Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/lCIwSCWhdm1zUKZhBGBxpVThpQc.roa
File: lCIwSCWhdm1zUKZhBGBxpVThpQc.roa (raw, json)
Hash identifier: qxHaGhpDoJlDdogbCqmyLap7wjjU0LJX05yDoIW0v2U=
Subject key identifier: 94:22:30:48:25:A1:76:6D:73:50:A6:61:04:60:71:A5:54:E1:A5:07
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 09A5
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/lCIwSCWhdm1zUKZhBGBxpVThpQc.roa
Signing time: Wed 29 Sep 2021 02:56:01 +0000
ROA not before: Wed 29 Sep 2021 02:56:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24158
IP address blocks: 123.99.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 29 02:56:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9422304825A1766D7350A661046071A554E1A507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:a3:18:09:53:7c:dc:26:5e:0b:4e:f2:20:
68:8f:fc:0f:ae:2a:d6:96:ed:72:91:3a:fa:c7:58:
76:ac:32:49:18:24:52:c5:8b:81:41:f1:e5:95:6b:
d2:20:9f:51:06:3c:0f:f2:ee:2e:de:9a:6d:75:b0:
9b:e2:74:f3:67:4c:52:fb:38:10:16:87:c6:70:fd:
d6:e9:6b:f2:ff:44:98:dc:22:8a:f1:bd:6d:7f:4c:
4b:8b:bc:8a:81:36:29:0f:b5:5c:4c:47:dc:61:b3:
0c:e7:92:6d:f1:70:5c:27:93:0e:3c:3d:94:f8:99:
72:89:25:d0:00:ad:b3:0f:69:3b:27:98:e5:05:70:
08:a6:9b:ea:fc:50:b9:62:db:07:70:45:b2:76:83:
1c:ac:00:73:0d:5c:e2:ca:e4:ad:20:99:0b:4a:bb:
26:1b:fd:37:5f:fc:98:3b:9a:95:89:69:b9:49:61:
92:df:5e:94:46:67:2d:2f:28:62:80:41:eb:bb:18:
b7:3f:5c:20:a1:73:dc:17:28:4c:ca:c8:43:65:48:
0e:70:c8:99:e1:95:e5:30:e2:e1:ef:f6:25:9d:19:
e4:be:48:46:88:eb:00:bf:b7:12:00:eb:d9:00:43:
7b:25:30:4d:2a:97:3a:2c:d0:ac:2e:55:82:ed:f0:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:30:48:25:A1:76:6D:73:50:A6:61:04:60:71:A5:54:E1:A5:07
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/lCIwSCWhdm1zUKZhBGBxpVThpQc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.99.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:fd:b9:02:4d:28:c3:bc:82:ea:73:8b:98:b1:b3:04:29:b3:
13:c7:89:62:cc:79:e3:18:16:66:db:41:28:bc:e5:19:ad:c2:
b5:ec:06:fd:85:d3:55:77:40:f9:ae:52:00:af:6b:15:2a:25:
ec:51:30:78:42:c2:13:43:a0:09:7f:3c:9f:94:4e:dc:e7:52:
52:55:da:a2:5a:2e:00:55:61:3c:4f:ef:ca:ac:e0:b6:31:71:
fb:cd:d2:8e:8a:2c:bc:1a:8d:5e:49:81:b1:fc:46:12:d0:ce:
20:25:36:f2:be:26:c6:00:39:94:06:14:1f:b3:14:f1:a7:f3:
62:44:f7:c6:02:cd:e1:a1:59:8d:de:46:f4:e5:44:fe:8d:3f:
ad:fb:42:a9:70:df:c7:f5:26:ba:d0:e9:70:88:c3:2c:2b:4e:
0d:19:fa:34:d5:9d:ee:5d:ec:fc:8e:9d:3b:21:d1:74:c6:02:
dc:5d:b0:43:ae:bc:58:ea:54:2e:e3:06:c6:01:dc:71:fd:fc:
87:79:66:d1:3d:97:fd:67:3d:d4:38:4c:6e:e5:90:e3:19:79:
78:b3:c2:7a:b5:5a:13:53:98:8c:4b:c4:0b:85:a5:fd:04:5e:
a8:cc:9e:0d:bc:08:82:dd:ed:9d:ee:eb:2a:b7:8e:57:cf:53:
f5:98:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org