Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/N19kPj3uE1dlyfVQKkvVYdPd_y8.roa
File: N19kPj3uE1dlyfVQKkvVYdPd_y8.roa (raw, json)
Hash identifier: H0gYgHSRrzCSpODLbk2ONx9Kq+Zw7twtt9LL5jJsueo=
Subject key identifier: 37:5F:64:3E:3D:EE:13:57:65:C9:F5:50:2A:4B:D5:61:D3:DD:FF:2F
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 097C
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/N19kPj3uE1dlyfVQKkvVYdPd_y8.roa
Signing time: Sun 07 Feb 2021 12:38:43 +0000
ROA not before: Sun 07 Feb 2021 12:38:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24167
IP address blocks: 140.109.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:38:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=375F643E3DEE135765C9F5502A4BD561D3DDFF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:56:c5:90:bc:17:8d:e1:77:95:33:4d:e7:
64:26:50:3c:35:f9:4a:0f:0a:73:24:98:a2:44:35:
fe:53:8d:75:ac:2c:ee:af:56:02:3f:7e:6c:d4:cb:
c6:91:22:e3:29:e7:05:86:f4:8c:13:f3:63:ee:0a:
34:f0:70:92:01:f6:32:28:6c:7e:27:42:1b:4a:79:
ae:99:b8:9d:8c:7a:1b:be:28:8a:54:49:a0:0b:7b:
1d:87:d9:ea:76:ce:29:4c:56:92:75:80:6c:bf:b0:
e3:87:47:2a:3a:c0:79:f3:5d:ac:85:81:0c:39:bf:
29:87:3c:cb:8a:48:c1:87:08:3c:3a:80:fe:44:71:
da:ad:25:8c:f4:27:1b:2c:42:75:b8:d6:53:ce:ac:
de:bf:cc:82:c4:3a:4c:54:2b:3a:16:03:72:6f:63:
a8:7b:36:72:80:b7:b2:c5:e6:6f:44:3d:94:ba:c6:
09:b7:58:16:5e:dc:92:a7:ee:89:3d:8b:6b:5e:88:
fe:2a:ae:56:d2:f7:50:f5:0c:bc:e2:01:c5:81:ed:
39:a9:e5:94:0a:75:22:12:bc:4f:3c:a0:54:f4:04:
c7:a7:13:c8:62:36:24:c7:8e:bf:1c:c2:05:d2:e3:
75:22:84:f3:73:f8:51:ff:0f:59:50:71:2e:b3:ba:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:64:3E:3D:EE:13:57:65:C9:F5:50:2A:4B:D5:61:D3:DD:FF:2F
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/N19kPj3uE1dlyfVQKkvVYdPd_y8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.109.98.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f3:6f:74:39:fc:a7:af:3e:94:b1:ee:0c:05:87:b3:eb:af:
34:eb:9e:d5:b0:d5:1b:7e:30:ce:e3:3c:8a:e2:6f:57:c3:57:
59:e0:0b:d1:53:b3:17:5a:14:ab:ef:a2:e9:e8:f7:dc:91:3e:
f3:98:ac:a1:12:6f:3b:0d:77:37:ca:ac:ec:d5:6f:26:29:28:
b4:bd:c0:63:60:d2:0a:c0:05:6d:e8:07:84:c7:35:86:a6:ac:
2e:6e:35:3c:a2:69:57:fb:b4:fc:75:0d:1e:71:30:70:d7:3d:
7a:86:98:ac:46:6b:f4:6a:aa:e9:fa:ab:89:6a:fe:44:96:27:
e2:5b:48:19:df:54:bc:1d:56:9f:b4:a8:70:8d:5e:34:dd:c1:
a2:ef:3c:fd:63:3e:96:7d:01:c4:84:68:33:fb:dc:27:96:13:
87:68:ce:63:fe:3c:8d:ba:f6:3f:28:da:0c:6f:76:c1:bb:4b:
96:e8:5e:32:f4:b4:8c:b7:3f:4d:14:74:66:88:a3:4f:55:00:
fe:fa:30:18:75:3c:69:b6:08:40:4b:f1:4a:06:cc:70:c9:3e:
4c:e9:1f:43:a9:81:69:08:57:cc:5a:f6:d2:c7:0f:22:cf:b0:
c5:ba:32:b9:75:64:b3:69:94:1b:ee:1a:3c:e7:4c:e1:db:d7:
c3:6c:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org