Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/gqLLzez3lPRMQe8MYDz-3q-e-v0.roa
File: gqLLzez3lPRMQe8MYDz-3q-e-v0.roa (raw, json)
Hash identifier: L6P111+ojCifLN1sDxkwYEwyiPBk50ZzWC6ojM9aD20=
Subject key identifier: 82:A2:CB:CD:EC:F7:94:F4:4C:41:EF:0C:60:3C:FE:DE:AF:9E:FA:FD
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0A6A
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/gqLLzez3lPRMQe8MYDz-3q-e-v0.roa
Signing time: Thu 15 Sep 2022 02:37:35 +0000
ROA not before: Thu 15 Sep 2022 02:37:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4783
IP address blocks: 210.67.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 15 02:37:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=82A2CBCDECF794F44C41EF0C603CFEDEAF9EFAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:67:7a:1e:9b:17:72:22:42:f7:16:8f:7e:5e:
b1:8b:51:80:e9:aa:a0:ff:77:8a:7f:e0:a9:4b:37:
ff:0f:27:c8:f2:e2:66:17:ea:df:c9:0d:36:fb:ac:
8d:46:1a:9d:7a:e1:92:29:a7:58:21:79:fe:fd:63:
1f:48:c9:72:07:99:e6:5e:ae:aa:20:1e:96:a3:6f:
19:b2:ec:2b:08:a7:76:ff:0b:2a:9f:c6:6c:ae:2b:
a8:a5:c1:0d:04:7f:de:e8:b1:7d:c3:24:98:24:c6:
be:2d:c4:a2:34:3c:08:7b:05:d6:10:24:18:95:58:
d1:69:d9:11:d5:68:31:64:33:41:41:59:dc:d4:a3:
a2:67:67:de:42:bd:41:58:06:28:49:45:ed:0f:63:
93:00:88:c6:59:42:7e:cd:6b:e6:5e:11:02:18:30:
77:39:ff:d7:89:4e:d5:ca:ba:17:2f:a6:40:2c:0b:
5f:4c:cf:42:d6:79:b8:a8:db:0b:ea:41:ee:68:b3:
1c:bc:77:b2:11:dd:f8:17:5f:12:98:3a:3c:f0:63:
02:f0:7b:e0:6e:57:64:19:1e:6a:50:06:75:ed:0a:
e4:fd:66:1e:44:79:0a:47:b9:c1:55:99:9c:37:38:
5e:9b:89:2f:4f:db:ef:e0:89:73:b9:57:7b:3a:37:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:CB:CD:EC:F7:94:F4:4C:41:EF:0C:60:3C:FE:DE:AF:9E:FA:FD
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/gqLLzez3lPRMQe8MYDz-3q-e-v0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.112.0/20
Signature Algorithm: sha256WithRSAEncryption
33:04:71:91:49:1a:d1:7f:0e:43:6e:b2:6c:85:3d:90:53:d3:
ac:97:f0:d5:78:37:36:3c:a2:98:f7:c2:19:3b:7e:0f:e2:b9:
12:18:8b:5d:27:b3:45:32:dd:44:79:73:de:d6:d0:83:a3:f1:
c7:a0:13:3f:a3:39:b7:ce:4b:75:a9:05:b1:59:7e:cf:a0:81:
d1:a5:b3:01:65:c0:0b:58:8e:7e:eb:46:a5:89:89:92:7f:ec:
88:3f:da:6e:dc:d8:fc:91:0c:ad:a8:8e:8d:95:79:99:c1:d1:
75:86:b6:4a:ee:81:48:9f:98:99:ef:75:7e:e0:ef:7a:da:9e:
28:bb:5f:a8:5a:0c:87:23:d0:ff:c9:63:a8:79:c0:20:7e:c4:
96:af:db:76:93:54:f3:65:b2:d0:03:7c:22:2e:d6:9d:96:1d:
70:81:3d:c8:e2:4b:b7:60:1a:2e:76:d4:3e:7a:6d:37:e3:b4:
d9:d0:01:ac:88:26:c7:28:b1:4a:a3:e8:2f:04:fb:c6:44:65:
14:67:87:df:60:46:a5:11:17:bd:ef:c3:e0:85:02:b6:38:b2:
2b:50:fc:16:32:54:b8:a1:c1:c1:4e:15:44:3a:84:13:f7:7e:
0d:5f:ac:ce:1e:9f:23:ec:f2:c9:28:84:01:f3:d8:e8:23:8c:
87:81:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org