Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/fJkA6G1fMlWnPqfTXIgRv9FJ72E.roa
File: fJkA6G1fMlWnPqfTXIgRv9FJ72E.roa (raw, json)
Hash identifier: d43WQDwoiExkEhI2DOUAdzcgc+uBnYL9fHmR5j8T3VQ=
Subject key identifier: 7C:99:00:E8:6D:5F:32:55:A7:3E:A7:D3:5C:88:11:BF:D1:49:EF:61
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fJkA6G1fMlWnPqfTXIgRv9FJ72E.roa
Signing time: Thu 15 Sep 2022 02:41:19 +0000
ROA not before: Thu 15 Sep 2022 02:41:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 210.243.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7C9900E86D5F3255A73EA7D35C8811BFD149EF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:92:d9:0f:1a:ec:e1:f7:b7:f6:c8:9a:67:
c8:43:b5:08:4d:5a:8d:a5:9d:2a:76:99:6a:64:b5:
fc:07:57:e9:26:55:64:f3:11:52:de:c0:16:d8:76:
39:2b:2e:f4:dc:24:e0:57:a4:d6:0d:1a:43:2e:92:
ab:cd:d5:c4:de:6d:33:ba:57:7f:4a:b6:d0:f6:bd:
a5:b7:58:ed:a1:b0:1f:e3:58:d1:12:fa:81:30:8d:
40:e2:83:cb:23:4d:f2:a2:f3:28:8d:c2:db:0e:68:
15:d8:24:8b:4b:b5:4c:c9:62:86:8e:5e:85:d9:4d:
7e:8f:e6:d9:33:34:63:aa:f2:a9:3a:33:c1:05:91:
7a:a7:94:eb:5b:bf:d7:33:2d:8b:51:4f:62:8c:59:
d2:21:db:25:49:43:90:7a:a6:f6:c6:1a:3e:bc:5f:
8e:1b:72:a2:5c:e5:15:36:54:4d:85:16:26:2e:82:
e4:ae:14:ab:df:96:52:9d:ed:46:b4:3b:ba:22:5b:
b7:64:1d:91:70:e6:93:b4:02:fe:f3:75:6b:89:06:
f0:04:ab:5c:b3:dd:aa:cd:a1:7c:c2:b8:5c:ec:18:
59:88:9d:03:b4:a2:d4:33:2c:8b:1c:b0:d9:8b:54:
a6:bb:c0:a7:94:2a:4e:04:dc:25:69:79:30:a9:4c:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:99:00:E8:6D:5F:32:55:A7:3E:A7:D3:5C:88:11:BF:D1:49:EF:61
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fJkA6G1fMlWnPqfTXIgRv9FJ72E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.243.0.0/18
Signature Algorithm: sha256WithRSAEncryption
19:86:1b:89:14:33:df:5a:82:6e:09:9b:8e:33:90:c5:23:3b:
5b:1e:4a:a7:e3:96:25:8f:8a:39:03:aa:e7:d2:1d:51:43:e8:
f0:c5:8d:a1:94:38:c8:5c:12:5c:0b:23:13:5f:3f:ae:71:99:
75:9c:c0:a8:28:b0:e4:c4:af:d7:d0:fc:b4:f1:f4:fd:8c:82:
ad:6f:a0:3c:71:02:df:cf:40:27:92:34:e8:3c:3d:73:e3:be:
d5:1f:ba:5e:5f:ef:7a:4a:ec:0b:a5:c6:e0:52:01:8f:32:05:
0c:d1:d3:95:47:5f:d9:d9:c9:f9:1c:6b:f7:b9:d6:b3:06:53:
8d:8e:26:04:cc:0e:6b:e8:7e:ba:45:02:96:c2:3b:1a:3b:cc:
02:c4:bf:06:10:db:55:94:70:72:55:c9:1a:35:d9:97:7a:af:
ca:59:bb:b1:1f:75:00:84:ab:58:2d:84:c8:7d:be:3b:47:09:
a2:33:9a:78:ae:8b:94:fb:31:4a:46:9b:1b:5f:25:6b:77:9d:
d9:ac:aa:1d:09:54:0c:2c:17:f2:49:bc:f3:97:7d:9a:bf:50:
89:20:78:78:11:c7:91:4c:86:85:14:b0:cd:ae:85:a1:ed:06:
e8:d9:68:12:6a:36:87:32:21:c3:e1:0e:e0:0a:32:4f:8b:c6:
4b:38:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org