Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/iCS-urPlgs4mTmhUeFgyG6zMCyI.roa
File: iCS-urPlgs4mTmhUeFgyG6zMCyI.roa (raw, json)
Hash identifier: ZDRzwqCtWblxhn9ED1iZKdd72Il39HiaR+ym+I8ZSIo=
Subject key identifier: 88:24:BE:BA:B3:E5:82:CE:26:4E:68:54:78:58:32:1B:AC:CC:0B:22
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07DD
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iCS-urPlgs4mTmhUeFgyG6zMCyI.roa
Signing time: Tue 29 Sep 2020 10:06:34 +0000
ROA not before: Tue 29 Sep 2020 10:06:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 163.30.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8824BEBAB3E582CE264E68547858321BACCC0B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:ac:51:a0:83:34:87:1c:c8:fb:bd:36:b4:
19:93:9f:03:1e:6d:67:e8:df:3c:69:51:d0:a6:ce:
28:a7:ef:13:57:5e:88:a0:55:18:ca:c6:06:0e:3f:
7d:e4:78:83:3f:62:ee:5f:7c:73:f0:ca:23:5b:32:
29:9d:b5:c4:09:59:fe:6d:b7:ff:4b:36:81:6a:ea:
26:c8:32:2d:13:73:34:ae:07:a7:39:28:64:fe:ee:
3d:0b:58:5d:6a:2b:07:35:57:fb:a0:c0:1a:fc:bc:
b7:d1:92:2f:16:c3:81:57:0d:42:b0:c1:30:e2:a7:
27:e4:6b:4a:cf:8b:3c:82:09:46:32:3e:ef:54:69:
11:ae:fc:a6:8f:b9:02:b6:11:6b:73:62:79:75:40:
f4:d3:28:a5:64:6c:77:27:b8:70:cd:3e:27:c0:4a:
20:dc:a6:cf:6e:2c:3c:ba:07:96:69:a6:c5:d5:b3:
ff:04:77:24:17:4d:c1:14:c6:d8:7a:d8:04:27:75:
f1:58:7a:d7:2a:e7:b8:d3:af:8e:3b:33:e0:58:11:
9b:26:82:90:ae:9b:82:79:1d:7c:bc:c4:b6:db:45:
2c:84:ce:49:c4:98:62:92:f7:91:79:af:b6:fd:9b:
bb:fd:41:64:4a:13:f9:3e:4c:a0:9b:4d:46:56:7d:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:BE:BA:B3:E5:82:CE:26:4E:68:54:78:58:32:1B:AC:CC:0B:22
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iCS-urPlgs4mTmhUeFgyG6zMCyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.30.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9e:9e:ba:a3:dc:41:a2:e7:6e:3e:c6:24:20:2d:49:a5:79:4d:
eb:f8:c5:af:2b:e1:21:ee:12:7d:f8:e4:bf:20:0b:a2:e6:e2:
62:e4:ca:3f:a0:4f:6e:06:8a:12:15:eb:7c:db:a9:ca:74:9c:
2a:96:d9:b5:4c:16:61:f8:82:4d:7a:91:c6:69:34:bc:89:a5:
ae:bf:bf:27:f0:4a:4a:39:0b:df:6c:18:b9:3a:8c:09:91:86:
b0:58:1d:c5:5d:76:9f:74:34:ad:10:60:f2:86:f5:7f:aa:b1:
14:bd:7b:90:83:63:d2:b9:4f:c1:6d:ab:01:b5:ef:e6:67:0a:
b9:d7:28:af:2f:9e:ae:0e:44:d5:2a:41:ea:cb:6b:66:ea:12:
1e:3c:79:cb:1c:66:eb:e3:7c:3d:c2:69:3a:7a:93:36:54:47:
89:bf:e7:fe:c0:3c:80:89:d4:6f:26:08:33:9e:74:ad:04:b5:
c0:98:49:8b:47:77:48:69:88:b2:eb:1e:51:24:5d:67:93:f0:
2c:b5:5b:d1:d1:ee:ba:8c:63:13:3d:cd:40:d6:b8:dc:1b:9e:
d3:70:d7:a0:41:6c:95:7d:bf:e2:8d:80:6b:64:be:57:f4:b6:
3b:98:7b:87:a7:50:fd:b5:db:b4:b2:ba:da:bf:40:57:0e:c5:
6a:4e:24:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org