Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/HEX-qk1lkBSM8a8GBjotTs7NKq8.roa
File: HEX-qk1lkBSM8a8GBjotTs7NKq8.roa (raw, json)
Hash identifier: jjqcmfqqACmzx5C3NgxM8b8w/sf3zWkcdggOIePTZxA=
Subject key identifier: 1C:45:FE:AA:4D:65:90:14:8C:F1:AF:06:06:3A:2D:4E:CE:CD:2A:AF
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09DE
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/HEX-qk1lkBSM8a8GBjotTs7NKq8.roa
Signing time: Sun 07 Feb 2021 12:39:19 +0000
ROA not before: Sun 07 Feb 2021 12:39:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 163.32.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2526 (0x9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:39:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1C45FEAA4D6590148CF1AF06063A2D4ECECD2AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:94:e6:e4:38:f7:f3:0a:b5:58:7d:57:de:
50:45:a4:64:79:1f:33:11:c0:bf:19:17:80:d5:a9:
54:1c:40:be:46:17:00:45:4e:af:2d:84:6a:16:3b:
1b:a6:43:58:83:03:f2:f6:30:c0:79:d7:7f:3a:40:
a9:8e:04:39:25:a3:96:9d:60:24:f6:b3:2c:65:89:
b1:89:a4:3a:3d:b9:8b:c7:48:d8:e3:aa:e3:79:66:
f6:8b:1d:e1:60:66:a7:58:cb:50:43:dd:a3:9e:4a:
6c:58:ac:a3:27:37:b8:3a:9f:04:37:c7:61:f7:9a:
55:87:52:f7:c0:21:4a:81:13:0d:ee:6d:9d:0e:0f:
27:6b:a2:5e:46:6e:3d:ab:53:bf:fe:6e:c9:a4:b3:
b3:fc:c0:b1:aa:f1:3b:9a:e5:99:29:7c:3b:b3:1a:
d0:80:6f:47:c0:d2:f9:55:fc:ef:7f:28:35:89:bf:
5c:b2:df:03:07:26:ad:f6:dc:da:4b:c4:b5:34:d8:
d8:b6:b6:53:aa:10:4d:53:21:0f:68:60:6d:9f:ce:
ec:3a:83:35:97:a6:e5:a5:70:ba:10:af:cf:54:55:
45:92:0a:43:a4:e7:f4:5f:82:7e:87:fb:bc:f2:cd:
b1:02:1c:4e:ab:10:1f:86:da:de:b2:b7:a0:e5:11:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:FE:AA:4D:65:90:14:8C:F1:AF:06:06:3A:2D:4E:CE:CD:2A:AF
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/HEX-qk1lkBSM8a8GBjotTs7NKq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:0b:30:89:c4:f6:41:66:22:4e:4e:d7:76:07:80:ea:10:49:
30:41:a3:6b:16:44:c0:57:86:6f:a9:5b:7e:33:40:a7:95:14:
95:4b:4a:4d:6a:4a:ae:7d:37:a3:c1:35:f4:a9:09:99:08:e1:
eb:27:61:34:38:c0:21:fa:42:b1:08:af:08:e7:18:28:73:3b:
b4:42:3a:ca:1c:86:f0:f8:7e:cf:fa:04:5b:5f:d7:63:70:54:
3a:9c:99:b4:f6:e0:42:fe:99:f7:ef:fd:dc:f8:e6:18:52:3c:
93:f6:00:b8:04:ad:82:89:44:54:d5:ca:e9:7e:e7:b7:b2:23:
c3:ed:b4:cf:32:23:96:35:a5:7e:08:27:7c:34:17:c4:d5:ad:
4e:99:6d:93:db:e8:d4:9a:6a:e6:32:a4:bd:4a:8f:22:7e:49:
0c:6f:b7:6b:45:2d:a0:72:e1:50:74:35:3b:cc:8e:f1:bd:8b:
c4:b2:48:3a:22:90:4e:47:9d:f9:e0:b8:6c:a8:83:52:f4:ea:
63:7c:d4:57:fa:cf:9d:db:80:7e:7b:99:fc:2b:94:d1:5c:50:
17:e1:b5:f3:ce:d3:68:de:89:ce:08:b2:33:79:f1:1d:22:d8:
21:de:5a:21:63:66:db:0c:b1:aa:f6:27:a7:75:5d:d4:96:9a:
7b:df:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org