Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Ly8u_QtNmLUO_TB3V6ILXvesiEo.roa
File: Ly8u_QtNmLUO_TB3V6ILXvesiEo.roa (raw, json)
Hash identifier: dpJwiEjDj3T5no3Pf8RT+IUCQGBMpBXkOJ05zSBKh6A=
Subject key identifier: 2F:2F:2E:FD:0B:4D:98:B5:0E:FD:30:77:57:A2:0B:5E:F7:AC:88:4A
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0B8A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Ly8u_QtNmLUO_TB3V6ILXvesiEo.roa
Signing time: Thu 15 Sep 2022 02:41:15 +0000
ROA not before: Thu 15 Sep 2022 02:41:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18420
IP address blocks: 140.115.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 15 02:41:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F2F2EFD0B4D98B50EFD307757A20B5EF7AC884A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:f6:67:9e:07:5b:d2:7a:c4:e7:3f:1a:bb:
e8:31:59:9b:7d:b2:8b:a6:cb:9c:09:43:a1:03:4a:
33:a9:af:92:05:fd:cf:22:9c:f1:9e:37:c7:5a:2b:
54:b6:2b:9e:90:b5:b0:2d:ab:b1:83:5c:8f:47:6e:
b8:e1:a1:e5:d3:01:fb:a2:24:58:02:64:33:68:2d:
0c:d7:73:2f:c0:d3:58:72:dd:d5:77:a5:4d:4c:d2:
3f:df:88:a3:b5:6a:ab:09:32:7b:b2:cd:28:e7:23:
22:0a:89:9e:e7:e0:49:6b:09:43:b6:ab:94:f6:fe:
b9:65:ee:d6:4e:3f:f4:ee:a0:f6:75:2f:10:b5:29:
59:f8:d9:5c:e1:18:c5:fa:db:70:eb:99:ad:95:6a:
d6:b3:72:26:27:60:e0:80:2f:67:97:f5:24:74:29:
10:ee:e0:97:a8:2f:50:48:2b:d3:21:43:16:6a:46:
fc:cb:86:24:d3:4a:29:95:4b:99:65:a1:96:2f:3e:
30:d4:2b:f5:6e:d0:52:18:60:36:bd:cf:40:81:f9:
68:44:d4:1c:a0:eb:3c:02:90:c4:0f:ac:c6:16:98:
38:28:c1:11:c9:2d:eb:71:a6:43:5b:6c:af:df:48:
bf:6c:a8:c9:2b:ac:5e:50:8e:cf:d5:31:2e:bb:f2:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2F:2E:FD:0B:4D:98:B5:0E:FD:30:77:57:A2:0B:5E:F7:AC:88:4A
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Ly8u_QtNmLUO_TB3V6ILXvesiEo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:3c:eb:fd:65:0a:db:a2:0f:e6:32:e0:34:24:14:4a:d9:13:
51:18:a5:70:9f:46:45:c6:37:ba:4b:df:42:67:37:f0:16:56:
dd:71:c1:7d:34:92:ab:d4:ed:d6:5f:6e:94:03:c0:16:4f:02:
00:d1:30:0d:91:16:5a:35:2a:77:10:e6:99:8b:9c:18:b2:40:
b3:0a:07:fd:0a:cd:07:46:a8:d5:b7:64:6f:89:40:0a:4e:65:
a2:a4:f4:ff:a3:4f:69:cb:ba:05:b1:b1:01:a0:20:7d:f9:42:
53:01:74:f2:eb:4c:6e:8b:9c:6a:3f:dd:89:d5:89:dd:52:b1:
62:7c:8a:cd:f6:11:e4:d5:a4:f8:f0:4f:05:9b:c4:6f:b2:30:
40:24:ae:07:77:c9:4b:b3:2c:00:99:a9:2f:ea:94:db:7d:0d:
60:60:60:55:1f:cd:a4:06:e6:d7:84:cd:75:20:dd:ad:16:0e:
9d:6c:37:28:76:c5:c5:60:79:5a:af:84:00:9a:dd:73:5e:d4:
65:3c:c7:15:72:79:76:9a:ea:4a:9a:2f:99:68:f8:9b:b2:2c:
b9:06:9b:79:e1:54:06:6f:cd:78:dd:34:4b:c2:f6:b9:15:7d:
07:43:7a:45:14:51:c2:0a:4b:89:b4:35:83:23:0a:2e:bb:f9:
7a:ea:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org