Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5GA6r5h2cM_1OzjZH3YYIJ86Ljw.roa
File: 5GA6r5h2cM_1OzjZH3YYIJ86Ljw.roa (raw, json)
Hash identifier: A65yJuLITXp9C6XI2BE6uDM0fCnMzLy5rwzDPcbSwLU=
Subject key identifier: E4:60:3A:AF:98:76:70:CF:F5:3B:38:D9:1F:76:18:20:9F:3A:2E:3C
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0A9B
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5GA6r5h2cM_1OzjZH3YYIJ86Ljw.roa
Signing time: Wed 29 Sep 2021 02:41:26 +0000
ROA not before: Wed 29 Sep 2021 02:41:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9916
IP address blocks: 140.113.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 02:41:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E4603AAF987670CFF53B38D91F7618209F3A2E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:72:ca:45:e9:e3:87:91:01:5f:08:a7:85:
66:ba:a6:9b:30:d2:1e:d2:c7:79:c3:28:c6:aa:d5:
7a:bc:ca:10:7c:42:fd:9c:9b:66:70:a8:88:f1:46:
f9:2a:20:9a:72:6b:c5:c3:a3:aa:9b:dc:aa:65:da:
8c:fc:8c:35:55:a1:c2:c2:47:d5:aa:ad:5a:37:99:
b6:f7:ae:7d:cb:6c:cf:21:31:18:87:d3:11:d2:c3:
11:06:ed:6f:62:3f:a4:c8:ae:e9:92:97:6f:fe:3c:
9a:7c:bb:22:f4:f1:6b:74:29:53:6e:61:33:d2:6c:
b2:eb:7e:cf:99:74:99:46:c4:de:64:41:61:4a:7b:
cf:32:b0:c1:17:ce:cc:8b:3d:a8:82:cb:39:51:04:
3c:e7:2b:e4:86:4a:9b:c3:10:2f:72:0c:6f:88:b8:
d3:61:40:6c:1e:a7:f0:75:05:9b:5b:21:5e:06:b1:
49:36:48:ac:df:49:85:15:a5:5a:82:4b:6c:70:de:
96:f4:83:70:e9:e1:da:9d:fa:ca:90:1b:d6:4d:25:
f3:d3:7b:51:9d:1c:ed:d8:0a:50:12:8a:0a:f2:50:
7c:8c:c7:c1:38:48:e4:a9:2b:ea:60:ec:58:d1:44:
64:97:4d:31:19:2a:89:b3:b5:b7:49:b1:ca:88:c2:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:3A:AF:98:76:70:CF:F5:3B:38:D9:1F:76:18:20:9F:3A:2E:3C
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5GA6r5h2cM_1OzjZH3YYIJ86Ljw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.113.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:c0:dc:f1:1d:3d:c4:31:35:1a:e6:5c:c8:63:44:c9:c8:dc:
0c:f6:a4:cd:b4:94:33:9c:d3:f3:58:1c:8c:3f:02:3d:58:5b:
f5:7f:35:89:c1:f0:95:98:0d:1d:f8:b0:02:e5:e3:53:18:b3:
46:24:bf:8e:44:96:52:55:b2:b6:de:36:69:ba:af:2a:c8:52:
0a:48:8e:90:bb:22:ec:28:d5:f2:e6:a8:c3:8e:68:13:73:a8:
e9:ac:43:f3:97:a7:43:79:31:54:73:fa:91:3c:7c:02:87:c4:
56:cf:c3:5d:31:c0:62:37:83:04:cf:ee:81:51:cb:b6:d2:a3:
44:ab:42:6c:59:29:b1:77:78:c4:31:f4:cc:6d:e5:be:b3:72:
91:e0:31:b6:e7:e2:f3:1d:ac:83:4d:36:cc:a6:3f:f5:71:6b:
d2:a1:0a:03:37:f9:7d:d4:90:2d:fd:3c:0d:4c:8f:0f:cb:9e:
e8:95:eb:2f:f3:9a:10:33:be:31:f8:72:d0:a9:d1:4f:0d:45:
33:0c:4d:6b:c6:6c:72:77:10:85:2a:99:f1:5b:d1:d2:e9:59:
74:a3:05:6b:29:5f:8c:c2:1b:d9:53:25:5c:4b:88:e2:1f:00:
8b:21:7d:82:79:10:54:08:b1:4e:92:3a:a7:20:b0:62:04:da:
a4:53:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org