Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/WYMJb0-UJbYW14RIKNE1Cs9q_ec.roa
File: WYMJb0-UJbYW14RIKNE1Cs9q_ec.roa (raw, json)
Hash identifier: M5EiPzZfPxw/FPdarcUrQijvFwTP3yxN249WfZSKr88=
Subject key identifier: 59:83:09:6F:4F:94:25:B6:16:D7:84:48:28:D1:35:0A:CF:6A:FD:E7
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WYMJb0-UJbYW14RIKNE1Cs9q_ec.roa
Signing time: Thu 15 Sep 2022 02:41:18 +0000
ROA not before: Thu 15 Sep 2022 02:41:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 203.68.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5983096F4F9425B616D7844828D1350ACF6AFDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:e7:e2:da:95:ff:74:19:f7:f8:3f:75:c6:
4a:1f:d8:c0:f2:53:73:fb:2b:71:f9:db:dc:c2:24:
d0:6f:d1:65:bf:10:04:0e:17:89:47:5e:68:a6:e7:
87:14:82:b2:cf:58:f1:dd:19:3e:31:dd:c4:8c:f5:
39:c4:7e:8b:0e:e6:20:bf:6b:23:02:33:46:ea:6e:
14:2a:eb:53:c8:57:8a:aa:4f:17:c6:0f:ee:df:f2:
d3:fc:3b:54:1e:c9:06:82:c2:67:ab:97:08:52:d2:
fd:56:59:9a:3d:cb:19:23:d4:19:5b:fb:a3:59:60:
79:00:3b:c9:b7:0b:cd:c9:af:76:29:62:6c:2b:c6:
f3:97:47:a0:a7:0b:bb:51:4c:9c:fa:27:43:67:f3:
b2:f8:8c:f9:e3:11:0d:a5:50:72:07:63:db:db:8a:
39:86:68:b7:5f:86:47:7f:dc:20:46:a1:f1:c3:27:
ad:97:5c:4a:ff:8e:ca:e8:81:71:20:2a:9c:18:8f:
13:19:e1:ba:81:27:e0:18:ad:fc:8f:d3:13:45:82:
75:4e:32:0b:11:e2:3f:d3:4f:89:f0:a5:d9:0f:49:
c9:42:d9:ee:82:e6:46:b1:f2:3c:f1:1b:21:62:53:
5b:61:bd:fa:ca:38:45:b8:c9:49:0e:0d:60:13:37:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:09:6F:4F:94:25:B6:16:D7:84:48:28:D1:35:0A:CF:6A:FD:E7
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WYMJb0-UJbYW14RIKNE1Cs9q_ec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.68.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:9c:31:e8:57:55:43:cf:d3:4f:38:f9:a0:66:b6:63:3f:30:
0a:9f:d8:53:8c:c3:29:26:6c:40:40:6d:56:57:df:e4:2c:ef:
89:10:12:c0:6b:94:4e:0e:7a:ea:ca:96:cd:8e:a4:dd:b6:96:
b7:7e:26:5c:1e:04:b6:9d:70:82:23:e2:b0:cc:bf:62:04:31:
8a:32:1d:a7:ff:af:09:b8:7f:24:d7:c9:72:3e:92:16:df:82:
b7:33:36:fa:de:f6:db:0f:76:6c:9b:da:5a:c4:03:69:a6:5a:
1f:c1:f8:a6:a5:59:73:d0:72:31:07:bd:bf:7d:61:2a:81:f5:
4b:56:d0:ba:28:a0:69:4c:be:d9:71:c1:ef:8d:87:5a:13:c0:
d8:21:e2:15:76:60:7f:4a:2a:42:74:1d:55:44:16:6d:f2:7d:
7c:e4:40:3f:78:c2:a5:c1:f4:07:2a:36:26:bd:ab:1e:fb:5c:
70:48:1e:ba:a9:ec:d0:60:0a:df:a2:f1:d9:fe:20:fd:bf:1a:
7b:bd:4c:8f:d6:1d:50:c1:82:f7:ea:2e:eb:0f:90:76:4c:85:
dc:50:bc:8d:af:bc:0a:7c:ec:63:46:c3:4b:b6:62:46:b6:a5:
c1:d6:51:90:26:89:ab:3e:b2:5b:46:99:3d:93:62:9d:c8:5c:
43:88:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org