Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZmjUB6qnwbuwfgte37G0GV3j_IE.roa
File: ZmjUB6qnwbuwfgte37G0GV3j_IE.roa (raw, json)
Hash identifier: Cu6u6ZxE9eqEJ0uuibrPdKI1DviolVo74lPPamY7qpw=
Subject key identifier: 66:68:D4:07:AA:A7:C1:BB:B0:7E:0B:5E:DF:B1:B4:19:5D:E3:FC:81
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 078C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZmjUB6qnwbuwfgte37G0GV3j_IE.roa
Signing time: Tue 29 Sep 2020 10:06:25 +0000
ROA not before: Tue 29 Sep 2020 10:06:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 43.240.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 29 10:06:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6668D407AAA7C1BBB07E0B5EDFB1B4195DE3FC81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:82:46:14:41:87:fe:60:0d:45:05:21:9b:
d1:0c:0a:2f:1f:aa:83:58:28:11:c6:5a:cb:63:79:
50:58:52:13:d0:85:ab:86:52:3c:98:0a:da:9a:ac:
9a:fc:eb:b2:52:d7:77:9a:fb:78:a2:c2:28:7e:b0:
c0:0f:fc:19:6f:22:70:39:8d:ec:96:ca:90:83:c2:
d9:3d:b8:55:79:2a:71:44:19:95:6c:2e:ef:a1:27:
1c:90:88:60:0c:63:78:28:8f:cf:15:7b:9f:10:36:
9f:96:18:37:d4:61:a1:52:dc:bd:91:77:20:47:84:
0c:fa:70:31:87:5a:d3:67:bd:7e:10:8d:a8:fc:53:
d7:97:8a:50:b8:9e:c7:c0:4e:48:15:10:eb:31:89:
c6:66:6b:98:67:51:81:21:01:fe:18:9e:63:5f:43:
fe:27:2c:65:11:e2:f2:c5:13:f4:99:2c:9f:06:bf:
9c:68:be:ad:6a:2e:83:ad:f9:76:e3:11:7f:9e:8f:
bf:6b:0b:8c:85:6c:14:eb:68:8a:8d:7b:82:29:7b:
fb:31:3d:f9:57:9a:d1:a5:47:0a:66:a5:8b:92:0c:
8a:89:7f:b7:3c:7a:95:8e:d8:34:d8:1e:9f:ea:99:
11:0c:1c:5a:ed:3b:4b:49:5d:c2:bb:a4:b1:31:a7:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:D4:07:AA:A7:C1:BB:B0:7E:0B:5E:DF:B1:B4:19:5D:E3:FC:81
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZmjUB6qnwbuwfgte37G0GV3j_IE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.108.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a1:ac:9e:8c:6c:b0:b5:51:3a:cf:5d:5f:d6:d6:ac:aa:44:
5c:47:90:b0:73:16:84:ec:47:80:2c:5c:33:ca:9d:eb:e7:18:
84:d3:08:62:29:66:f2:1c:1e:20:88:0d:38:4e:98:f5:af:09:
24:4d:91:33:f4:7c:f7:8c:9b:b5:de:ff:4e:d8:dc:a1:85:cd:
19:5c:8b:e3:f3:67:ba:08:02:25:8e:b8:50:a1:98:f3:64:42:
da:8d:2f:8d:71:f2:12:c6:36:d8:13:bc:57:f6:fb:27:ee:ad:
df:a1:2a:1d:e1:75:6c:c1:e7:0a:91:3c:40:69:5a:94:79:57:
66:92:96:45:88:06:09:0d:74:59:32:52:32:d9:4b:67:61:7e:
b7:be:12:85:24:bc:60:a9:64:7f:01:4a:2a:ab:d1:17:fa:7e:
4b:ed:3b:3c:ed:7b:ce:98:b2:63:cf:61:69:d7:e3:3b:92:5a:
37:04:38:fa:7b:b9:10:ed:82:f4:e1:6a:e2:ec:bf:63:40:66:
1b:ba:58:d0:03:18:f1:e3:11:dd:1d:79:5c:a2:13:12:6f:69:
ec:0d:f7:2f:9c:59:f1:3d:68:26:1a:7f:c1:a9:a1:e6:8d:cc:
40:ea:56:f8:28:68:64:f4:9a:52:28:19:45:ef:62:cd:48:b2:
4a:2d:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org