Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LUL_CCFUV4jKa6Mj6rlAPmz-iJs.roa
File: LUL_CCFUV4jKa6Mj6rlAPmz-iJs.roa (raw, json)
Hash identifier: 1dxk0gp3gLedCC2SgIzOkxIGUTdimmlgs9sj8Ulpmyg=
Subject key identifier: 2D:42:FF:08:21:54:57:88:CA:6B:A3:23:EA:B9:40:3E:6C:FE:88:9B
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 09A8
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LUL_CCFUV4jKa6Mj6rlAPmz-iJs.roa
Signing time: Sun 07 Feb 2021 12:39:31 +0000
ROA not before: Sun 07 Feb 2021 12:39:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 192.192.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:39:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2D42FF0821545788CA6BA323EAB9403E6CFE889B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:0b:c0:c0:c3:0e:06:d2:6e:e1:6a:03:e5:
12:b1:ed:af:84:40:9d:3f:f7:8f:1d:11:45:fa:9e:
cb:15:ac:3b:7b:98:ba:91:a7:c8:0c:5d:78:7e:df:
76:11:46:b4:3d:2b:e1:28:a7:fe:1c:7e:06:1b:52:
05:4a:01:6b:6b:bb:95:30:43:5d:05:cc:55:05:f7:
ca:d6:42:b9:8f:1a:de:45:ec:e0:c3:78:8b:fe:dc:
5d:f5:98:10:6f:3c:2f:91:29:0d:5a:27:f0:f9:27:
86:4d:cc:51:e4:1d:12:6e:e3:c1:a9:c4:2c:55:8d:
42:02:04:45:72:54:b5:03:da:34:57:ab:c9:52:57:
c2:2b:71:15:f8:85:90:4e:33:ad:01:e1:90:40:03:
ac:1d:69:bd:54:57:32:e4:cd:c9:15:16:e6:08:be:
3a:fe:55:5e:63:8c:f9:37:17:2a:60:9e:85:a4:68:
39:34:f0:cc:bc:e3:88:a3:9b:51:3f:f0:70:79:e3:
34:1e:05:82:e8:3f:4b:bb:d8:f5:31:e3:16:72:34:
f5:61:ce:39:74:a8:e9:c0:74:5e:a4:42:ef:8c:77:
0f:1f:2f:94:6a:75:2f:07:e7:f5:a1:f4:10:30:22:
6d:09:89:20:56:33:d7:94:8c:05:09:9d:b6:3d:cb:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:FF:08:21:54:57:88:CA:6B:A3:23:EA:B9:40:3E:6C:FE:88:9B
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LUL_CCFUV4jKa6Mj6rlAPmz-iJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:48:ad:0b:d7:2f:7c:9a:6b:94:07:79:d0:fa:9a:da:36:fb:
d4:43:5d:eb:9c:06:1d:eb:48:fc:d0:26:96:2c:4b:2b:28:02:
a2:ff:86:f5:08:b1:63:19:50:4d:98:5e:33:95:6e:00:04:43:
b3:5f:8a:a5:82:93:a8:9f:34:23:8f:5e:7a:17:32:73:bd:eb:
25:41:70:f7:1c:13:eb:56:a9:95:f1:a3:c5:18:7a:bb:46:52:
5d:fd:ac:25:e4:2c:50:b1:22:6d:fe:a0:84:8e:5f:f8:85:62:
96:e7:d0:85:9e:15:5a:67:ae:79:8c:e1:cf:b3:fc:9c:bb:5b:
19:93:5b:2a:76:eb:67:80:4d:52:f3:41:16:47:5e:19:e0:7d:
19:6f:8b:3a:88:37:bf:8f:a2:73:ad:e8:81:a6:fc:05:6e:1c:
fb:ce:79:23:ad:42:43:28:ac:13:13:18:39:cc:c5:2e:98:2c:
a7:6e:75:4f:02:1c:21:9b:f7:b9:e3:f1:cf:fc:98:b6:c0:42:
27:37:0b:bb:e3:60:b5:8b:63:a4:66:27:3a:df:21:a1:8c:c8:
26:28:f1:c1:36:99:53:37:f0:b2:e9:ec:ef:a3:55:00:0e:23:
07:d1:e7:0b:ce:69:11:24:ac:0d:68:c4:04:00:4f:1c:09:b9:
e5:2b:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org