Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ZEglDdog5II61mkrgq29_AdD-Oc.roa
File: ZEglDdog5II61mkrgq29_AdD-Oc.roa (raw, json)
Hash identifier: bpOVD1ujO0/f2mkDeVNO1BxRcamTh8C+2h8ruhUIoXk=
Subject key identifier: 64:48:25:0D:DA:20:E4:82:3A:D6:69:2B:82:AD:BD:FC:07:43:F8:E7
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ZEglDdog5II61mkrgq29_AdD-Oc.roa
Signing time: Thu 15 Sep 2022 02:41:13 +0000
ROA not before: Thu 15 Sep 2022 02:41:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9916
IP address blocks: 120.126.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6448250DDA20E4823AD6692B82ADBDFC0743F8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:dc:bb:01:59:2f:42:4f:21:c4:3e:ad:f8:
69:f0:5a:12:fe:fa:d6:95:6a:80:7e:b0:e3:1f:62:
45:46:45:0e:46:18:b5:f5:be:d6:1d:4a:a5:a6:f0:
1d:4d:43:cf:3d:22:8a:58:4a:53:e9:48:23:7c:35:
6e:c4:63:5f:ad:91:cb:c8:5a:bb:ec:8f:59:74:3b:
ae:c2:34:89:28:d0:ca:65:fa:0a:3f:d6:b1:95:77:
8a:4e:40:9e:c5:58:53:c4:d7:c0:ec:ff:e4:5a:71:
0e:22:9b:78:c9:e4:5a:4a:5b:c7:ab:56:5e:7e:d6:
bc:63:79:28:0a:0a:f2:47:2e:8e:52:84:42:5a:44:
fd:b6:fe:c3:d6:a1:be:72:2b:56:88:6f:29:1d:d2:
e7:e1:e9:e2:15:67:f2:20:ea:ba:ff:8e:25:ed:b0:
b9:be:49:f2:10:b7:db:5d:00:d2:4e:d7:2d:b0:b6:
63:2d:30:41:2f:66:08:1a:2a:3a:51:3c:9b:73:49:
1a:90:dd:d7:80:d7:c6:96:86:a3:04:66:f1:33:ff:
7b:74:c6:28:ef:cd:8f:c3:e7:aa:9a:79:d2:4d:1d:
76:d2:73:1e:73:d0:77:ac:9e:52:52:c9:26:ec:04:
ed:d0:32:a3:25:32:38:24:12:2e:ed:44:45:e9:32:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:25:0D:DA:20:E4:82:3A:D6:69:2B:82:AD:BD:FC:07:43:F8:E7
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ZEglDdog5II61mkrgq29_AdD-Oc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.64.0/19
Signature Algorithm: sha256WithRSAEncryption
36:8e:46:23:f1:42:cc:ef:1a:0a:55:88:ad:ac:68:2f:d8:4c:
9c:3e:83:04:d9:7d:84:b9:d9:81:ea:c0:45:6d:54:83:bf:18:
a2:0b:d0:ef:73:60:0a:83:85:33:54:75:7c:38:70:39:ea:ec:
84:8f:dd:09:d8:84:8e:51:77:ca:a8:93:ef:95:b6:d2:be:89:
c6:d1:21:dd:a9:47:48:83:02:a9:cd:52:2a:ac:57:d5:db:71:
c3:28:af:81:44:5c:ed:68:cf:92:5a:10:d2:64:a7:a1:01:3e:
91:40:1e:04:02:ad:35:67:58:51:59:d1:6f:17:7a:c4:a2:55:
62:1b:76:f9:23:4e:a4:7b:85:9f:2d:bb:7e:58:ca:83:ec:3d:
1f:3b:ad:f0:d8:4c:70:7d:99:40:6e:54:1b:25:5f:7d:20:2b:
f7:11:c2:29:8b:7f:c1:fc:1c:aa:f1:15:bd:49:13:fe:37:42:
21:12:a6:0e:fa:38:73:4e:2b:69:36:0d:ca:e9:f2:a1:12:1d:
d9:f8:75:5a:8a:3f:fe:03:75:18:d7:57:77:fa:9d:98:f2:5a:
5a:18:1a:e4:32:60:b6:7f:bc:79:03:4d:12:8c:67:d7:20:20:
34:a4:eb:21:74:02:66:3f:01:f8:be:76:f1:4e:33:d3:af:dd:
e1:db:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org