Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/WtYv7ioiYftk_vbLJwYMRcmT2Q4.roa
File: WtYv7ioiYftk_vbLJwYMRcmT2Q4.roa (raw, json)
Hash identifier: WtXLxH6PSkQbWDYTz69nbLaPH91qZ1k52VW0Z4Kuj2I=
Subject key identifier: 5A:D6:2F:EE:2A:22:61:FB:64:FE:F6:CB:27:06:0C:45:C9:93:D9:0E
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 07B6
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WtYv7ioiYftk_vbLJwYMRcmT2Q4.roa
Signing time: Tue 29 Sep 2020 10:06:47 +0000
ROA not before: Tue 29 Sep 2020 10:06:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38845
IP address blocks: 140.136.164.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 10:06:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5AD62FEE2A2261FB64FEF6CB27060C45C993D90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:bd:3a:00:03:7c:33:2f:3e:c3:e4:2e:c2:
78:33:bf:68:3f:9e:64:11:10:4d:11:96:f0:dd:ba:
e4:f2:d7:a1:46:ca:5b:c7:9f:0a:2e:00:75:91:52:
3f:60:2f:7c:ee:6d:cf:61:64:98:de:27:dc:e1:8c:
74:03:17:87:7c:ce:35:7b:8f:95:d1:00:1a:1c:40:
da:12:70:0e:46:e1:77:b7:f2:7e:bb:a5:10:a5:5a:
b8:aa:e6:e9:e8:c1:0e:47:ca:73:2d:b3:1e:1c:c4:
60:60:f9:93:5e:7d:f4:b5:85:88:7d:2f:08:5f:91:
34:e8:cf:79:2b:f9:ed:e5:c0:c4:88:a1:db:78:29:
b9:f8:9b:a5:ec:ce:f0:92:43:dd:27:0b:e6:e2:43:
37:3f:18:36:a2:db:43:b9:6f:fe:de:6f:fb:32:59:
29:8c:97:ba:2a:47:f4:de:25:1c:69:7a:fd:14:56:
ec:2a:62:c4:86:8e:81:73:9f:b9:39:b3:67:8f:dd:
87:02:df:3d:a1:a9:11:2f:f9:aa:ce:0f:94:36:cf:
0f:c0:f2:50:3f:b5:6a:18:63:a6:1d:6d:ea:04:5e:
30:07:d1:52:3b:2e:1d:17:52:95:50:95:fe:5d:27:
f2:88:fa:19:a1:c1:9a:83:ae:3d:5d:3d:52:87:80:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:2F:EE:2A:22:61:FB:64:FE:F6:CB:27:06:0C:45:C9:93:D9:0E
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WtYv7ioiYftk_vbLJwYMRcmT2Q4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.164.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:fe:ce:64:79:83:c0:9c:49:e7:2d:d1:56:97:f0:5c:5b:c2:
c0:63:17:91:3b:f6:1a:6f:a5:39:89:18:93:62:ec:aa:53:4d:
a7:e2:92:11:ea:33:bd:5e:60:52:84:dc:84:92:6f:1f:91:c1:
21:46:8a:fb:7c:7d:44:64:13:fd:fb:d9:7b:3e:2e:ed:6b:d8:
b2:eb:7c:d4:8e:07:7e:ba:21:d3:86:a5:b8:6f:64:a3:4b:ab:
fa:ac:e7:88:0f:b3:0d:ed:8f:e9:35:7a:f2:99:77:d9:5d:1b:
3f:ca:53:f3:0f:4c:01:a8:59:42:21:c8:c5:5a:16:0a:53:de:
2a:52:29:9b:d4:28:08:b3:5f:4b:43:4f:3c:18:4b:65:25:35:
34:0a:25:a7:35:5c:b2:b1:ef:f2:39:32:45:94:46:3f:11:45:
7e:1d:b4:10:33:16:ca:24:0d:45:1e:61:0f:bf:d3:cd:63:a7:
f1:54:2f:42:2c:e0:d7:e8:b7:14:3b:0d:1a:47:77:31:2f:55:
24:06:35:5e:0d:3e:af:8a:10:19:15:e0:0a:0c:c7:21:2f:69:
a0:2c:e7:89:f7:d0:46:e1:e6:25:fd:c7:af:b8:c5:7b:6b:39:
d9:18:f1:ff:a6:e9:14:4d:18:4b:64:50:8e:a4:d0:25:35:b9:
5f:3b:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org