Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/V4JyMv6fwr5qDOSZia_xUPoqPqk.roa
File: V4JyMv6fwr5qDOSZia_xUPoqPqk.roa (raw, json)
Hash identifier: VQVe3YSI7GSQxEq9yu7/FpWOfSwLiPUAHICvcUTO75E=
Subject key identifier: 57:82:72:32:FE:9F:C2:BE:6A:0C:E4:99:89:AF:F1:50:FA:2A:3E:A9
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0B8A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/V4JyMv6fwr5qDOSZia_xUPoqPqk.roa
Signing time: Thu 15 Sep 2022 02:41:14 +0000
ROA not before: Thu 15 Sep 2022 02:41:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 140.136.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954 (0xb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 15 02:41:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=57827232FE9FC2BE6A0CE49989AFF150FA2A3EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:da:53:60:c1:e2:3e:6c:2e:26:31:c8:a0:
99:2d:65:19:16:69:b8:67:ae:1f:13:50:93:ac:be:
7b:13:17:dd:b9:99:0c:ad:b8:0b:92:41:2c:0a:13:
6e:0d:00:72:0a:83:73:77:30:88:3d:84:ab:91:0c:
d1:28:fb:17:a6:aa:34:cf:86:62:94:c9:e2:84:22:
f1:f2:3d:64:85:01:17:d0:1a:0d:c3:bb:ce:1e:dc:
46:d7:c2:33:24:3d:d5:4e:f6:9b:a3:bd:44:c7:ab:
f8:39:4b:3f:c2:01:f6:18:40:e6:1c:87:41:be:a6:
c6:25:51:7c:74:a5:5a:f0:7d:53:84:6d:9a:2f:de:
ff:ea:88:d1:b3:e8:d9:24:8f:fc:b2:f2:45:6b:d0:
fa:e5:d0:36:5b:22:3a:b4:e0:4b:2c:52:7b:cd:52:
e3:af:3b:5c:47:d2:72:df:74:35:e3:49:5e:08:b7:
aa:3d:1a:62:a3:66:35:aa:33:18:c4:16:8f:57:82:
46:1a:93:6d:9b:7c:60:03:c0:3a:9d:3c:09:4d:f4:
af:fa:ae:f2:d1:60:51:99:be:b3:97:2c:9d:1d:78:
62:34:a4:5c:d1:5a:23:ca:f9:8c:15:21:59:ff:d5:
af:87:da:b4:f1:99:71:f5:32:36:f2:60:7f:3a:1d:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:72:32:FE:9F:C2:BE:6A:0C:E4:99:89:AF:F1:50:FA:2A:3E:A9
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/V4JyMv6fwr5qDOSZia_xUPoqPqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.0.0/15
Signature Algorithm: sha256WithRSAEncryption
30:29:04:c8:f5:38:fa:ea:8d:1e:44:c2:a4:31:38:a3:d2:52:
72:42:15:6b:b1:e1:fd:0a:da:9c:66:a6:b2:a4:70:8f:34:be:
cd:2e:55:0b:ca:b4:6b:db:b2:e1:a2:da:84:a8:11:b6:3b:25:
93:91:8f:77:2f:38:97:e2:4b:76:c7:f0:ac:e1:95:52:92:29:
ce:d0:c9:fd:3e:f5:c3:43:f0:13:39:9d:f1:4d:e9:e4:70:54:
1e:a9:90:2a:c6:62:90:fb:ed:b5:c3:b7:07:1d:4f:c2:e1:ea:
a5:fc:09:16:6f:54:af:d8:e6:7b:32:cf:31:93:40:77:00:18:
af:e5:76:67:11:a0:dd:b4:81:f3:4a:aa:ad:3a:ee:21:dd:54:
21:44:ae:a9:af:23:b9:6d:e5:8c:9e:e1:11:18:31:d8:ab:53:
5b:e5:41:79:c0:12:18:78:2d:35:9f:21:0e:02:ca:15:98:28:
08:44:8b:6b:36:1f:24:67:20:d9:f6:db:af:c2:2f:39:17:0a:
3c:93:1b:58:48:35:b5:9e:ff:03:00:cd:33:d7:c0:67:fa:be:
75:ab:89:eb:4d:fe:f1:58:56:98:82:fc:e9:29:11:34:66:2b:
c3:89:65:78:6f:27:a9:2a:54:ab:d6:c1:89:83:1a:b2:62:9b:
71:cc:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org