Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RnXrPkEA0AqnMoVEWnii6zNqWKs.roa
File: RnXrPkEA0AqnMoVEWnii6zNqWKs.roa (raw, json)
Hash identifier: 2c8dS81opToK2Rvs6mG1gcj1hurTQinUxiXUFlH8BfU=
Subject key identifier: 46:75:EB:3E:41:00:D0:0A:A7:32:85:44:5A:78:A2:EB:33:6A:58:AB
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RnXrPkEA0AqnMoVEWnii6zNqWKs.roa
Signing time: Thu 15 Sep 2022 02:41:21 +0000
ROA not before: Thu 15 Sep 2022 02:41:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 120.96.0.0/11 maxlen: 11
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4675EB3E4100D00AA73285445A78A2EB336A58AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:ec:c6:72:16:bf:7a:8f:ff:43:bd:ed:0f:
b5:70:60:a5:32:cc:59:60:74:a2:27:41:0d:7a:7f:
d1:f1:a9:09:71:0e:ef:5b:87:60:d5:a7:59:bd:9e:
8f:ad:41:0d:ae:14:41:b3:d8:83:eb:d4:46:bf:57:
a6:e7:1f:4e:41:2a:be:fb:b3:7e:51:60:d7:9f:c6:
31:79:2c:f7:34:c8:d8:db:7e:54:32:01:91:c5:c6:
25:1f:46:61:0e:59:88:ac:de:86:b4:47:44:2f:be:
19:77:b6:42:4f:fd:a5:64:cd:0b:0b:4a:53:44:46:
75:f6:dc:3d:0b:dc:07:0c:1e:b6:0f:57:52:02:f2:
69:7e:33:ec:97:84:46:14:b0:49:cb:0a:0d:8f:08:
3b:2c:47:d4:24:d4:d5:9d:1b:d8:85:b5:31:ac:28:
69:cb:66:e6:a0:aa:64:2a:44:f4:b9:9c:e5:be:bd:
1a:74:f2:e3:b6:f6:ca:c7:4a:f3:03:e4:8d:c1:cc:
98:b5:1f:84:ad:72:dc:d3:6e:cb:b1:25:d0:26:38:
44:0a:44:6c:43:19:6c:38:06:78:3d:2d:95:3e:8b:
05:a8:63:05:e4:ba:b9:8d:f1:4e:07:98:c7:17:c0:
9f:21:d8:b8:ee:5b:6a:cf:3a:45:a1:c7:b7:e6:d0:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:EB:3E:41:00:D0:0A:A7:32:85:44:5A:78:A2:EB:33:6A:58:AB
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RnXrPkEA0AqnMoVEWnii6zNqWKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.0.0/11
Signature Algorithm: sha256WithRSAEncryption
02:92:17:fd:c5:ef:bb:1e:b8:81:af:f6:33:b1:21:09:0e:41:
85:81:ad:29:ca:6e:a8:c1:85:20:aa:ea:46:0e:e7:b8:82:7d:
a0:1d:11:b5:e6:e7:6d:9d:51:86:13:a0:67:06:44:0d:09:6b:
9f:76:e1:66:a1:a6:39:15:05:9f:b8:61:60:56:d3:4b:5b:5c:
b1:09:dd:95:cc:7b:fe:e5:20:df:87:f7:6b:31:46:95:62:6e:
96:eb:ed:2a:be:dd:00:b0:f5:b2:1f:dc:e6:0c:dd:a8:ab:ad:
6d:29:28:27:ca:86:1f:1f:be:50:55:f4:5b:57:cd:61:f3:fc:
44:06:d5:f6:30:37:ce:dd:24:df:e6:40:e6:aa:7e:a9:a1:f7:
b0:d1:66:5c:0a:d0:00:23:5d:64:88:b6:e5:4f:88:49:9b:4d:
bf:4d:63:5e:2f:21:aa:09:fc:ba:e2:28:8e:2f:01:a8:e8:7d:
6b:85:4a:cb:70:51:82:54:b2:5f:3f:84:12:c5:66:1d:91:6c:
37:24:28:54:e2:8e:2d:a8:cd:51:a0:33:52:08:bc:ec:84:12:
30:32:c2:f0:de:e5:ff:c3:55:44:b4:90:75:b4:4d:d9:be:21:
18:41:23:09:43:00:5e:9c:ab:20:58:a9:c8:e6:4c:a4:77:3d:
1e:8f:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org