Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/j-c2ElIuP91Y7F9ZDqixMUt2AGE.roa
File: j-c2ElIuP91Y7F9ZDqixMUt2AGE.roa (raw, json)
Hash identifier: zbAizbVEP7kttWUH2CiRy5zOBXu9auE08cz5S0iPfa4=
Subject key identifier: 8F:E7:36:12:52:2E:3F:DD:58:EC:5F:59:0E:A8:B1:31:4B:76:00:61
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 09D8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/j-c2ElIuP91Y7F9ZDqixMUt2AGE.roa
Signing time: Sun 07 Feb 2021 12:39:13 +0000
ROA not before: Sun 07 Feb 2021 12:39:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 163.24.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2520 (0x9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 7 12:39:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8FE73612522E3FDD58EC5F590EA8B1314B760061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:83:63:2b:7c:fb:7c:9f:87:4b:66:62:58:
5c:31:bf:51:b2:4a:ae:34:5c:33:d2:d4:a1:c4:9b:
4d:21:3d:bd:83:89:b0:b0:4f:f8:6f:6d:46:90:75:
25:13:d0:73:89:09:fa:00:90:ea:34:66:18:46:29:
e7:35:7f:be:24:6c:42:1c:c5:60:0b:c3:61:d5:68:
ed:7b:cd:f5:93:a6:19:b0:92:f0:a3:b6:94:7b:8f:
7b:59:93:47:04:44:7a:31:7f:73:6a:fd:c6:94:00:
3e:3f:d4:f3:07:45:8f:af:e4:1c:7f:af:e5:16:06:
05:0b:9e:57:fd:f4:d4:4c:fb:c4:79:ab:e3:6d:c5:
78:a7:63:0f:0b:7d:d8:da:3a:f9:c0:58:3e:42:da:
8d:9e:93:76:20:36:82:63:b5:44:f7:2e:80:d4:f1:
7f:e0:c0:51:78:6e:4a:9b:3f:83:87:85:32:91:f0:
60:51:78:05:35:7c:6c:c5:a7:9b:90:65:13:6d:c5:
48:f5:23:e3:ef:44:50:e3:0d:45:f6:ff:d2:93:9b:
1e:f5:81:44:9f:f9:db:57:63:6b:64:6a:89:9b:f1:
16:38:08:7c:c8:c9:d1:6f:73:bd:03:66:82:05:79:
14:a3:04:c9:c6:f9:9a:e8:c4:90:1b:2b:17:b2:7c:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:36:12:52:2E:3F:DD:58:EC:5F:59:0E:A8:B1:31:4B:76:00:61
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/j-c2ElIuP91Y7F9ZDqixMUt2AGE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
60:55:35:64:44:cd:c5:3e:ae:dc:24:a6:76:05:e3:13:41:28:
c9:f8:b6:74:91:8d:02:01:17:89:e3:9d:df:00:02:40:49:98:
8f:21:f0:9f:dc:ff:48:d3:2e:f9:0b:46:f9:91:8a:d0:df:0a:
30:31:19:9d:87:c4:74:c7:db:ef:e4:85:ad:4b:40:64:0a:c4:
06:85:cd:6a:e8:a8:ed:78:ac:4c:f8:24:16:b0:5e:42:ea:31:
80:81:7b:af:78:24:e9:85:88:5e:40:be:c6:ad:68:58:63:79:
64:da:95:21:21:d4:89:f5:9f:38:68:97:90:ae:19:98:36:e6:
ad:89:85:54:ac:74:28:10:4e:a7:f0:d0:31:ab:00:8b:45:c2:
e1:23:8a:52:66:11:b2:70:fe:35:09:3a:1f:5e:59:5f:1f:8d:
4a:2d:d6:9a:a6:4e:9b:1b:fb:99:18:2f:8b:fb:94:78:c1:b3:
24:20:69:14:6a:29:02:b9:9e:2a:6a:96:40:b1:c4:e7:67:ac:
38:3c:eb:3e:c0:75:90:cd:16:4f:12:81:41:2c:02:32:f0:34:
0d:37:82:fd:16:2b:9a:fe:85:3f:2d:a5:dd:0e:3c:10:10:f6:
0c:36:10:58:92:a7:12:aa:c2:5f:b7:a1:d7:92:92:8e:53:ee:
4c:e2:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org