1:
20:15:5b:09:5d:4d:11:a4:d9:8a:ca:46:64:04:c8:
41:fb:74:59:b8:5e:ab:a6:2b:28:9a:91:e5:5b:a2:
e8:56:fd:c1:0c:38:45:f5:0b:83:a8:58:74:20:71:
27:b8:51:d6:a9:43:c7:35:ed:29:03:6f:4a:44:bd:
e8:7c:c5:2c:45:ca:3c:87:22:c7:8d:ca:39:d6:70:
2e:1d:84:a5:86:d2:73:72:27:9f:ca:19:28:1d:d2:
c0:c7:ea:cb:1d:8d:3b:a4:e8:39:35:bc:0c:0b:8d:
c8:8b:4e:cf:b6:b4:dd:2c:bb:0a:98:35:8e:54:11:
3d:a4:a8:f3:16:52:df:88:b4:d1:12:77:ae:26:85:
6f:dc:b4:3d:47:93:ce:55:56:19:9c:ec:5f:a3:5e:
7a:d6:86:f4:bb:d9:e2:64:e5:ef:27:f5:ee:5f:eb:
17:14:2f:bb:c9:b1:74:be:97:59:83:c4:30:cf:34:
f8:b4:47:39:5f:b7:d3:26:9f:ba:e9:d0:5f:ae:6c:
dc:14:55:4f:f8:c9:65:5b:c4:99:36:39:96:6c:d2:
32:35:35:b1:a8:bf:ae:f8:80:5f:ef:df:b3:b5:cf:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:7F:57:32:0A:8A:9E:0D:3E:D5:25:3E:93:49:2E:4F:2D:71:3E
X509v3 Authority Key Identifier:
keyid:FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/w79_VzIKip4NPtUlPpNJLk8tcT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.144.0/20
Signature Algorithm: sha256WithRSAEncryption
70:50:fb:e8:db:83:44:60:3a:5c:95:3a:5b:51:56:ee:e2:cb:
2d:35:c2:bd:c4:d0:1e:bb:5a:32:72:e7:2d:12:1b:78:83:32:
36:79:28:d2:3c:e7:3c:50:cc:47:4d:56:48:20:62:ec:8b:b7:
fa:45:ef:aa:3a:24:d3:0a:fd:92:24:2c:80:f9:b3:3a:6a:33:
be:62:f4:61:fb:2a:92:b5:1d:60:54:33:a1:0d:d3:b5:0e:99:
90:e0:b7:cd:b2:24:a1:bc:11:4b:49:eb:76:da:d5:59:29:db:
b3:77:c6:a1:4e:34:45:a7:2e:92:c3:18:d9:5a:f9:e4:ed:0c:
39:46:46:81:7f:f9:9f:2f:d9:ae:24:0c:66:f0:60:af:b2:2c:
ce:55:b1:d1:20:f7:27:76:8c:d5:4f:17:9d:f4:df:f3:17:1e:
82:54:1b:05:a0:0e:ee:3b:94:2b:a7:32:b2:11:b0:de:ee:28:
ee:7e:a9:bd:70:18:60:e6:7b:f4:a0:21:29:be:42:e0:d1:9c:
96:dc:51:54:a9:59:6e:52:6f:db:bc:04:f9:ed:d2:25:50:d1:
bd:12:8c:23:86:a2:74:b0:c8:c3:31:1b:f6:34:ed:1d:d2:b5:
c8:7c:03:2e:35:b5:88:c1:aa:ea:72:9f:3a:37:f3:fb:a7:48:
45:3a:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org