Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ebYOu3qLYHJ-d9guwHNzDYXl5GA.roa
File: ebYOu3qLYHJ-d9guwHNzDYXl5GA.roa (raw, json)
Hash identifier: /yNGE8PAAzuQn5IGi6SplSe/QgS05adQw8+pzuJYQZs=
Subject key identifier: 79:B6:0E:BB:7A:8B:60:72:7E:77:D8:2E:C0:73:73:0D:85:E5:E4:60
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0ADC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ebYOu3qLYHJ-d9guwHNzDYXl5GA.roa
Signing time: Wed 29 Sep 2021 02:41:10 +0000
ROA not before: Wed 29 Sep 2021 02:41:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 1659
IP address blocks: 203.64.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 02:41:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=79B60EBB7A8B60727E77D82EC073730D85E5E460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:5b:2a:10:63:cf:ae:82:ff:a3:41:09:f3:
e2:99:b1:73:ab:16:95:22:23:f6:fb:1e:bb:11:01:
63:fd:95:97:c3:cd:5d:17:71:f3:3d:1e:e9:2c:da:
f2:b7:60:25:58:3a:0c:37:9e:87:7b:3b:e6:9f:57:
95:6d:4e:4b:00:27:84:85:21:e3:15:02:56:9b:fe:
12:99:b7:33:c3:f6:da:1f:60:e2:46:29:0f:03:28:
f3:74:96:78:8a:e0:b4:90:58:e3:d5:88:3c:0b:60:
2d:ee:22:48:08:fb:a7:38:ba:82:e5:66:52:40:c4:
a4:21:f0:9a:a6:00:14:1a:01:8c:48:29:33:14:65:
af:38:ba:f9:13:0d:3b:c0:98:7d:bc:e0:1b:44:02:
3c:ef:94:c6:e2:2e:ec:f9:6c:af:b0:de:69:69:00:
4c:9b:ee:95:0a:f8:a7:d3:d9:8c:3f:a2:cd:83:8f:
11:7c:ef:49:ba:90:65:62:17:ed:0b:8a:ec:43:06:
01:e3:88:1a:05:02:5a:9b:dc:8c:cf:ea:24:0f:bf:
c1:15:e1:c8:25:3f:74:7c:59:59:68:9d:83:8a:91:
fb:02:9d:c1:00:5e:96:c6:3a:35:81:ec:52:bd:11:
06:de:50:28:19:84:af:8c:b4:7d:03:2f:15:e4:9a:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:0E:BB:7A:8B:60:72:7E:77:D8:2E:C0:73:73:0D:85:E5:E4:60
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ebYOu3qLYHJ-d9guwHNzDYXl5GA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.64.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:43:66:90:2f:04:1f:11:23:cf:fd:ec:2a:f8:53:3e:d8:48:
9e:3e:c8:67:cb:4d:6c:7a:64:e5:08:db:54:8e:23:03:b5:1e:
c4:32:12:a4:69:44:22:2b:c9:ba:bd:82:d7:44:d3:0b:b5:70:
6b:73:85:37:53:4f:31:60:2e:c4:fd:22:6a:86:63:7c:06:11:
11:7e:9d:16:c8:ae:11:f0:95:04:d8:85:66:41:2b:f0:59:81:
ab:12:e0:8c:3a:f8:cb:e0:80:16:c0:e1:d0:70:4e:ad:a3:bc:
12:87:8f:32:2b:d6:65:80:5c:d6:1b:7a:69:8f:96:90:aa:4a:
c4:b8:d3:e0:a8:e7:b5:86:ee:5d:da:56:03:d9:83:91:92:2f:
e1:3d:f1:12:b2:14:f2:f9:3f:88:47:5f:1b:2a:1e:0e:de:1f:
3c:b5:66:7c:4a:b8:6f:58:68:ae:bd:5a:b8:f6:9a:9a:08:3c:
8c:67:c4:83:79:e7:86:f3:1b:70:5c:88:89:e5:90:76:cd:0b:
19:a0:31:77:ec:a7:22:b4:ca:87:96:c0:4c:e8:cc:37:cb:91:
62:6e:ed:8a:2f:bd:2b:23:32:a6:23:93:78:45:04:bf:7a:01:
bc:84:0e:6b:af:d1:b8:82:da:2c:e0:ae:b3:ed:1e:20:90:71:
3e:11:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org