Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Oxx-k8_-2MD2--D0LBBL2ydmLoU.roa
File: Oxx-k8_-2MD2--D0LBBL2ydmLoU.roa (raw, json)
Hash identifier: 5Q7HzHoK+tq38tOHhSl4D4lESfuO9Q4R0/9juJZUOJA=
Subject key identifier: 3B:1C:7E:93:CF:FE:D8:C0:F6:FB:E0:F4:2C:10:4B:DB:27:66:2E:85
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09AC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Oxx-k8_-2MD2--D0LBBL2ydmLoU.roa
Signing time: Sun 07 Feb 2021 12:38:23 +0000
ROA not before: Sun 07 Feb 2021 12:38:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17716
IP address blocks: 120.96.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:38:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3B1C7E93CFFED8C0F6FBE0F42C104BDB27662E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:28:76:69:99:25:8d:5e:98:80:e0:5f:ea:
e8:00:8c:2d:26:89:d4:08:bc:7b:42:7a:de:67:fe:
ae:22:c9:6a:1d:36:8f:e1:23:7b:02:8c:38:3c:94:
97:eb:02:b7:de:03:20:81:0c:b5:22:e7:d5:90:76:
b7:70:fe:8b:9f:37:bb:c5:14:13:bd:c8:2e:80:4d:
d4:2b:7d:84:24:a5:d0:06:c2:a9:8a:6c:21:c1:85:
bb:ff:f2:a8:63:08:74:0f:69:48:c4:e7:1a:9b:e9:
fa:42:70:48:88:e9:05:78:ee:a0:da:e6:47:2a:ee:
14:18:8a:84:05:fa:56:be:88:2a:6b:9f:35:4e:d5:
85:6b:58:ab:16:07:03:82:f7:49:cb:ab:2a:ac:24:
be:f2:06:fa:f5:ab:a2:53:1d:a7:83:e4:f2:8c:db:
f4:33:d9:ba:52:d7:ce:a6:cc:05:05:11:5f:ed:f3:
6f:1d:d5:25:ae:48:87:86:4a:e7:46:e9:5a:5e:0c:
0b:c2:91:9b:bf:08:97:5e:68:df:c7:bb:86:98:e3:
42:52:35:c5:35:06:26:aa:00:e4:5b:7f:0a:a2:ff:
ec:7e:a4:8f:28:4f:a0:cd:52:77:85:43:28:c7:3d:
e2:fc:1b:33:03:22:81:ca:54:7e:e1:00:31:3b:2d:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1C:7E:93:CF:FE:D8:C0:F6:FB:E0:F4:2C:10:4B:DB:27:66:2E:85
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Oxx-k8_-2MD2--D0LBBL2ydmLoU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.240.0/21
Signature Algorithm: sha256WithRSAEncryption
55:4b:c6:89:47:e0:9b:a1:b4:2a:45:cd:1d:50:4e:14:9e:cc:
fa:bb:76:82:6f:23:a4:68:45:4c:4d:f9:ba:70:2a:68:fb:8b:
f7:ce:4d:f4:dd:c3:3b:98:60:81:5e:5e:33:8b:e9:f8:d5:13:
3e:5f:b9:55:5b:c3:d9:67:98:d2:1d:cc:e3:27:9e:64:7c:ed:
0f:d2:5d:0d:fb:d8:13:4e:2a:a4:37:b1:bc:13:34:3a:b8:ca:
7e:a3:d5:ff:f2:5c:36:15:a1:10:bb:a8:a2:2f:18:c0:16:71:
12:cf:94:42:6c:29:56:af:86:03:aa:a9:1f:7f:80:2d:f1:22:
f3:43:3d:0d:14:c9:1c:18:c6:e3:8a:fb:77:eb:d1:5e:d0:f8:
52:e2:85:d6:c4:43:a6:f2:c5:ea:9b:0e:a7:3d:0c:c9:ae:89:
c4:6b:86:e2:e5:fd:0c:3b:46:13:7d:d3:07:ad:7c:1b:09:da:
13:f9:88:55:a1:94:27:85:1a:bb:f3:8d:63:7e:82:4c:1f:db:
38:fa:f6:82:61:ae:7d:94:c7:fe:a1:c4:ab:57:41:4b:a9:c8:
f7:70:3d:60:cf:8a:52:3c:b6:e0:d7:da:8b:97:71:2e:2c:b0:
c9:e7:d4:7a:56:3e:9b:ac:79:e2:ac:18:ba:af:ee:73:f1:d0:
64:25:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org