Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/N-Fcc3C0J2QDyn7O2uhvW--cqC0.roa
File: N-Fcc3C0J2QDyn7O2uhvW--cqC0.roa (raw, json)
Hash identifier: iVsdl+O5Qisfbz0yh41UhH6fWuM7NUjthcyX4iGskTs=
Subject key identifier: 37:E1:5C:73:70:B4:27:64:03:CA:7E:CE:DA:E8:6F:5B:EF:9C:A8:2D
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/N-Fcc3C0J2QDyn7O2uhvW--cqC0.roa
Signing time: Thu 15 Sep 2022 02:41:22 +0000
ROA not before: Thu 15 Sep 2022 02:41:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38844
IP address blocks: 203.68.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=37E15C7370B4276403CA7ECEDAE86F5BEF9CA82D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:60:0b:52:12:5b:30:fa:6d:2e:8d:a1:03:
ac:f7:dc:c0:0e:c1:ce:01:99:d2:a3:f5:d6:c9:8b:
30:1d:af:29:44:49:d5:c3:6e:71:01:0b:ea:d5:95:
2f:7b:7d:1a:2f:e2:37:33:a1:16:29:9d:0c:b2:df:
00:41:49:f1:cb:8d:36:74:80:0f:13:a8:8d:09:c7:
91:0d:ea:4d:17:f3:c9:4d:19:77:09:9e:af:d3:de:
07:26:b5:29:52:30:05:7c:f0:d1:ee:13:44:7d:7f:
c5:3c:3d:19:a3:19:af:13:a4:fb:0d:c1:e2:c7:ae:
22:ae:21:01:62:71:45:cb:29:e6:a9:53:d5:5f:7b:
68:de:16:5e:0f:55:60:f5:74:dd:4a:3b:a5:60:11:
58:68:29:da:e6:29:05:eb:c1:5e:d5:f0:36:9b:e6:
20:cb:89:2d:b9:17:c8:ed:37:7b:37:36:ad:b6:41:
34:40:53:ec:6d:33:b0:0b:01:c6:50:dd:25:21:a2:
b3:31:11:9e:81:c6:3a:2e:b5:cd:75:29:68:7c:55:
c9:cd:5c:fc:08:18:d7:b5:f6:8d:da:e1:8a:8d:66:
71:12:e9:6d:07:74:33:a6:61:db:d8:28:56:cd:de:
bf:72:9a:6c:ee:e9:5c:6b:3f:cd:99:09:a9:7a:59:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:5C:73:70:B4:27:64:03:CA:7E:CE:DA:E8:6F:5B:EF:9C:A8:2D
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/N-Fcc3C0J2QDyn7O2uhvW--cqC0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.68.168.0/24
Signature Algorithm: sha256WithRSAEncryption
64:86:7c:ee:b2:cf:1e:4c:1b:5e:42:84:06:de:9d:55:d4:22:
4f:bd:2f:44:3c:66:d9:45:fe:d5:04:32:ef:61:66:fd:5b:37:
9f:b0:fc:1b:c8:ff:21:e4:fc:17:22:04:84:e6:db:1f:f9:de:
3a:5a:3a:f7:30:0a:a4:6e:b2:ae:12:c8:1a:05:2d:6e:ca:db:
20:49:9b:54:28:fe:17:42:5e:ac:5c:04:7d:0f:e6:a7:d7:be:
3d:ab:b4:4a:3c:3d:a6:01:38:3b:55:04:65:db:ba:bd:d8:b5:
c8:9f:2f:58:70:73:b1:de:27:3a:df:c8:19:81:e9:e0:8f:54:
1c:a2:a6:17:cf:66:57:d8:cf:24:d3:da:09:ed:cb:fa:b6:7d:
8d:e5:71:ec:40:14:0d:a5:d7:f2:e8:82:14:33:66:b7:f8:3d:
d5:6c:e2:5a:93:bd:c5:10:bf:a9:be:12:3b:89:b6:71:e2:d4:
30:a9:b9:72:4e:1c:4e:9d:2f:5d:b2:64:c9:06:56:a5:c8:f0:
45:32:18:1a:c3:51:74:58:81:93:0a:40:ca:26:9a:04:9f:3b:
68:be:ea:d5:5d:8e:0a:6e:d8:87:ff:45:72:4c:0c:d4:3e:b5:
1a:e8:78:42:d1:c4:9a:75:ac:3f:c1:cd:78:5e:63:85:e2:cb:
a4:af:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org