Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/VMUDu-OKDUMeQRNABcdzYcwKSWI.roa
File: VMUDu-OKDUMeQRNABcdzYcwKSWI.roa (raw, json)
Hash identifier: jAdeXq86yPSrg+cEpXZAX6vlq2UWs1/wCXmjNGKqwcw=
Subject key identifier: 54:C5:03:BB:E3:8A:0D:43:1E:41:13:40:05:C7:73:61:CC:0A:49:62
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 077F
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/VMUDu-OKDUMeQRNABcdzYcwKSWI.roa
Signing time: Tue 29 Sep 2020 09:59:20 +0000
ROA not before: Tue 29 Sep 2020 09:59:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18182
IP address blocks: 219.84.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 29 09:59:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54C503BBE38A0D431E41134005C77361CC0A4962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:39:48:c8:52:69:85:f0:6c:a3:23:2c:c1:
02:ce:20:50:2c:96:ab:e6:c1:ae:ac:41:99:6b:fa:
e7:b6:94:dd:c1:f9:3f:14:81:57:0b:bf:82:84:77:
0e:47:34:83:0c:b0:4e:fa:1e:1a:f5:f0:02:90:4c:
b0:44:20:ac:4d:1f:27:ea:e4:cd:f7:89:5c:82:9b:
23:42:77:d3:63:e2:88:15:4e:c3:28:ea:25:ce:21:
c4:d7:b0:a9:9c:9a:9f:4c:fe:27:f6:24:b9:fe:c4:
b2:b9:f1:74:54:c1:34:e0:36:d3:6e:11:b1:48:4c:
d5:64:b8:40:2e:a4:71:c5:17:11:78:aa:c2:5b:07:
c8:34:02:44:d3:cb:8c:1f:4c:12:63:ba:b3:5e:fa:
4c:2a:22:ce:e0:48:5a:14:7d:63:4f:da:77:33:d4:
a7:01:71:f8:13:76:4c:4f:02:3d:eb:74:b8:fc:56:
74:01:f4:0a:60:97:90:e7:e3:60:f6:35:16:9d:d1:
86:9c:b9:2d:e9:63:98:79:8c:75:1e:47:5e:34:30:
ca:5d:52:ed:e9:16:e7:4c:c3:e1:cf:7a:62:88:c8:
3e:4a:1c:e8:a1:44:ff:70:75:e5:41:04:a5:ed:3b:
ee:85:d0:5f:60:bc:4e:a4:88:2f:53:7d:0a:ba:6b:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:03:BB:E3:8A:0D:43:1E:41:13:40:05:C7:73:61:CC:0A:49:62
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/VMUDu-OKDUMeQRNABcdzYcwKSWI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:83:e8:47:04:0a:53:b2:15:19:6f:47:42:5c:33:85:60:2f:
83:46:9c:92:cc:7a:27:74:15:b1:51:b3:f5:dc:8b:65:35:d0:
58:e9:69:27:c2:4e:da:b6:3b:39:8e:0d:53:2e:18:db:d6:c3:
a7:75:34:e5:27:53:0c:f2:f5:4a:76:c3:60:60:e6:61:d0:64:
80:4b:b1:32:78:d6:02:90:74:3c:b9:29:5b:6f:69:1d:7b:73:
e4:db:95:4d:68:d2:d1:a4:03:21:64:14:2c:25:b5:72:a6:48:
f8:bd:33:27:cb:27:28:13:91:d0:00:23:c9:9c:ca:f8:cc:1d:
88:28:d3:25:11:dd:b3:13:db:94:57:34:c2:7b:c9:2c:b5:79:
25:24:8f:cc:dc:2f:67:38:f2:fa:ae:68:f2:f9:42:f6:83:3f:
98:56:0d:0c:98:ab:41:24:87:8d:74:46:37:55:81:37:8c:2b:
bd:eb:2c:99:09:85:17:58:a6:e7:c6:59:92:da:0c:5e:26:3d:
a1:05:98:b7:b5:cb:24:51:95:8d:5a:c9:2a:7b:28:2c:32:be:
f0:18:fd:e6:f5:30:8f:98:ef:51:64:0b:c2:d5:2f:99:71:88:
12:cc:44:f7:a0:de:86:22:ea:6a:b1:1e:6d:38:cd:ad:6b:1d:
95:de:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org