Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/GxJ-9rSitKyXOW0fwiYhpCOTlYI.roa
File: GxJ-9rSitKyXOW0fwiYhpCOTlYI.roa (raw, json)
Hash identifier: 0SHiCB8GKFrLTnRWWjVtdXnBAoxhRA8DlJuqItf/yQ8=
Subject key identifier: 1B:12:7E:F6:B4:A2:B4:AC:97:39:6D:1F:C2:26:21:A4:23:93:95:82
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GxJ-9rSitKyXOW0fwiYhpCOTlYI.roa
Signing time: Thu 15 Sep 2022 02:41:14 +0000
ROA not before: Thu 15 Sep 2022 02:41:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131150
IP address blocks: 163.32.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B127EF6B4A2B4AC97396D1FC22621A423939582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:5c:d4:d7:86:99:5e:a0:2e:d9:9e:4f:94:
f0:47:cc:ac:a1:f6:ea:e2:97:c2:a1:a6:2b:34:7f:
87:9e:2b:d0:24:b3:15:e8:c7:7d:60:6f:69:d2:b5:
b9:e1:77:a6:34:0c:5a:0b:80:f5:d0:0f:1d:97:35:
6a:4a:72:78:9f:d7:13:0e:68:1b:29:22:6c:1e:78:
e9:09:6f:51:f3:43:0c:14:f6:d1:13:ad:28:e1:f6:
9e:01:d4:96:62:e2:79:f0:03:28:4e:90:4b:e0:f0:
4e:a4:f4:82:a4:51:5d:dc:16:00:7d:d9:5a:c5:b3:
b2:95:25:2f:b1:39:35:81:2b:31:fb:3b:77:53:3d:
28:c2:aa:e3:7f:0a:79:62:b6:67:9c:46:dd:bb:21:
a2:7c:b5:98:c7:fe:31:65:27:67:06:56:d3:c3:85:
37:80:22:7c:8b:5b:a0:e6:87:35:2e:ad:dd:94:02:
31:8d:57:d7:9e:f3:16:81:12:f0:bc:69:69:19:ea:
51:f8:97:3e:53:08:00:20:f0:c1:1b:2e:48:a1:20:
f8:0e:36:9e:31:8b:98:26:aa:4e:86:e8:56:69:87:
45:75:e7:8e:96:a4:ff:a9:e5:5b:f4:d0:d2:75:f9:
76:19:cf:ea:4e:f4:74:e7:73:f0:61:e9:93:fe:00:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:7E:F6:B4:A2:B4:AC:97:39:6D:1F:C2:26:21:A4:23:93:95:82
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GxJ-9rSitKyXOW0fwiYhpCOTlYI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:fb:6f:41:bc:b6:d2:ce:5c:2b:61:d3:a8:8c:a6:56:22:93:
89:37:0c:14:0c:19:21:61:cc:fc:d4:4b:c6:db:42:9d:57:b4:
ab:6e:7d:76:6b:2d:b2:76:d8:2b:bd:23:8a:fa:3f:a2:a5:7e:
cc:70:be:bb:65:04:fd:99:18:95:36:10:54:ff:5d:75:aa:64:
81:48:b3:a7:4f:e7:a7:42:ec:ba:89:3b:64:a8:37:db:e6:9e:
ab:98:f0:2d:26:12:19:dc:7f:a5:ce:89:6e:4f:83:04:1b:61:
e7:d7:ce:28:d0:64:93:d4:41:bd:8a:c3:27:15:18:98:ed:d9:
6e:2f:9d:e6:07:24:f1:ac:c5:bc:31:14:c4:61:6a:11:78:4e:
a7:8d:cf:d3:95:ea:6a:e6:11:e0:41:86:db:2f:0c:0d:83:a9:
b7:f9:63:d9:11:a5:0c:8d:0e:17:e3:b1:3e:54:1d:9c:55:c4:
fc:11:3b:bc:7c:dd:c6:9a:c0:bd:78:82:83:e2:e3:05:b5:cd:
ff:bf:66:48:21:29:55:68:d6:05:d5:03:86:9c:cb:ca:e4:67:
05:fe:e3:7f:33:d2:1a:47:86:bc:07:94:6f:cc:d2:21:ca:2b:
c3:c8:c4:d9:75:cb:38:69:b2:5d:65:bf:f4:f9:b4:55:fd:06:
d3:08:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org