Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9TBiCOq0SMxlXy4Stu0-AMAN1wA.roa
File: 9TBiCOq0SMxlXy4Stu0-AMAN1wA.roa (raw, json)
Hash identifier: RFuuMONxaDx80YyGWMbVTt3KJqwcuae9W/GMGLXS9hM=
Subject key identifier: F5:30:62:08:EA:B4:48:CC:65:5F:2E:12:B6:ED:3E:00:C0:0D:D7:00
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9TBiCOq0SMxlXy4Stu0-AMAN1wA.roa
Signing time: Thu 15 Sep 2022 02:41:23 +0000
ROA not before: Thu 15 Sep 2022 02:41:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 210.240.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F5306208EAB448CC655F2E12B6ED3E00C00DD700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:4c:06:c2:31:25:a3:d0:cd:19:ca:72:a7:
f8:ad:23:ed:6e:df:cb:0c:d8:d5:51:53:89:8e:18:
10:76:e2:48:9c:ce:b1:80:93:89:50:29:41:1f:20:
39:4e:82:7c:8b:ae:df:bd:68:91:81:10:fc:76:98:
56:6c:70:9a:3f:08:f6:58:85:79:73:dd:79:4c:08:
40:d9:fc:1c:fb:33:7f:8c:94:ee:c7:80:e1:9a:ee:
b4:f0:dc:0d:58:bc:e5:d5:cf:7a:21:c9:90:9e:aa:
23:16:de:3a:da:c8:e3:ef:e8:d5:a4:d7:0b:29:9e:
f8:2d:3b:84:61:aa:6a:f3:c3:ba:33:d0:b6:7b:84:
1e:86:71:de:60:ad:3a:a8:9b:cc:84:36:f8:67:b1:
25:31:2f:e1:11:27:73:42:6f:f8:0c:d8:be:d3:0f:
dc:d8:9a:31:f8:8a:35:dd:34:d2:24:8d:70:5b:de:
8c:02:4b:1f:9a:3f:b1:56:73:7b:52:9d:a0:91:8f:
ad:90:6d:23:e5:29:66:09:f5:91:4e:40:30:5f:bf:
33:03:c0:49:c0:3c:76:a8:78:10:bc:75:f8:a4:9c:
14:98:f2:5e:04:b5:f5:90:a5:bc:8e:1d:d9:89:16:
3e:4b:23:4f:e6:12:fd:ad:53:44:0c:ab:11:c1:bb:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:30:62:08:EA:B4:48:CC:65:5F:2E:12:B6:ED:3E:00:C0:0D:D7:00
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9TBiCOq0SMxlXy4Stu0-AMAN1wA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:4b:27:2d:5c:cb:f4:d6:a8:26:1b:df:17:35:5c:ed:41:00:
32:93:98:83:50:52:88:67:09:b0:e2:4d:1e:64:65:60:34:f9:
15:a6:50:de:5f:72:49:70:e7:d3:13:d9:ad:75:17:b1:67:2b:
a2:d9:95:01:ef:1c:c7:ba:f6:13:41:26:b1:93:db:6c:d7:b1:
7d:d9:cd:ac:8e:d4:23:eb:c5:5e:60:9c:6a:25:5f:c8:be:62:
6a:6f:1e:46:75:a7:70:ca:42:9c:d0:f8:79:86:47:76:d2:83:
f3:57:ae:bc:28:22:db:8e:22:f9:93:b6:02:16:cb:b9:27:53:
29:6f:38:56:a1:b5:0e:7f:cc:06:10:4e:8e:c4:b6:25:1e:94:
f6:ca:a9:00:65:1f:d2:30:d7:00:66:24:b4:48:57:73:87:f3:
27:a8:ff:f9:3c:45:8c:16:08:38:a6:92:17:4c:1f:3a:58:8d:
ea:47:74:ec:1f:e3:92:d2:5a:dd:4b:1b:cf:e0:d3:0d:6a:35:
8e:20:9c:97:8f:1c:cb:e9:1a:53:f1:99:3d:54:2c:b9:b0:76:
bb:d9:5a:a2:5d:f8:60:f4:2c:60:68:b3:14:78:1d:38:0e:5d:
6b:0b:8c:03:7b:5b:5c:1d:84:7b:c4:f1:0b:f2:f3:43:79:d1:
6d:c4:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org