Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/5yOYdoGauiBAbvoK5_HKp0RriDE.roa
File: 5yOYdoGauiBAbvoK5_HKp0RriDE.roa (raw, json)
Hash identifier: 7AQvuE/yeoBP/RRsNv1E4Pu3iwV083bAXbjP6ib8JBA=
Subject key identifier: E7:23:98:76:81:9A:BA:20:40:6E:FA:0A:E7:F1:CA:A7:44:6B:88:31
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0A6A
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/5yOYdoGauiBAbvoK5_HKp0RriDE.roa
Signing time: Thu 15 Sep 2022 02:37:36 +0000
ROA not before: Thu 15 Sep 2022 02:37:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4783
IP address blocks: 202.39.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 15 02:37:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7239876819ABA20406EFA0AE7F1CAA7446B8831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:20:40:93:5f:ad:aa:22:9d:7b:4a:cf:cf:
1e:c7:16:b3:37:4a:1f:5c:9e:b8:d6:24:18:0c:e5:
6f:44:45:60:97:3c:0c:41:8e:3a:58:70:30:59:e5:
7e:86:7b:ba:fe:4f:5e:09:6e:13:94:95:d6:70:d7:
46:1d:52:d3:23:92:40:16:06:b2:a8:64:7f:a6:26:
90:bb:7e:cb:94:c4:f9:6c:fc:a4:13:83:d2:72:37:
8d:0e:ca:96:29:b2:bc:b2:a6:3f:bb:ff:8d:27:32:
f0:36:35:12:3c:ce:ae:c7:8f:cc:d9:38:32:07:4e:
fa:e3:db:dc:08:69:c0:51:14:3e:2d:5e:3f:13:cf:
65:dd:4e:92:14:5b:92:6e:90:cf:d5:d0:6c:da:85:
56:1f:2f:88:ca:fa:8e:99:f0:f4:0b:91:d7:e9:5a:
e6:c0:60:ba:de:9e:10:d3:08:94:91:2f:b4:09:5e:
87:9c:d3:f0:f6:59:01:af:7e:2f:4e:f3:7d:89:b6:
ba:75:ce:a9:3b:90:9e:a6:19:54:da:64:98:f4:e1:
ad:e4:34:6c:f8:d9:8b:17:d5:ec:b1:1a:e9:2a:f4:
7d:b1:96:d2:9a:5a:a1:4e:9b:bc:f2:67:aa:25:cd:
11:2e:01:29:37:1c:0a:63:43:b7:fa:13:2a:5d:99:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:98:76:81:9A:BA:20:40:6E:FA:0A:E7:F1:CA:A7:44:6B:88:31
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/5yOYdoGauiBAbvoK5_HKp0RriDE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.96.0/20
Signature Algorithm: sha256WithRSAEncryption
10:70:25:56:5d:d2:17:97:e4:2d:12:ab:94:7b:73:30:fc:c4:
c9:43:ed:d1:5c:c5:81:c4:a8:ec:0f:4e:a7:c8:1f:f9:85:0f:
fa:71:b4:a6:72:24:cd:ef:9d:41:24:31:13:30:f0:65:8e:88:
3d:39:29:5e:c0:6f:5c:91:d4:71:f7:ee:2b:de:a4:23:41:fe:
c7:28:a4:29:7b:24:8a:7a:5b:9d:ce:9b:dc:d4:df:89:d9:17:
c5:5a:ed:ee:2f:c3:6c:92:e7:eb:63:12:cf:8e:67:c1:97:e8:
08:5a:ef:03:98:a8:e2:ef:5e:eb:11:36:5b:c1:64:fc:89:06:
67:71:7d:c0:cd:73:d0:4c:41:92:ff:90:e3:00:3d:af:ee:f4:
29:da:54:d0:65:a1:99:de:fe:2a:62:eb:e8:ac:d2:44:b5:07:
56:48:6a:1f:db:ab:04:51:76:aa:0d:a4:48:31:7f:f9:84:b3:
b4:db:af:95:47:22:ce:13:95:9a:73:4d:23:ab:89:8e:5f:68:
81:23:a8:39:72:3b:32:25:b3:a9:ad:d1:09:ba:10:e1:6e:a5:
7b:c8:b1:42:36:54:d0:38:33:ca:d3:30:b2:56:1b:00:64:32:
4c:0e:dc:31:28:3e:72:a8:1c:d2:ca:d4:5c:c1:42:fc:3c:56:
dd:a2:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org