Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/CE5RaGmMNzyiirlv9dvJeHwhYwU.roa
File: CE5RaGmMNzyiirlv9dvJeHwhYwU.roa (raw, json)
Hash identifier: SckPXluPsGR9g8Jm69/2CuEfJtsnPouglawVMBCROic=
Subject key identifier: 08:4E:51:68:69:8C:37:3C:A2:8A:B9:6F:F5:DB:C9:78:7C:21:63:05
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 07CC
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CE5RaGmMNzyiirlv9dvJeHwhYwU.roa
Signing time: Tue 29 Sep 2020 10:06:53 +0000
ROA not before: Tue 29 Sep 2020 10:06:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38845
IP address blocks: 140.136.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 10:06:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=084E5168698C373CA28AB96FF5DBC9787C216305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:a4:27:ce:a6:46:13:75:e1:2a:a5:7a:8b:
09:33:40:d1:79:8a:f5:29:6a:a4:59:11:7b:6d:04:
60:d5:96:36:9e:ee:5d:98:f8:e3:1f:05:32:b8:5f:
58:58:20:2b:37:f1:4e:c9:99:f8:6d:04:80:4d:ed:
d0:8a:48:e5:e7:15:f8:99:17:ba:35:a6:1d:38:31:
1a:b9:76:1b:1f:c5:63:8a:17:a1:c7:17:4b:b6:4b:
4e:75:5c:d4:79:af:e8:3f:9c:ee:f4:64:45:c4:7b:
20:5d:e6:d0:e3:b9:90:a4:3e:38:98:fc:1e:05:4a:
6d:b8:0c:ae:ae:dd:3d:55:89:af:b2:a4:aa:fa:03:
9a:a4:a9:9b:31:e7:2a:53:74:f2:b5:06:d6:dd:67:
15:a0:e7:41:6d:df:3c:d3:1e:8e:34:b3:99:a8:38:
aa:bc:73:3f:77:f1:0e:6c:3a:6b:a5:21:f2:99:5a:
7e:e3:65:17:10:8f:2d:65:7d:77:19:f0:62:02:91:
fe:a5:d1:69:7f:48:46:99:1c:9e:1d:dc:d6:62:dc:
9c:59:bc:fb:9a:93:ab:4e:45:85:2e:0e:10:a1:93:
52:dd:36:2a:a3:b6:af:38:ca:3b:0f:2b:70:30:65:
ec:e6:9f:d1:e0:46:b9:40:d4:70:59:e8:61:ca:97:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:51:68:69:8C:37:3C:A2:8A:B9:6F:F5:DB:C9:78:7C:21:63:05
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CE5RaGmMNzyiirlv9dvJeHwhYwU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:96:09:64:d4:28:73:72:ce:53:3d:68:4b:9b:49:3b:52:4e:
30:81:27:49:90:71:1a:f5:33:11:12:59:c4:af:51:5c:a4:0c:
fd:92:72:57:93:f4:23:21:28:94:d4:f1:7a:1e:c1:2c:3d:43:
85:d8:e5:27:50:89:5e:f0:de:36:75:7d:a0:94:16:8c:a5:33:
4f:0a:f4:15:b0:19:ae:88:8c:0e:a4:d8:1c:d6:36:04:01:f2:
85:56:6e:a0:e4:9f:d6:25:72:27:8a:41:01:55:70:8b:c8:c9:
58:95:b6:f5:7a:d6:82:7d:5e:c8:1d:79:53:70:11:fb:4a:27:
a5:bb:8f:94:73:bb:45:ad:16:cb:43:fb:07:be:6e:d4:c3:39:
48:81:63:e4:8d:ad:f1:a4:df:34:95:d9:58:c0:a1:62:45:fc:
8a:3d:e8:ff:f8:2b:ee:5f:c1:bc:39:69:fe:58:a5:cc:6b:59:
35:01:46:92:90:10:ae:b4:70:b0:9b:00:9a:7e:15:7a:5c:c6:
8b:cf:ee:53:c7:68:59:65:80:10:50:20:77:5d:f3:22:c6:25:
b9:08:ad:94:07:a0:52:c5:13:ba:5b:6a:58:28:17:0a:46:b5:
e0:b8:5b:77:c4:62:f0:b3:69:04:f3:7a:71:f3:52:6a:1b:16:
1e:1a:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org