Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/E7Cnwwd_hbPUYOOubOEOq6_uKZ4.roa
File: E7Cnwwd_hbPUYOOubOEOq6_uKZ4.roa (raw, json)
Hash identifier: mxIRovtBdkPk3bjnVvpAWc/t+tjHbfQ2W2ck6SaKL8Q=
Subject key identifier: 13:B0:A7:C3:07:7F:85:B3:D4:60:E3:AE:6C:E1:0E:AB:AF:EE:29:9E
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 097A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/E7Cnwwd_hbPUYOOubOEOq6_uKZ4.roa
Signing time: Sun 07 Feb 2021 12:38:42 +0000
ROA not before: Sun 07 Feb 2021 12:38:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9264
IP address blocks: 140.109.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:38:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=13B0A7C3077F85B3D460E3AE6CE10EABAFEE299E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:e9:82:93:50:c1:aa:54:c6:69:6c:ef:ba:
d5:a6:b6:0c:45:ce:d2:c8:d5:7c:58:88:2b:42:25:
72:ba:bf:5b:b8:71:2a:84:b4:53:d1:fd:ea:63:d6:
08:b8:dc:96:5d:ae:56:10:4c:d6:8b:a5:54:b9:38:
9c:83:fa:55:3c:b1:4d:d8:b2:62:ee:33:df:07:22:
66:9d:f4:c9:f5:cf:5a:0a:9a:8a:cd:b6:60:06:51:
fb:9d:54:57:6e:d1:93:14:a6:71:ef:55:34:7c:9f:
2c:db:a0:4d:04:46:5d:97:6a:8f:6d:98:69:d4:88:
7c:48:35:fc:28:18:e0:c9:76:c5:e6:de:4d:5e:cb:
b7:92:d6:70:d6:ea:d9:1f:65:0d:3a:7b:29:7c:fc:
ab:1e:03:c0:ff:78:fc:b1:14:3c:fe:da:5a:73:97:
67:31:73:6c:9f:1b:73:e0:5f:a8:db:c1:64:85:c2:
55:ac:c7:6d:03:79:51:4e:27:0f:ee:45:4a:52:4f:
ec:92:af:f1:a3:57:77:f0:b4:18:f9:1e:96:16:14:
87:54:c4:92:64:6d:13:62:fc:a9:3a:6f:df:be:88:
f4:19:03:4f:b0:3f:79:b3:3b:d6:32:a6:fb:48:6a:
c0:ea:61:75:59:80:1c:cc:e2:fc:38:4e:c0:6c:66:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:A7:C3:07:7F:85:B3:D4:60:E3:AE:6C:E1:0E:AB:AF:EE:29:9E
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/E7Cnwwd_hbPUYOOubOEOq6_uKZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:fd:d7:b3:35:c1:3c:fc:29:4c:57:71:20:98:1d:f1:55:98:
6b:d7:73:7b:ea:1f:46:0e:12:04:5d:b2:a9:d7:d1:46:84:26:
5f:d3:34:c6:7a:71:b1:db:7a:39:e1:4b:d0:16:6a:9a:ed:b5:
92:f8:88:40:4e:93:67:66:51:3c:a0:6b:04:50:6e:36:16:50:
1a:eb:fa:16:74:61:0d:fd:24:07:3a:33:75:ca:3f:ee:42:05:
ca:36:82:96:48:49:db:5a:10:ca:05:4e:65:34:59:16:dc:ee:
5c:de:de:e7:fe:12:86:66:8e:5d:e7:34:84:15:01:71:7a:f2:
57:4b:25:b3:91:ef:01:36:e9:f1:81:fe:97:11:d0:af:9e:5b:
54:8d:b4:53:00:c2:64:b6:1b:2e:b2:f1:38:29:a1:43:a4:83:
8a:36:33:69:56:a9:6f:9f:d7:86:c3:e9:d1:69:28:c1:67:37:
4d:46:14:41:8a:c5:42:8d:d4:50:3b:4e:e4:fb:b4:81:fe:8e:
3a:de:55:0a:f0:fc:9a:1e:40:ce:95:fd:87:3a:dd:37:ff:50:
13:c3:52:fc:6c:9e:ac:c2:7f:d1:8d:06:d3:f1:28:f9:d3:87:
67:0f:f7:73:ba:6c:a2:6e:86:71:4c:1d:77:07:34:f6:94:95:
09:ae:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org