Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/WPFw2ft2k57GUCohSVHwumELNDs.roa
File: WPFw2ft2k57GUCohSVHwumELNDs.roa (raw, json)
Hash identifier: gNP3w/NMsE5vqgHtr06W+YnOQM1kiq5/BAyxOvYKPbE=
Subject key identifier: 58:F1:70:D9:FB:76:93:9E:C6:50:2A:21:49:51:F0:BA:61:0B:34:3B
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A90
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/WPFw2ft2k57GUCohSVHwumELNDs.roa
Signing time: Tue 20 Sep 2022 05:55:28 +0000
ROA not before: Tue 20 Sep 2022 05:55:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 111.125.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 20 05:55:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=58F170D9FB76939EC6502A214951F0BA610B343B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:65:4c:a0:f6:71:59:89:9a:1d:17:27:8c:
a1:15:6e:60:1b:70:8c:18:b8:b5:db:76:d6:c4:07:
18:23:d2:b1:65:67:76:6c:68:5c:f3:f3:dc:62:2b:
26:57:5a:93:ae:c4:cc:fd:bd:02:ff:a2:78:84:c1:
b7:61:3d:b4:4d:ae:bf:09:c1:a7:a7:b1:0e:54:5c:
42:58:52:05:5e:f4:09:2c:70:a7:87:37:31:8a:73:
d1:31:9d:a4:aa:88:44:42:a1:44:1a:b7:91:94:5d:
63:24:98:98:8d:7b:34:c3:4d:40:85:ee:3c:aa:34:
f9:49:83:4b:e4:e5:37:6a:06:d8:de:23:44:0b:5a:
1c:72:6e:1e:8d:da:f1:3b:8b:45:ac:60:3b:5d:c4:
2f:ef:8a:fc:46:ad:73:29:c8:65:d9:14:8a:b8:f7:
68:7e:f3:1a:74:be:31:ea:65:a2:13:27:4f:3f:3b:
a8:a0:79:9b:f8:58:13:6b:b1:f0:da:c7:1f:ee:23:
a5:ff:59:16:3e:ab:cb:42:ad:e4:fc:be:f0:42:b9:
f8:e1:9e:7d:d9:6e:85:50:50:34:0e:99:56:1f:34:
96:bd:53:eb:1f:e7:26:69:26:33:0c:df:f7:de:c2:
b8:a9:88:6c:3b:ce:75:0a:fb:15:44:ca:16:8a:f5:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F1:70:D9:FB:76:93:9E:C6:50:2A:21:49:51:F0:BA:61:0B:34:3B
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/WPFw2ft2k57GUCohSVHwumELNDs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:28:55:35:2c:15:e3:f6:31:ce:b3:68:0b:b5:2e:63:63:62:
00:f0:58:64:9e:74:3d:3a:6d:3e:07:32:6b:07:c0:71:2d:9b:
12:8e:ab:20:20:96:df:07:4c:78:9a:72:f7:5e:a9:61:ec:e9:
a3:72:a9:5c:98:47:98:de:60:54:49:d2:4f:eb:59:be:0e:00:
77:ed:6b:c8:c6:74:b5:c2:17:a4:73:8a:71:22:f2:c0:36:c5:
d5:19:9d:98:4e:e4:d3:56:c4:7b:e5:b5:57:6b:e8:7b:2d:7f:
cf:45:44:6b:c6:5e:75:5c:04:35:80:ef:29:95:fd:c7:11:80:
9d:d6:48:6f:ac:52:c2:31:4c:e4:5c:5f:b8:27:79:a1:7b:00:
50:c0:69:14:7b:3d:b7:19:79:31:7b:e8:2b:94:ab:ae:fc:66:
c4:34:bd:fe:5c:36:c9:3e:98:20:1c:c8:fc:3a:71:85:b5:b2:
34:99:3b:3a:c9:2a:b0:ba:12:c9:50:49:92:d7:dd:5d:06:6c:
9d:32:85:7a:42:c4:bf:c3:d2:51:60:67:c6:c4:f4:bc:15:da:
2c:dc:06:5f:67:38:7c:75:a9:11:bf:dd:ee:48:00:f0:7d:64:
94:22:61:88:f4:a0:28:c1:e2:cf:20:df:c9:b8:98:9a:be:03:
a4:8f:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org