Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/-UHWpZkhspQiSvd4b0vK8Egj5K8.roa
File: -UHWpZkhspQiSvd4b0vK8Egj5K8.roa (raw, json)
Hash identifier: QMmQONGsh22wNGZRBAmZxuJIBIIyGT2G0ZVFDwVFcMk=
Subject key identifier: F9:41:D6:A5:99:21:B2:94:22:4A:F7:78:6F:4B:CA:F0:48:23:E4:AF
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/-UHWpZkhspQiSvd4b0vK8Egj5K8.roa
Signing time: Thu 15 Sep 2022 02:41:06 +0000
ROA not before: Thu 15 Sep 2022 02:41:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18185
IP address blocks: 120.117.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F941D6A59921B294224AF7786F4BCAF04823E4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:0e:33:bc:80:96:50:c3:e0:5b:cc:28:88:
d6:4e:91:3c:26:15:df:9d:66:61:de:26:7f:f1:a3:
d4:12:ea:d2:cd:9f:08:c6:5f:5a:d1:ca:2b:1a:23:
7e:ab:1b:ea:ef:be:88:7f:e0:bb:0e:d8:2c:9b:8e:
ed:3c:2d:0b:89:d0:10:a0:6d:b7:cf:77:e6:f0:88:
5a:60:02:5a:5e:ff:48:f4:99:3d:78:7f:54:95:1e:
27:56:1c:68:3b:f5:77:11:75:ae:11:3e:22:cc:0a:
87:0a:09:5d:3a:55:22:82:d6:8f:84:2d:d7:d9:60:
db:b5:a6:68:30:65:c2:f0:c1:5c:f6:e2:69:1e:04:
67:41:68:41:2e:2e:3c:4f:f9:ae:81:b7:ad:e3:90:
d7:1e:1c:31:22:13:eb:fb:6f:9f:f5:21:12:94:86:
30:a7:33:98:87:46:15:6e:e4:77:3b:2e:7f:b4:5b:
a1:43:87:47:f9:63:1d:0d:b7:d2:ea:e5:b9:5d:1d:
c5:30:19:f0:f9:af:70:37:6e:b1:3a:2c:d9:a4:bc:
fe:f2:3b:56:e8:2d:3c:87:8a:e6:38:36:ff:db:6b:
4e:ab:32:7d:4b:ed:91:3d:a1:b0:58:f6:f3:db:e8:
18:d3:df:31:39:f1:59:7b:10:87:a0:0c:e1:5f:48:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:D6:A5:99:21:B2:94:22:4A:F7:78:6F:4B:CA:F0:48:23:E4:AF
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/-UHWpZkhspQiSvd4b0vK8Egj5K8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.4.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f5:7a:58:28:45:f5:14:17:be:9f:72:ac:37:74:ee:bf:5b:
f4:a6:f4:f3:2f:21:01:64:02:c8:f6:02:91:e0:5e:2b:ca:93:
83:d8:68:a9:15:6f:73:58:f2:e4:7d:31:1a:98:5f:d8:40:27:
cf:db:95:4d:3a:47:79:46:75:a8:aa:e9:26:60:c2:67:ae:ea:
c9:ed:ab:dc:a5:ee:ac:da:dc:0f:5f:52:ab:6d:ba:2e:dc:22:
6a:b9:56:17:97:e5:7d:e0:72:dd:b0:2e:25:88:be:7c:fe:65:
4f:f2:9c:f4:ad:41:76:6b:3e:85:c9:19:82:6e:4c:82:55:5e:
63:79:f2:8f:2f:85:41:ed:39:3d:87:b6:2f:51:49:4f:70:76:
63:14:12:b1:c9:7f:bd:c7:12:7e:77:07:e6:3a:8f:25:dd:03:
ab:17:5a:e2:3a:7c:ba:9d:5e:5d:62:09:70:d2:0d:e9:da:d7:
7c:72:80:cb:32:65:8c:32:27:91:5f:eb:8c:a3:07:93:40:88:
b0:2f:8e:81:c3:ae:3c:60:d6:ff:65:5c:e7:c2:01:d5:b4:a7:
17:fa:ac:b3:32:df:90:13:42:c6:6a:81:03:b1:cc:92:2b:6d:
c3:f2:b1:b9:e7:de:ab:6a:8b:6c:cd:86:bb:1c:ea:09:bf:b3:
90:d0:e0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org