Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Wa6ej8SH_nqvOfwslASb_G1WOqY.roa
File: Wa6ej8SH_nqvOfwslASb_G1WOqY.roa (raw, json)
Hash identifier: PsRWmfw1GS5SgR7qWDUpVuPCeok5RxNHXRe9LXOwopQ=
Subject key identifier: 59:AE:9E:8F:C4:87:FE:7A:AF:39:FC:2C:94:04:9B:FC:6D:56:3A:A6
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 07BE
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Wa6ej8SH_nqvOfwslASb_G1WOqY.roa
Signing time: Tue 29 Sep 2020 10:06:50 +0000
ROA not before: Tue 29 Sep 2020 10:06:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 192.83.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 10:06:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=59AE9E8FC487FE7AAF39FC2C94049BFC6D563AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:ed:c6:c8:7a:4d:db:aa:20:40:e9:25:b6:
32:09:ed:7d:0e:8d:4d:00:5e:13:ef:8b:40:f3:f0:
56:0c:66:02:ca:34:91:56:c7:7d:bf:12:79:a1:97:
7a:1a:e7:ca:64:88:4f:53:96:68:d7:ca:5e:2b:4f:
f1:8e:89:b8:e9:43:98:da:99:2a:ae:d8:0b:9a:c6:
52:44:bf:b1:6f:49:a2:90:4d:ff:63:da:95:05:d9:
fc:45:47:40:84:61:9c:41:fe:45:09:1a:3b:25:5d:
84:ef:56:81:19:5c:2b:fa:48:b7:07:f1:36:30:bb:
42:c0:ee:f2:a9:d8:56:67:15:98:f6:10:f8:9f:22:
e8:76:65:5c:fa:2a:e2:80:db:d6:5e:43:bb:a2:e0:
7a:73:e6:77:23:44:db:92:d6:68:fb:ce:6a:6b:65:
c5:72:a5:36:1e:b4:42:39:df:2e:63:fb:19:a8:97:
b6:0f:46:a0:ad:08:49:43:31:55:86:10:29:a9:b7:
bf:e4:f3:6f:1f:13:d1:2a:6e:d6:0a:d6:0d:f3:b3:
50:51:07:38:5c:2f:d0:f2:7f:1c:7b:4c:20:55:2a:
62:d6:6a:5f:b0:45:98:47:10:36:58:d6:3d:b1:4a:
f2:e2:64:6b:5e:60:25:2f:ef:f2:cf:0d:09:e5:98:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:9E:8F:C4:87:FE:7A:AF:39:FC:2C:94:04:9B:FC:6D:56:3A:A6
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Wa6ej8SH_nqvOfwslASb_G1WOqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.166.0/23
Signature Algorithm: sha256WithRSAEncryption
45:65:e4:48:92:f5:60:b1:15:39:24:13:50:d8:1d:a1:dc:34:
14:0b:39:f4:1c:b8:fe:9f:ad:ee:60:20:46:c7:53:db:c4:29:
0c:e9:63:cb:da:2e:d5:ea:30:c3:d1:7a:57:7d:84:87:eb:6a:
46:e4:99:dc:af:a1:3d:c0:73:c2:b7:3a:cc:b6:24:2b:da:e2:
11:ec:af:98:68:26:8f:33:fa:cf:bc:0f:1f:dc:ee:17:22:9b:
f4:2e:be:78:ec:6b:9b:54:08:35:68:1c:44:21:66:fb:4b:58:
33:2e:27:78:d3:b8:a3:27:3c:a5:9c:6d:01:c1:c0:73:84:7b:
7d:c8:ff:72:49:8a:e1:5a:b4:77:7a:98:ff:c9:34:3f:74:a7:
75:da:10:91:9e:5a:c0:6d:e9:3a:14:fb:9a:f2:33:48:d7:e1:
ee:d3:8e:89:5f:7d:38:f3:9c:b7:5b:9d:03:55:a0:59:fe:90:
f8:e7:2f:f5:6a:fa:ab:ac:06:ab:7b:7c:ca:d2:59:4f:f8:f8:
51:0f:89:2a:78:8b:63:ad:1d:fc:46:39:5b:61:6a:31:77:c4:
58:ee:d0:12:d7:6e:70:1e:19:e1:5d:0f:80:00:4e:0b:c6:4c:
b7:b4:6f:5a:87:11:fa:ee:46:36:6a:6c:cb:53:23:f3:f1:fd:
e4:4e:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org