Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/CoSgwkxG0Bf7wxgOIIzv6-Xi-5M.roa
File: CoSgwkxG0Bf7wxgOIIzv6-Xi-5M.roa (raw, json)
Hash identifier: X8rsGLN4fHTOGTsJ22oxZHplc8+M6OqiYJl4z0fx2rI=
Subject key identifier: 0A:84:A0:C2:4C:46:D0:17:FB:C3:18:0E:20:8C:EF:EB:E5:E2:FB:93
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CoSgwkxG0Bf7wxgOIIzv6-Xi-5M.roa
Signing time: Thu 15 Sep 2022 02:41:07 +0000
ROA not before: Thu 15 Sep 2022 02:41:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18047
IP address blocks: 120.127.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0A84A0C24C46D017FBC3180E208CEFEBE5E2FB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:cb:d8:35:a6:70:a7:1e:bf:22:ba:f3:91:
ab:36:80:22:67:71:44:03:6e:5a:16:c4:a9:f8:0a:
d9:cd:99:e0:9e:69:15:b9:5d:72:f2:fe:96:74:5f:
ea:bd:52:65:73:bf:4a:b2:b5:db:bd:69:1e:82:78:
ea:ab:fa:cc:4e:81:0c:39:7c:c5:0f:55:45:1f:3d:
72:52:09:a0:5d:d9:f5:a2:4a:cf:e5:9b:0f:a4:30:
47:db:af:6c:8b:81:fd:8f:91:fd:f2:de:63:b2:e0:
0b:b5:87:c5:18:47:e4:25:0c:ac:0d:a1:41:22:af:
85:d6:53:09:72:20:5c:26:cf:8c:5b:cc:b4:51:74:
e9:1b:2c:41:ac:97:09:60:76:dc:14:42:c6:e8:85:
a1:a1:d2:66:9d:38:65:69:9c:98:70:22:ec:38:c9:
e0:72:82:c0:0b:0b:a7:d6:1e:26:8e:bb:fc:5d:ca:
0e:b9:1a:c3:d2:8c:7a:bb:f4:c0:7a:ad:e1:44:af:
15:2f:da:41:31:5e:24:f7:67:6b:69:1a:4a:7c:64:
05:b3:44:9e:ef:9a:8a:cc:47:7c:78:3c:2e:9d:3a:
c2:8c:1c:28:5f:7e:b6:21:66:21:99:58:bb:61:48:
57:c9:21:e1:28:bf:b1:01:2e:fc:bb:24:8e:a9:c9:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:A0:C2:4C:46:D0:17:FB:C3:18:0E:20:8C:EF:EB:E5:E2:FB:93
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CoSgwkxG0Bf7wxgOIIzv6-Xi-5M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.127.160.0/19
Signature Algorithm: sha256WithRSAEncryption
02:36:ef:60:3b:93:27:67:91:f1:ec:d5:27:4b:ef:2f:58:99:
e7:d7:72:24:2b:61:ec:af:81:f8:db:46:77:79:1e:8b:4b:2c:
7e:b5:46:ca:a5:dc:6d:08:28:cc:ac:04:59:5c:e9:8e:c9:4a:
a9:01:e6:2b:5c:ac:4c:ef:40:e7:91:c4:d7:1a:f1:82:10:5a:
e7:1b:81:15:04:33:05:af:92:7c:01:f2:75:7b:28:70:68:57:
ab:d3:bd:64:03:e9:1b:72:31:26:d7:08:48:5c:5f:33:98:49:
93:57:45:23:f4:bd:ed:d6:e0:3c:ad:b8:e9:01:26:d9:27:80:
55:0a:bc:fb:7e:5a:62:1b:99:fb:3e:e7:2d:92:18:41:3d:55:
cb:35:96:b7:f6:eb:71:b7:92:03:d8:30:8a:5c:1f:4a:17:42:
a2:55:3a:56:0f:53:3b:f3:a0:a4:3b:f0:a8:37:0c:10:07:03:
db:06:02:e0:a6:67:ef:06:66:7a:8f:4f:24:69:76:c2:29:bc:
81:05:b8:f1:1a:4d:a5:ff:65:e0:12:2b:64:72:00:88:08:f0:
c0:a5:ed:c8:fe:ed:73:c2:0b:af:e1:b7:57:9c:36:fb:4a:c6:
de:b7:aa:4a:7a:4a:22:29:0f:b6:32:2c:86:b8:82:0d:fa:da:
52:4b:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org