Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/WeFcSQcd5yJrsKnbZAvZj_85uW0.roa
File: WeFcSQcd5yJrsKnbZAvZj_85uW0.roa (raw, json)
Hash identifier: PHH5IGa8iwPTQoLNSfU1pAzp+bBHkmjpd1OFzqlX1bw=
Subject key identifier: 59:E1:5C:49:07:1D:E7:22:6B:B0:A9:DB:64:0B:D9:8F:FF:39:B9:6D
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09D6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WeFcSQcd5yJrsKnbZAvZj_85uW0.roa
Signing time: Sun 07 Feb 2021 12:39:11 +0000
ROA not before: Sun 07 Feb 2021 12:39:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 163.16.0.0/13 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:39:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=59E15C49071DE7226BB0A9DB640BD98FFF39B96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:f1:4c:7b:c5:9b:10:9a:16:f2:a4:0d:ba:
2a:14:e7:14:d4:c2:1c:f9:6a:64:13:e5:a4:57:f0:
61:41:e1:db:63:4a:6c:de:fc:6d:6e:13:40:6d:2d:
6d:f0:65:26:da:00:25:ed:03:7d:5d:6b:38:36:e4:
94:51:0b:f6:18:7c:e4:ff:f6:20:6e:0f:59:65:46:
3f:89:2f:b9:8a:6c:8f:24:c9:df:10:dd:b8:fd:df:
8d:66:38:4b:a1:fd:d3:d7:2f:de:e8:18:46:fa:9e:
f9:84:85:50:cc:f9:8c:3e:9a:fd:f0:67:aa:bf:af:
f3:62:1b:c8:ef:75:2e:ac:4a:e7:2e:ee:76:77:b3:
0c:fe:af:43:1d:f8:ca:50:8d:92:ba:b5:e5:e4:92:
6a:72:80:e0:3d:71:63:81:1c:5a:42:61:c4:0b:0d:
b6:18:43:05:f4:15:fa:da:a8:69:28:c3:d9:1b:35:
72:f9:80:98:c2:fd:cc:8d:c9:4b:ff:0e:8f:47:5a:
3a:1f:bb:7d:f5:8d:6e:f8:27:0c:9f:5b:8a:99:1c:
30:8a:bc:f3:70:1d:fa:96:27:0d:95:1d:47:72:e2:
27:72:d5:cb:72:41:20:9d:70:a1:2f:71:df:a5:77:
80:41:f0:cd:99:8b:9d:ae:5c:a8:1c:46:4b:07:8a:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:5C:49:07:1D:E7:22:6B:B0:A9:DB:64:0B:D9:8F:FF:39:B9:6D
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WeFcSQcd5yJrsKnbZAvZj_85uW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.16.0.0/13
Signature Algorithm: sha256WithRSAEncryption
34:54:12:f8:db:c0:c7:42:ec:17:3e:d2:4a:5a:aa:b5:86:99:
f8:86:1b:e2:7e:a8:73:5d:04:96:fb:79:13:58:97:a0:00:c6:
ac:54:44:b6:54:fe:7e:36:64:e4:eb:91:46:4b:72:92:f0:23:
2c:ef:e5:01:f4:23:98:39:56:f8:80:f3:4d:89:79:3d:6e:69:
93:6b:b7:ff:2d:37:79:a7:16:e9:25:01:c2:6a:ea:ab:e1:5e:
11:13:78:51:1b:56:0e:ee:ae:f9:fd:2c:cf:46:87:a0:5d:cc:
65:8e:03:4a:36:0c:93:b9:fc:16:d8:2e:bb:d9:50:4f:19:35:
5b:22:97:b2:96:86:c5:9b:7f:d6:1b:2f:e6:77:99:a3:a1:22:
43:91:5a:ab:3e:36:09:68:8d:0e:41:5f:70:b7:f7:f0:c5:ad:
1a:d3:49:cf:ed:68:7c:09:07:08:5b:45:7e:87:bc:25:69:ea:
0d:a2:e2:37:9c:5a:2f:fc:a7:1f:70:e5:ff:e7:1f:93:81:97:
70:50:ea:91:87:6a:1e:8a:55:8e:b5:0e:f7:38:1a:08:82:62:
21:2e:0b:b6:25:d4:ec:eb:cf:4c:ac:ba:d8:08:a6:a3:85:65:
5a:f4:28:40:27:ea:94:1d:42:44:b1:f3:83:f2:ae:67:99:ec:
bd:75:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org