Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/aAjGbFuzeYBtwcbf454zT5HtKRw.roa
File: aAjGbFuzeYBtwcbf454zT5HtKRw.roa (raw, json)
Hash identifier: yztY2JSxjW5ZjF69YxmvrbvvOKbA5HdGK1S/nFlPF1c=
Subject key identifier: 68:08:C6:6C:5B:B3:79:80:6D:C1:C6:DF:E3:9E:33:4F:91:ED:29:1C
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09FE
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/aAjGbFuzeYBtwcbf454zT5HtKRw.roa
Signing time: Sun 07 Feb 2021 12:39:49 +0000
ROA not before: Sun 07 Feb 2021 12:39:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 210.62.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558 (0x9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:39:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6808C66C5BB379806DC1C6DFE39E334F91ED291C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:98:cb:f7:37:ba:e1:fb:99:0d:20:ad:ae:
19:db:28:7f:fd:3a:a5:bd:b4:4d:30:1f:7c:4b:86:
fc:c1:d6:b8:d3:05:85:a2:1c:75:f6:a7:2a:58:c2:
c1:5e:e3:45:8c:72:ff:ff:5d:9e:1b:13:21:71:b4:
5b:2c:05:45:61:c3:43:56:3a:30:80:2e:84:18:fb:
5f:51:9e:8d:e1:4c:dc:6c:a7:54:a0:1a:bc:13:b3:
44:b0:48:83:52:57:33:fa:ac:d0:f4:97:d1:db:33:
b3:06:d8:cf:31:ae:71:46:4a:20:35:da:50:4e:0c:
6c:95:18:9d:56:d9:c6:7c:09:e7:c6:24:44:a8:29:
b0:28:95:75:65:00:5f:59:04:2d:d4:35:f5:40:50:
5a:1a:57:c8:4f:bd:19:00:b3:9e:6d:d9:cb:70:91:
69:2a:79:55:a8:0f:1f:97:6a:8f:86:6c:8e:53:63:
bb:03:ab:64:23:c4:8d:0b:d2:d6:75:7b:1c:09:ce:
fb:8d:65:38:6c:64:5f:4a:fb:2f:b1:59:89:64:9d:
5a:c6:7f:c7:43:3d:ef:f3:fa:14:99:85:d4:46:52:
b3:00:c4:ad:f8:e8:38:0f:39:46:8b:7c:fe:97:12:
18:f6:23:5a:b4:d2:ba:f5:2e:58:27:83:d6:ae:91:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:C6:6C:5B:B3:79:80:6D:C1:C6:DF:E3:9E:33:4F:91:ED:29:1C
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/aAjGbFuzeYBtwcbf454zT5HtKRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.224.0/20
Signature Algorithm: sha256WithRSAEncryption
25:d7:42:44:92:e1:37:6c:47:ec:66:08:4d:84:0a:7e:cc:75:
f2:be:eb:3d:1a:8b:96:02:c5:95:d7:99:20:8c:18:6f:28:1d:
36:31:b0:f7:47:99:2a:f5:02:c0:8f:d5:6d:4e:82:12:cc:bb:
44:4e:91:4a:2b:6f:0d:f1:68:93:6e:b4:05:fd:77:7d:29:89:
bc:4d:96:ba:1f:c3:8f:82:5f:4f:ff:df:04:8a:f1:1b:1f:fa:
8d:f9:1b:99:c0:6c:bb:f1:38:48:bb:d9:6a:2e:89:d4:85:00:
24:40:04:55:0a:83:5a:bb:fa:80:03:1b:6a:a2:4b:f8:7a:95:
e1:10:40:26:be:71:02:6b:8c:52:5b:cc:53:7d:f6:2d:d8:ac:
d8:dd:5d:b6:e4:b8:46:ac:14:73:20:88:0d:2a:c4:5f:c5:95:
92:f0:df:48:13:bd:f1:17:15:83:5f:d8:b5:af:e6:0e:33:f8:
2b:9e:dd:ab:3c:7e:2f:1e:29:25:0d:dd:cb:11:75:07:6e:4c:
81:68:6d:13:7a:fc:c4:9d:8d:69:47:bd:7d:6a:6d:c8:02:cf:
27:2d:aa:69:7b:5a:64:20:7d:15:6c:5b:57:d3:e8:4d:3a:33:
0f:89:f4:75:35:b5:a6:03:90:c1:c7:36:f0:1b:0a:6e:69:f6:
a1:aa:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org