Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/f9MBvIJeVWhxOroVjidNs-Ff09g.roa
File: f9MBvIJeVWhxOroVjidNs-Ff09g.roa (raw, json)
Hash identifier: f/sVUbjGAkWk0zXNj80Vqzc0Xr4RLcV3CtxXYSg8XPI=
Subject key identifier: 7F:D3:01:BC:82:5E:55:68:71:3A:BA:15:8E:27:4D:B3:E1:5F:D3:D8
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 09AB
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/f9MBvIJeVWhxOroVjidNs-Ff09g.roa
Signing time: Wed 29 Sep 2021 02:56:02 +0000
ROA not before: Wed 29 Sep 2021 02:56:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24158
IP address blocks: 117.19.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 29 02:56:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7FD301BC825E5568713ABA158E274DB3E15FD3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:86:92:9a:af:70:f4:03:46:d3:2f:15:e6:
92:d9:3a:54:2c:2f:cd:bc:1a:c9:38:b6:2a:43:ff:
63:3b:a6:50:66:25:fb:3d:7d:00:c3:08:a7:f0:01:
e6:6f:e5:86:80:6f:6b:2a:bf:6d:08:7d:b6:06:6c:
3e:c1:1e:01:8f:fa:f7:fe:41:aa:76:4d:78:74:81:
47:21:db:d3:2d:cb:d6:d8:b4:d9:4d:bb:02:26:e8:
16:af:bd:64:e2:84:5d:55:2c:4e:91:d5:96:2f:25:
96:4a:ed:b1:cf:df:fe:99:d6:5a:9d:2f:22:11:1f:
f2:92:a6:71:b2:23:12:cf:d7:3d:6d:30:f4:1a:4b:
91:aa:04:7c:dc:2e:38:8d:12:c9:c8:cd:d6:c7:58:
1c:a7:02:f1:45:4c:da:c6:0a:28:ba:df:c9:51:03:
21:00:60:43:8a:ce:87:c1:92:ed:ee:ee:0e:59:1d:
85:e8:1e:0c:bb:03:5c:87:84:a7:65:b7:8f:38:a6:
43:85:62:5c:35:6d:20:d0:9e:53:d3:84:08:cb:42:
4b:8a:1c:5f:96:99:23:19:63:41:f7:c9:79:11:e6:
73:bb:fd:0b:9f:90:14:bf:7a:8d:f1:87:44:dc:c4:
1b:a7:d0:ec:75:c7:de:97:6d:67:e1:7b:75:f4:d5:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:01:BC:82:5E:55:68:71:3A:BA:15:8E:27:4D:B3:E1:5F:D3:D8
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/f9MBvIJeVWhxOroVjidNs-Ff09g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:4a:3a:a1:1e:e5:98:f2:8e:50:73:dd:46:a6:ef:77:c3:81:
46:ed:c9:11:cd:f4:f0:c1:89:38:aa:21:5f:49:16:60:16:bf:
f8:5d:8f:fe:e8:11:2c:db:c6:8c:ca:dc:13:33:6f:86:29:59:
8a:2f:9e:57:93:f0:0a:12:09:db:a0:7b:56:c5:91:21:14:e2:
bb:d9:ea:60:21:ea:7e:6b:1a:8e:f3:bb:07:e7:15:98:a0:bc:
2c:31:4e:a3:cd:bc:9b:fc:b2:f0:bc:03:19:8f:22:8c:db:cf:
d7:82:eb:9c:5b:be:68:b8:64:86:24:d0:19:f5:ca:e8:24:82:
aa:11:06:4d:ff:93:1c:db:8c:5c:ae:5a:a7:73:cb:1f:f4:18:
ff:86:a7:83:7a:07:67:db:7b:91:64:b4:3c:19:24:6c:51:c5:
b9:40:36:18:49:5a:eb:56:31:cf:f1:61:d8:bb:69:c6:05:28:
b8:11:3a:2f:ee:de:c9:86:03:83:12:22:56:ae:c4:11:cc:e8:
b8:ff:73:3d:49:b2:e5:8e:8f:0f:14:b5:73:e6:ca:c7:34:c2:
15:24:d5:24:b9:24:d8:ff:ac:30:41:07:d8:2a:94:fc:7b:ce:
09:cc:6d:11:e0:e9:56:4d:ac:ff:ab:0f:0a:62:72:b3:48:7b:
ac:66:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org