Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/mmU4WdmxjCO47_-d6cWq8ugcfzw.roa
File: mmU4WdmxjCO47_-d6cWq8ugcfzw.roa (raw, json)
Hash identifier: g2aaniucfha6tG2M+y6PP/0OOf9v9z0O0hX/+QJhwig=
Subject key identifier: 9A:65:38:59:D9:B1:8C:23:B8:EF:FF:9D:E9:C5:AA:F2:E8:1C:7F:3C
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0793
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/mmU4WdmxjCO47_-d6cWq8ugcfzw.roa
Signing time: Tue 29 Sep 2020 10:06:19 +0000
ROA not before: Tue 29 Sep 2020 10:06:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4783
IP address blocks: 210.67.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 29 10:06:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A653859D9B18C23B8EFFF9DE9C5AAF2E81C7F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:7c:a8:78:83:1a:7f:03:36:29:bb:e7:15:
c9:ff:1b:dc:be:26:93:ad:6d:95:b3:df:93:88:be:
75:07:b3:da:9a:32:ed:9b:67:2a:d6:f6:a2:2b:2a:
82:24:37:50:72:86:40:d2:87:06:ba:37:d5:57:e9:
3c:3f:6c:f9:a8:c8:2f:3b:bd:35:ed:51:f6:9d:96:
0e:dd:dd:53:57:56:fb:1a:c2:3f:07:d0:65:84:87:
0d:38:b3:c3:cb:7d:d0:eb:07:3b:0a:3e:dc:48:d4:
8c:d2:b1:ce:6c:50:f3:ac:7c:12:8e:5b:a0:a7:e5:
30:1b:0d:76:a8:47:25:cf:de:5b:43:7f:47:57:51:
a4:bf:64:dc:76:69:68:a0:2a:7e:17:de:76:f7:90:
91:7a:2a:47:37:d4:dd:b7:0b:6a:ae:d3:5a:12:d9:
f0:f3:62:69:ec:fb:0c:f0:08:92:25:0a:90:53:42:
b8:a4:be:74:f9:1c:aa:c2:3a:2f:09:d0:04:c0:91:
2f:8f:8d:48:7c:f5:ab:9a:8a:82:78:f7:3d:d2:54:
d0:2b:4d:2f:0e:93:c8:3e:f7:0d:92:40:3b:ce:9a:
64:d2:56:85:62:a0:14:de:48:ba:ba:d8:cd:9c:83:
b5:de:8a:b0:ce:2c:46:b6:dd:0c:07:41:54:36:0b:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:38:59:D9:B1:8C:23:B8:EF:FF:9D:E9:C5:AA:F2:E8:1C:7F:3C
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/mmU4WdmxjCO47_-d6cWq8ugcfzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:b8:6b:84:2b:b6:e0:27:69:8e:9a:a1:8f:01:ab:d3:74:eb:
e0:40:9a:25:7b:82:d2:ff:80:fb:36:d2:4e:06:94:ba:90:85:
cc:84:6a:a5:6a:dc:de:5e:68:5f:54:26:9b:8f:8c:2b:87:fb:
8f:2e:a1:f8:31:ba:ad:34:0d:97:1c:4c:32:da:25:ca:ca:09:
50:46:ab:62:65:b0:8a:c1:47:59:54:18:fc:bd:5e:9b:90:33:
bd:2e:12:95:eb:93:a2:5e:09:e6:8b:45:73:db:84:d0:1c:33:
f2:5c:23:bc:31:f3:7f:0f:00:d8:5a:04:27:a3:71:90:08:23:
8a:4a:e5:9c:83:4c:cf:6a:8a:30:22:c5:14:a2:fb:0f:ca:83:
45:f5:39:b4:bc:37:c8:d1:5f:00:91:d8:41:b6:05:27:09:a5:
4b:06:67:2e:7a:63:da:cd:b6:1f:32:71:2e:25:20:e5:e8:a1:
19:08:18:f6:45:85:bd:23:bf:37:b8:a5:0b:78:fd:58:84:e8:
a0:50:0d:63:42:db:5c:e9:e1:80:21:6b:9e:f0:aa:4e:41:5f:
b1:aa:1c:4c:86:6d:d1:19:8e:8d:ac:b0:d9:94:aa:06:22:f2:
61:35:98:64:43:d4:d5:e4:1c:da:96:99:eb:0a:48:c9:d2:79:
d1:ee:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org