Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/THO-S3laS95jgEGp77pCj-BlkzQ.roa
File: THO-S3laS95jgEGp77pCj-BlkzQ.roa (raw, json)
Hash identifier: 8astWsXKRYOgwbrKgGY4bkmWI/NsOF4KXO6Xk5YXBgQ=
Subject key identifier: 4C:73:BE:4B:79:5A:4B:DE:63:80:41:A9:EF:BA:42:8F:E0:65:93:34
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/THO-S3laS95jgEGp77pCj-BlkzQ.roa
Signing time: Thu 15 Sep 2022 02:41:17 +0000
ROA not before: Thu 15 Sep 2022 02:41:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 210.60.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C73BE4B795A4BDE638041A9EFBA428FE0659334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:73:e4:86:22:b5:34:71:d6:fd:35:18:00:
f3:ad:90:0d:f5:5a:77:46:bd:c3:22:57:96:fd:03:
a1:16:79:2a:86:9e:44:84:92:be:7f:2f:15:3d:e3:
aa:ed:12:3c:3a:23:3e:df:e8:70:0a:fb:f4:4b:c0:
0c:ff:1e:e4:a3:7d:a9:9b:f2:31:bd:a6:d6:0c:c7:
62:09:4f:69:fe:5f:06:10:4b:a1:59:6f:4f:57:e8:
75:74:dc:19:a0:60:8d:cb:a8:9b:2b:5f:24:18:9b:
a9:56:c6:33:57:b8:e7:92:fe:46:09:72:6a:ee:ca:
86:9e:ac:6e:30:4f:18:65:4c:c6:12:02:8f:dd:c4:
18:f2:ba:c8:27:3a:20:8e:82:28:97:9f:fe:e7:f2:
80:e4:7a:31:a2:1c:28:eb:a8:f9:f6:d9:38:7a:4f:
50:87:a8:9e:1a:91:83:23:40:e3:38:e9:ed:2d:29:
8d:74:45:7b:44:d8:52:0d:44:d6:9c:d0:b2:e4:fb:
3d:ba:41:48:2e:1d:1f:87:e9:3d:0d:ee:52:67:21:
05:48:c1:87:89:e8:d5:08:d4:73:67:48:29:e9:4b:
35:27:db:8c:5e:48:81:66:f1:da:78:45:3b:4b:16:
3e:7a:43:46:d4:87:46:c2:38:5f:3e:93:41:6c:bd:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:BE:4B:79:5A:4B:DE:63:80:41:A9:EF:BA:42:8F:E0:65:93:34
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/THO-S3laS95jgEGp77pCj-BlkzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:57:35:07:5b:0f:ee:97:95:f8:79:73:92:39:59:b1:84:33:
41:4a:6c:f1:9e:4f:24:72:d9:99:46:b7:14:28:ba:b1:9f:aa:
60:82:4b:5d:db:ed:54:71:1f:7c:f2:ea:c7:81:36:1d:ba:9f:
e6:b3:1a:ec:ac:7c:d5:79:fa:5b:ca:bf:45:06:d0:34:ef:c3:
6e:67:9f:da:df:b1:3d:20:6d:7b:8a:8e:c8:e8:86:d6:bf:a6:
14:a8:4c:a5:a6:5d:13:31:3b:e6:c1:27:c2:e6:58:f8:81:ee:
71:6a:34:d7:1d:fd:8a:5b:99:7b:f3:e0:22:c7:5b:50:c3:2d:
4c:73:11:7c:63:a8:5f:cf:cf:be:b5:19:87:12:6c:be:e1:4e:
78:42:af:14:5a:60:e0:49:a6:99:c8:87:a5:e0:2c:c6:05:33:
3b:01:8d:07:ea:24:9b:70:bd:2a:50:1f:aa:8c:89:87:ad:76:
1f:97:e5:2b:97:9d:9c:1c:9d:09:45:e8:73:89:62:43:6a:6c:
78:e7:66:af:56:32:0f:79:c4:e0:c7:a3:23:eb:4e:c8:a2:5e:
76:fe:5a:85:e5:3c:aa:82:52:01:62:23:52:78:d0:93:9b:d6:
0b:cd:b5:70:cd:32:41:ec:61:fd:67:b8:9c:65:20:2d:69:a2:
08:f0:2a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org