Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/BEqqtRu-EW90p0qGZJha9FBswMI.roa
File: BEqqtRu-EW90p0qGZJha9FBswMI.roa (raw, json)
Hash identifier: exeTKmPzBu2WV7fkUo/FApXQ+ezcn4bCEfiipQ4rL0E=
Subject key identifier: 04:4A:AA:B5:1B:BE:11:6F:74:A7:4A:86:64:98:5A:F4:50:6C:C0:C2
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09C0
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BEqqtRu-EW90p0qGZJha9FBswMI.roa
Signing time: Sun 07 Feb 2021 12:38:40 +0000
ROA not before: Sun 07 Feb 2021 12:38:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18047
IP address blocks: 120.127.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:38:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=044AAAB51BBE116F74A74A8664985AF4506CC0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:3c:64:eb:a4:29:8e:09:5b:56:ef:bf:e0:
ff:30:f6:06:13:eb:84:4c:52:e5:3c:3f:b1:02:1f:
d0:50:0f:5e:c6:b9:84:68:02:c3:e0:75:88:a8:fa:
1b:f8:7f:87:61:62:e6:6c:fb:17:7a:5a:f7:65:50:
c4:aa:11:76:e9:e7:95:90:56:e0:1e:4c:5d:ff:43:
17:71:e0:6b:24:32:8a:4a:cc:c7:bd:d5:b9:02:ba:
cc:ad:61:c7:dc:43:b7:bc:d4:51:09:18:f6:c1:8c:
d1:8f:14:61:da:bd:39:95:70:a5:77:36:63:89:e9:
10:4e:68:be:89:41:7f:39:1f:dc:88:7b:34:0c:b5:
91:fe:4e:0e:be:2c:31:12:03:c3:31:f1:b2:7a:d2:
7f:38:82:b0:a5:d1:7c:9a:55:04:0f:24:38:39:48:
85:84:a2:86:a2:7d:47:fe:2d:26:a5:b4:ce:c2:5f:
28:47:4e:64:c5:f8:8e:08:b0:51:7f:73:a0:93:1d:
a9:a3:63:cb:c9:a6:64:40:73:c0:42:db:52:40:28:
fa:67:a1:18:27:94:fc:67:e5:79:29:b0:0f:30:73:
14:c3:d8:50:fd:d3:0e:f4:84:a7:7d:ff:a2:89:b6:
3a:58:80:ef:8f:38:68:fe:5c:b3:84:1e:cd:42:f4:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:AA:B5:1B:BE:11:6F:74:A7:4A:86:64:98:5A:F4:50:6C:C0:C2
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/BEqqtRu-EW90p0qGZJha9FBswMI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.127.160.0/19
Signature Algorithm: sha256WithRSAEncryption
34:96:a1:90:39:67:cf:b0:b4:b6:f4:73:ee:51:16:1a:94:b5:
0c:fa:1a:5a:12:21:41:57:fd:6f:c3:97:01:65:e9:6f:c4:cf:
15:53:cd:7b:c7:12:4e:ac:b5:90:55:08:bb:cd:ca:9f:97:cb:
05:d9:e4:bf:83:68:fb:a8:ea:1c:c9:89:3f:11:ae:07:13:57:
3d:ae:80:1c:cb:8c:39:44:6e:18:62:15:6a:bd:43:23:4b:24:
cf:c6:82:71:af:67:8f:a1:f9:60:bb:ec:bb:55:8f:d1:34:3c:
bb:51:28:d0:94:82:21:88:e7:d0:33:1e:c9:80:1e:42:2f:ce:
3b:31:f9:c5:42:2b:4d:b2:5d:74:e9:28:b3:b3:81:04:43:76:
c4:78:d6:49:0e:b2:6e:ff:8b:5c:df:7b:ed:a7:e0:bd:4d:5a:
ff:d9:0b:d6:20:06:01:db:2b:23:1d:98:d9:0e:6e:7d:91:9d:
47:c3:a3:13:87:58:2c:5d:56:24:18:83:be:99:5a:e5:8a:00:
08:69:1b:68:98:ed:a4:0e:81:e9:6b:b7:60:46:03:6f:4e:77:
91:aa:c2:5d:e5:3b:de:54:03:9f:ff:4b:7b:8d:23:bb:6b:59:
e2:49:81:88:19:8c:6c:89:9b:2e:a6:f4:23:ab:6c:0c:73:df:
29:e8:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org