Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/R2CyoLs5Qzd1uryvNxZEjtFtQB0.roa
File: R2CyoLs5Qzd1uryvNxZEjtFtQB0.roa (raw, json)
Hash identifier: SPgyKIHa2AygkZr90L/fTbwD+zI+ABE6OrMASJX+PBE=
Subject key identifier: 47:60:B2:A0:BB:39:43:37:75:BA:BC:AF:37:16:44:8E:D1:6D:40:1D
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/R2CyoLs5Qzd1uryvNxZEjtFtQB0.roa
Signing time: Thu 15 Sep 2022 02:41:26 +0000
ROA not before: Thu 15 Sep 2022 02:41:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 210.62.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4760B2A0BB39433775BABCAF3716448ED16D401D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:b4:7f:c1:1c:21:5e:2c:93:fb:c5:cf:33:
8d:45:3a:59:05:33:3c:4a:fc:f9:5d:67:99:d1:68:
9f:bf:cd:97:86:7f:99:1c:e5:66:31:31:9a:96:11:
2c:49:9c:d6:7c:66:ff:25:14:40:44:96:0f:b9:12:
4a:e4:6b:01:19:ee:41:62:dc:40:4f:f9:5a:33:7f:
b7:8c:fa:c6:1f:4c:06:80:f8:3d:ab:7a:19:36:fe:
e6:57:62:3d:f5:38:2f:be:b0:b0:33:00:5b:3e:ad:
b0:d0:b6:74:13:6c:26:14:20:27:c3:7a:3c:27:22:
b4:c9:c1:31:4d:5b:02:dd:26:7f:3f:2b:a9:f5:e1:
bf:ea:70:d9:23:b8:0e:53:5d:5f:8e:70:35:16:0a:
45:c9:20:23:a9:15:cb:c2:2a:d6:d7:6f:ea:1a:1e:
60:63:17:47:df:d9:48:d0:e4:8f:3f:b5:b7:23:c7:
d3:fc:0a:86:39:f0:ee:6b:87:33:b3:90:cf:d4:b9:
26:65:0e:6d:48:2a:47:c4:41:00:00:50:dc:71:d7:
94:04:16:3e:b2:0b:2c:42:a9:b8:1b:5d:80:46:fb:
e2:99:f7:62:3e:90:05:e5:f2:e8:25:3d:70:f4:f8:
be:76:33:eb:42:b5:0c:aa:85:5c:66:0b:4c:8c:a7:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:B2:A0:BB:39:43:37:75:BA:BC:AF:37:16:44:8E:D1:6D:40:1D
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/R2CyoLs5Qzd1uryvNxZEjtFtQB0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:e9:49:1b:9a:be:aa:20:5a:09:3d:7b:e8:63:7f:7f:1b:84:
ec:be:7a:fa:95:b9:b8:e9:53:44:53:49:cb:db:f8:1b:10:a5:
96:49:ab:24:07:6f:f7:6b:de:d0:00:e0:32:2f:8b:9f:85:e1:
2f:69:b5:46:07:81:9e:e0:ff:3b:00:b7:8a:75:20:43:91:ad:
bb:7c:c4:c7:71:9c:4c:a2:b7:ae:38:e5:90:39:aa:3a:58:fe:
25:c7:0d:46:8b:01:5f:d6:a5:a7:43:b0:87:a7:f6:fd:79:ac:
8e:c8:59:d9:b9:3c:bc:a5:d3:cb:31:b8:f1:e3:19:a7:c5:1b:
d4:db:bc:47:66:e0:dc:f1:31:e4:81:f6:43:ae:08:10:eb:73:
19:a8:37:51:32:a0:06:60:82:1b:7b:c6:69:84:72:fd:f3:a4:
88:8f:2a:1f:a0:a1:5f:fd:38:c5:cb:12:f3:f9:cc:ea:b3:87:
e2:c1:90:e8:7d:48:3e:b3:af:da:c8:02:23:10:c5:87:5c:e1:
ca:fe:3b:2b:b3:eb:2c:04:d1:1f:cb:8a:40:e1:06:52:c0:ed:
9f:a8:f0:62:9d:50:00:dd:4a:a0:67:69:41:dd:6c:c2:44:01:
99:6a:6e:f6:7b:b1:e9:e2:d0:4c:d2:a5:fd:4c:26:9e:65:3a:
2e:76:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org