Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RNt0t6UL2J3PLxcgAU1NPp8oyfY.roa
File: RNt0t6UL2J3PLxcgAU1NPp8oyfY.roa (raw, json)
Hash identifier: gFqayPr1TsU0tK5Q3+ac9LsdEverGcYgw3OYHyvprxc=
Subject key identifier: 44:DB:74:B7:A5:0B:D8:9D:CF:2F:17:20:01:4D:4D:3E:9F:28:C9:F6
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 07BD
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RNt0t6UL2J3PLxcgAU1NPp8oyfY.roa
Signing time: Tue 29 Sep 2020 10:06:49 +0000
ROA not before: Tue 29 Sep 2020 10:06:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9264
IP address blocks: 140.109.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 10:06:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=44DB74B7A50BD89DCF2F1720014D4D3E9F28C9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:dd:74:74:af:4a:b0:34:61:15:c2:3c:2d:
c0:23:1b:6f:47:28:ab:9a:fa:06:02:a5:cf:6c:f7:
fe:a1:f3:94:b7:28:59:cf:b0:c7:a5:79:4f:c9:7b:
17:3f:15:2b:9b:fd:8c:d3:c7:ee:05:89:6b:7b:29:
79:88:27:31:20:6c:52:02:56:e0:6b:94:07:72:bb:
1c:63:81:ca:0d:b9:6a:ce:e6:1f:54:50:7f:7b:8d:
4e:22:a6:c2:1f:dd:a4:6d:d4:55:fe:a1:94:05:bb:
ff:39:50:32:40:2c:e2:1b:48:8c:12:0f:2f:76:cf:
82:2a:73:87:cb:c6:04:56:d1:b6:df:94:fb:11:0d:
ee:08:4d:0e:ca:4f:97:55:5a:4b:33:3e:27:8d:08:
fa:fc:4d:13:9e:c9:33:57:86:3b:a3:15:c4:d6:85:
5f:8e:af:88:dc:12:1e:ce:af:65:fa:8e:6b:4d:2f:
bb:71:49:2d:41:95:81:07:86:8f:8b:63:ea:b8:af:
96:84:f0:1c:c9:99:47:26:92:5b:e6:63:7b:a0:d6:
2d:31:c1:54:1d:81:b1:2d:e7:4a:a8:3c:96:76:33:
b1:99:e9:1d:39:a4:ac:ad:50:d6:2c:97:6b:14:3b:
52:8e:63:ac:8c:7e:0f:24:4f:c1:68:dc:5b:d5:d6:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DB:74:B7:A5:0B:D8:9D:CF:2F:17:20:01:4D:4D:3E:9F:28:C9:F6
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RNt0t6UL2J3PLxcgAU1NPp8oyfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:44:78:30:17:19:44:c7:af:f0:9a:e6:b4:ae:30:33:35:18:
79:7b:27:60:57:74:e7:ad:bc:5c:38:ae:d2:4a:37:03:32:15:
5e:35:b9:b1:d1:23:5f:d1:61:d2:53:fb:23:17:ab:d0:b2:b2:
42:a1:60:0d:36:80:b1:d0:c1:9d:27:5b:5a:98:5a:c3:75:76:
a6:a1:bf:aa:e6:57:52:52:6f:7d:43:21:be:46:03:96:b3:35:
1a:d4:50:2b:f2:0a:ad:9f:8d:f5:66:96:b9:b6:5e:a6:a4:ef:
cd:3f:82:60:76:b6:7a:8c:6b:a5:9f:4a:82:63:d0:9a:81:f2:
10:d8:f2:9a:d9:96:44:5e:b5:00:23:d1:c7:cb:fd:54:9d:17:
6c:11:9e:ee:ea:6e:cd:ea:36:c2:da:2f:e6:28:0d:cc:bd:53:
c9:84:46:e5:fd:32:5d:f4:c2:9d:d2:89:19:e7:52:07:c1:a6:
45:a3:45:e2:39:10:a5:9c:fc:46:c1:5a:e0:33:15:5a:51:c1:
91:ad:56:5b:92:a9:32:da:06:c5:46:7c:99:75:bc:60:49:58:
58:4b:57:c2:30:04:2b:9a:eb:8c:4b:a9:99:77:f5:a0:b5:9f:
5e:76:ab:5b:1a:03:48:5f:ae:21:a0:66:46:50:79:44:87:95:
8f:f1:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org