Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/j3UICWspTXoK3PAEDAFfa1KoIxw.roa
File: j3UICWspTXoK3PAEDAFfa1KoIxw.roa (raw, json)
Hash identifier: iRmHvgv6FNUHWByRlR0yIg/znELBDLbe57/fb9p79AA=
Subject key identifier: 8F:75:08:09:6B:29:4D:7A:0A:DC:F0:04:0C:01:5F:6B:52:A8:23:1C
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 077E
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/j3UICWspTXoK3PAEDAFfa1KoIxw.roa
Signing time: Tue 29 Sep 2020 10:06:20 +0000
ROA not before: Tue 29 Sep 2020 10:06:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131584
IP address blocks: 101.3.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 29 10:06:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8F7508096B294D7A0ADCF0040C015F6B52A8231C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:7a:5e:8b:c1:bd:ca:48:c2:65:e8:92:d7:
a3:be:b3:cc:ee:8c:c6:fb:11:e1:17:37:5c:ab:61:
15:dd:01:46:e7:f9:71:8f:df:f3:6d:38:7e:3b:a2:
c2:e1:6c:9f:41:8b:f8:dc:44:c0:0e:29:f9:e1:25:
ab:fe:20:23:0c:b1:54:06:31:03:7a:d7:3c:43:bd:
27:df:27:85:a6:11:ab:eb:6f:8a:86:86:b3:5f:31:
31:31:60:5c:da:c6:e1:62:d8:e7:1a:38:76:c5:96:
0b:b8:f0:c6:0d:50:28:54:2f:67:85:f8:8c:73:26:
72:36:e1:e5:67:9c:73:9b:f5:fe:65:ec:c1:35:3d:
4d:2d:e8:ec:1a:bd:ae:e0:09:38:0d:13:2a:86:3a:
0b:67:5e:04:9f:50:ac:26:18:06:9b:92:e8:53:be:
0b:47:31:9f:8e:49:5a:12:cd:5f:40:d2:60:4b:5c:
5b:40:99:83:b5:47:ea:3d:2a:44:0e:a6:ac:ba:fc:
82:c8:1e:74:cf:68:be:b3:d3:e9:4d:b7:f6:02:20:
c3:ca:4d:0d:6e:50:1f:44:96:e4:f3:4e:1b:5c:f9:
49:53:62:ec:a8:f6:50:67:e4:c3:ad:7b:51:7a:a4:
dc:d9:9c:d6:8a:93:7c:ae:eb:df:43:8b:45:d9:fa:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:08:09:6B:29:4D:7A:0A:DC:F0:04:0C:01:5F:6B:52:A8:23:1C
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/j3UICWspTXoK3PAEDAFfa1KoIxw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:8b:8e:22:32:f5:53:6a:d8:8f:d2:e5:aa:42:5e:93:5e:1f:
e4:64:78:aa:5d:5c:13:f1:56:96:49:51:6d:97:3a:61:ff:6f:
7e:91:36:05:26:b9:1f:7a:e4:e8:ef:b5:02:fe:3b:5c:60:dd:
50:50:34:de:f3:5d:18:05:63:54:31:e3:66:de:a3:e2:43:37:
0c:65:99:7d:0d:df:c1:60:71:5d:c5:6b:07:47:ff:81:31:31:
bd:f7:2b:22:3f:d1:e2:98:3f:fc:31:59:8e:1f:63:5c:73:e2:
ba:94:5e:da:e5:b3:da:20:aa:73:47:3e:e3:72:31:32:fb:01:
2f:db:1c:cf:93:f8:d1:ce:af:3d:2e:a4:8d:2e:83:5f:f5:1f:
f3:78:53:a4:80:24:bc:b4:02:88:e7:eb:1c:8d:81:ed:1b:a8:
dc:82:91:e0:17:88:9d:98:bf:18:25:fa:22:06:5a:15:76:2e:
24:e0:38:bd:f3:4d:7c:d0:99:2c:14:fc:2b:8a:e3:4a:13:79:
01:ce:3c:96:60:7c:ed:e1:61:23:32:a0:4e:68:f0:2f:66:c8:
b5:af:16:7e:a9:85:a7:81:68:f8:17:08:20:c9:49:63:ee:33:
41:1d:70:43:23:b9:a4:12:bb:ca:f5:48:66:c1:2e:69:44:6b:
a5:2f:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org