Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/zxoJO8rdvHqR5YG1e3_ZIG1NyGk.roa
File: zxoJO8rdvHqR5YG1e3_ZIG1NyGk.roa (raw, json)
Hash identifier: Z03cx33Jp9o9BR/eJErHjhT7eQMkdYRBSpDDxGmI0rc=
Subject key identifier: CF:1A:09:3B:CA:DD:BC:7A:91:E5:81:B5:7B:7F:D9:20:6D:4D:C8:69
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 08DB
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/zxoJO8rdvHqR5YG1e3_ZIG1NyGk.roa
Signing time: Sun 07 Feb 2021 11:55:19 +0000
ROA not before: Sun 07 Feb 2021 11:55:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4783
IP address blocks: 210.67.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Feb 7 11:55:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CF1A093BCADDBC7A91E581B57B7FD9206D4DC869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:04:4e:55:91:a6:5f:c8:20:50:3d:14:b5:
df:59:36:08:db:da:ba:ed:d9:6d:de:ab:fa:58:95:
ca:5d:d3:73:35:f0:b0:ea:3b:02:29:3f:5b:58:5b:
6c:40:62:86:38:35:37:b5:b8:fc:7d:71:62:23:b8:
9b:60:36:06:ca:1c:cc:4b:ed:79:07:6d:e0:50:ea:
0c:a2:a6:ba:d3:d8:be:ec:c7:4a:1e:e0:52:a8:8e:
94:60:dc:5c:f1:2b:83:bb:9b:47:3c:fe:e6:14:2c:
5a:12:5a:6e:cd:6b:c4:8a:9d:c9:94:e8:5b:8a:a3:
58:fd:b6:90:f9:48:a4:d9:a8:7d:52:48:46:25:4f:
42:ec:ed:a2:5c:da:44:d8:c0:3c:f9:07:ed:04:71:
eb:5a:d2:41:4f:d7:ca:2a:ed:f3:e0:0c:a5:74:3c:
b4:c1:88:73:45:37:03:f9:ab:7f:cb:05:62:4a:b9:
7c:3f:69:d7:38:9e:ff:c6:d3:0d:a0:1b:65:1e:25:
77:a2:78:d5:d5:9c:47:82:4b:96:8a:41:e3:fd:e8:
d0:b7:83:7f:50:63:b1:da:cf:84:21:89:8c:14:c4:
eb:c4:7a:f3:f0:28:97:0f:c7:19:ad:88:0e:be:a0:
53:12:30:c1:c2:0d:13:6a:7f:af:98:a0:fc:91:6a:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:09:3B:CA:DD:BC:7A:91:E5:81:B5:7B:7F:D9:20:6D:4D:C8:69
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/zxoJO8rdvHqR5YG1e3_ZIG1NyGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.128.0/20
Signature Algorithm: sha256WithRSAEncryption
52:67:d7:eb:2b:9f:90:15:18:f7:71:cc:c1:46:94:6d:0c:ce:
01:ae:ff:31:d9:62:b3:fd:f4:8a:ff:e4:58:b5:13:19:b0:09:
6b:35:46:ce:96:e3:d7:17:3f:99:29:e0:3f:12:24:ee:65:3a:
e3:5b:4b:7e:e0:c7:3c:f3:41:10:86:b2:25:8c:30:8f:84:fd:
f4:1c:db:72:bf:63:c5:42:76:f1:51:25:47:8f:64:64:ec:9c:
5a:10:e6:70:95:71:15:9d:65:58:b1:95:2e:6d:01:23:97:b1:
4c:70:21:be:3b:4e:ac:09:c8:4c:42:af:88:33:6b:91:dd:e0:
78:7e:26:3c:4c:c7:70:bf:0e:d9:0a:b2:aa:8a:25:99:a1:f1:
e4:05:6c:85:22:cd:3d:f1:42:5d:af:0d:c8:c8:c0:0e:15:7d:
07:fe:57:ee:8a:90:95:ce:12:91:96:e5:b0:49:88:b2:66:13:
b7:9c:a6:86:9c:90:40:74:e9:32:e5:63:e7:1a:cc:6d:d9:45:
cc:09:c5:25:99:8c:f2:d0:63:71:1e:53:48:23:a0:29:6f:04:
7f:29:f7:ef:5a:6f:be:9f:e2:f4:6c:52:2c:b2:89:78:19:82:
75:d7:fb:2e:07:4b:29:ca:06:30:d6:80:24:b4:7f:12:f3:2f:
bb:22:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:05 2023 by rpki-client on console-ams.rpki-client.org