Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/ls2nq3J8_G3REm8Au9adT12XE4U.roa
File: ls2nq3J8_G3REm8Au9adT12XE4U.roa (raw, json)
Hash identifier: /AAKwnZC4791IhDTYKhC3aOryoiGbato3Ynz7eaaqSI=
Subject key identifier: 96:CD:A7:AB:72:7C:FC:6D:D1:12:6F:00:BB:D6:9D:4F:5D:97:13:85
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 097D
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/ls2nq3J8_G3REm8Au9adT12XE4U.roa
Signing time: Wed 29 Sep 2021 02:36:38 +0000
ROA not before: Wed 29 Sep 2021 02:36:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4783
IP address blocks: 210.67.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2429 (0x97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 29 02:36:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=96CDA7AB727CFC6DD1126F00BBD69D4F5D971385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:4f:69:92:0f:6d:61:1d:2d:3f:66:7a:31:
f0:cd:8f:90:68:cd:6b:9e:46:04:40:f1:1f:93:4e:
fd:fc:4f:b3:e9:f2:5c:53:03:c8:b7:41:60:04:41:
37:f5:d7:e1:5b:c2:6a:32:02:26:2e:33:b5:ea:ff:
2d:66:0d:29:8a:86:82:d5:61:62:64:9f:00:76:33:
a2:05:f4:22:e7:8c:99:b9:6b:95:dd:ca:9f:fd:8f:
6b:c5:e8:bb:4b:a4:7d:77:75:a7:67:63:34:0a:0f:
51:bb:24:43:1d:23:56:99:ee:20:b5:e6:da:18:4f:
dc:41:ba:9c:dd:55:f5:fb:7b:eb:73:43:2b:fa:29:
c1:67:26:20:d7:f8:7f:1b:7e:fb:48:1d:f6:24:64:
00:96:72:ac:cd:60:f0:47:ab:98:17:b3:a1:47:05:
a4:6d:e5:e3:df:e1:89:e3:83:0b:a5:bb:68:71:a4:
d6:f0:65:0e:74:02:bf:35:5b:b1:26:f4:38:92:64:
e6:d4:cc:5e:b8:a1:31:0f:79:90:f4:61:06:71:a1:
ce:86:e8:97:71:b1:1d:32:24:38:ec:1c:dd:af:59:
cf:d7:dd:ab:5f:e7:4a:8b:69:ab:8a:ab:8b:d1:58:
cb:e2:1f:3a:95:88:b1:c9:73:c1:15:f0:f1:fe:0d:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:A7:AB:72:7C:FC:6D:D1:12:6F:00:BB:D6:9D:4F:5D:97:13:85
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/ls2nq3J8_G3REm8Au9adT12XE4U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:b7:8f:3a:91:fe:59:12:b9:c7:23:c6:a6:f5:51:ed:66:77:
d4:4d:c0:fe:c5:c6:4b:4c:41:aa:00:01:e7:e6:f2:43:05:44:
32:cb:43:0e:12:fe:48:b4:a2:05:90:cb:9b:35:4e:6e:a2:e7:
4d:78:b3:3d:30:73:5a:5a:e5:2e:51:e2:94:81:a8:9a:70:04:
05:1b:01:82:dc:7c:9d:e0:8e:83:72:9d:c8:ee:45:24:8e:df:
62:09:78:b3:e8:ff:37:d8:a2:4b:85:7c:f4:d3:ef:84:2d:aa:
c0:6e:03:0a:da:39:25:bd:50:5a:40:67:96:d8:37:2d:ff:a7:
aa:c8:a9:5f:ec:3a:42:57:e2:79:39:3e:f7:e8:7a:27:c4:08:
5f:24:f8:d8:72:12:7a:bd:1a:3e:b2:71:1b:20:c7:ca:c7:67:
f0:9b:dc:28:e4:4d:0f:0f:87:cb:1f:2d:2c:a8:4c:ba:6d:1e:
ba:21:23:90:c6:b0:5e:8b:bf:85:a5:8d:48:0a:4b:78:0a:6a:
40:56:f8:7f:60:64:16:d7:a2:f6:38:c0:76:14:73:39:76:53:
38:1d:58:07:65:8f:e2:d1:86:42:1e:09:0e:f4:c8:47:89:11:
c9:6f:86:a6:ac:68:a5:14:23:d8:f4:3b:bf:ed:d7:bd:e1:10:
85:03:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org