Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4yztHcRRRzGDvlxEfKzHc9F9FhM.roa
File: 4yztHcRRRzGDvlxEfKzHc9F9FhM.roa (raw, json)
Hash identifier: VP3tN+Ztv99lFim5zEtWhi9BK5LNWxkh+/bBJpi75aI=
Subject key identifier: E3:2C:ED:1D:C4:51:47:31:83:BE:5C:44:7C:AC:C7:73:D1:7D:16:13
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 07C9
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4yztHcRRRzGDvlxEfKzHc9F9FhM.roa
Signing time: Tue 29 Sep 2020 10:06:53 +0000
ROA not before: Tue 29 Sep 2020 10:06:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 192.83.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 10:06:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E32CED1DC451473183BE5C447CACC773D17D1613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:9e:3f:e5:6e:33:3e:be:94:c0:24:83:56:
dd:85:51:69:e8:96:69:2b:91:40:92:20:fa:7f:be:
e2:27:e7:dd:3c:01:bc:2b:6a:d3:91:d7:50:b2:ef:
28:a1:ca:b6:a8:11:c4:77:1e:e5:96:ac:6c:1b:b4:
d2:8e:f3:8d:d0:d4:3d:9c:ea:10:96:e1:2d:6c:e3:
87:49:00:1b:36:de:41:30:d6:00:f2:1b:c3:8c:1f:
7b:2e:84:46:c2:a7:c8:0d:17:90:71:f3:0a:5c:73:
ea:15:9d:20:f2:30:56:c1:d5:39:1e:be:a1:27:29:
8d:a9:0f:ef:b9:9f:4e:46:8f:35:11:50:e4:a1:82:
fa:99:cc:e0:d0:0c:9c:57:23:58:59:e0:54:16:92:
82:69:3c:5b:69:b6:14:d6:57:b9:6d:b6:4c:ec:09:
20:f8:40:86:a7:72:5f:6e:3a:81:c0:62:81:63:6a:
b2:c8:81:bf:72:f3:8c:6f:9d:a5:43:9e:e1:c0:b6:
6b:ba:de:3b:d5:d8:1b:e6:89:40:18:99:c9:03:25:
8b:42:ca:c7:77:a2:bb:ea:31:93:af:4c:70:88:01:
0d:3f:90:e0:4e:0c:46:40:a4:c2:d5:b0:3d:08:75:
81:6b:80:0d:0f:bf:57:60:50:3e:61:90:90:62:9a:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:ED:1D:C4:51:47:31:83:BE:5C:44:7C:AC:C7:73:D1:7D:16:13
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4yztHcRRRzGDvlxEfKzHc9F9FhM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.192.0/22
Signature Algorithm: sha256WithRSAEncryption
10:67:19:e9:ce:20:ce:ca:97:91:83:f0:4d:4e:ab:f4:fd:e1:
21:fc:5b:7e:80:43:4d:e0:d1:8d:f5:d4:31:27:dc:99:c4:b1:
e6:0b:4f:a9:98:3e:74:af:c1:7f:3e:e2:54:62:03:3e:d6:7f:
59:07:0a:7f:3a:8b:0e:a9:0f:cf:6b:af:7c:8a:6c:b9:d5:d6:
c6:96:28:64:f3:2e:09:e6:6c:a9:70:b0:bc:af:ac:c2:5c:0d:
bf:86:84:ae:53:d4:f7:6d:ec:32:32:1c:e1:de:38:15:74:1a:
00:46:1b:47:e3:66:c0:91:77:af:81:4c:08:43:05:41:8a:f0:
90:29:c9:97:e8:b5:7b:66:f1:e1:0f:bb:39:ac:fe:d8:05:5c:
fe:39:bd:f8:c3:e4:1b:b8:0f:e2:83:05:3f:ff:08:c0:cb:85:
a4:a6:0c:19:05:5f:8f:7c:3f:a8:f7:13:cf:dd:0e:ff:d9:23:
d8:fc:93:77:d6:09:d2:24:aa:cb:9a:05:03:c2:6e:2d:31:0b:
33:73:1e:65:e7:73:fe:58:23:c9:fe:f0:99:7d:2f:a9:17:e7:
5f:06:1e:22:3d:b9:ee:ee:17:e5:00:44:e2:29:f2:52:56:fb:
8b:eb:fc:6c:4c:8d:fb:70:63:cc:bc:d6:79:4f:5c:f2:64:b2:
5c:d5:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org