Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/jCC5GoisJJCUyA10xhXEGY9-XEk.roa
File: jCC5GoisJJCUyA10xhXEGY9-XEk.roa (raw, json)
Hash identifier: z8C4rDwwd1YUunaSFc3vjwnWfUGnxKrqFs1/qxNJUao=
Subject key identifier: 8C:20:B9:1A:88:AC:24:90:94:C8:0D:74:C6:15:C4:19:8F:7E:5C:49
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/jCC5GoisJJCUyA10xhXEGY9-XEk.roa
Signing time: Thu 15 Sep 2022 02:41:11 +0000
ROA not before: Thu 15 Sep 2022 02:41:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38844
IP address blocks: 210.60.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C20B91A88AC249094C80D74C615C4198F7E5C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:57:85:31:b5:18:ab:93:71:8e:e9:f5:3c:
3f:a5:a1:26:5c:d9:14:bb:6d:85:9c:1a:62:ff:66:
f5:50:25:dd:ea:70:5d:00:de:73:e4:95:d4:e2:a8:
eb:2b:5f:98:93:5e:19:cb:63:32:71:bb:8d:e6:fb:
ba:15:7c:ca:ad:a4:f4:b2:be:de:84:45:1a:b1:03:
39:39:6d:b0:da:ba:2d:52:3d:ee:97:9c:37:f2:86:
36:55:61:55:b4:2c:d5:5c:cd:60:1d:96:6f:92:f1:
d5:35:5a:c1:c1:37:95:b0:66:36:e7:b3:56:4a:28:
45:c2:da:52:3a:99:76:77:55:5f:7e:33:18:9c:3e:
ed:9d:73:43:62:b6:f2:71:75:58:2d:f1:5a:ba:4a:
32:c7:2a:bf:84:e3:07:8a:9d:11:34:4f:16:98:ed:
8f:ca:cf:ba:49:02:51:d8:d3:db:a6:42:e7:d6:3b:
a4:78:b3:7f:40:59:34:b1:3c:00:11:7e:7c:33:a1:
f0:09:79:de:20:54:63:84:0d:d6:be:c0:63:47:c4:
cc:c1:59:ae:ba:e9:9b:ac:df:d6:77:cd:85:d5:c3:
f5:d6:88:fa:20:7a:e8:e0:65:84:9a:13:53:57:62:
07:59:17:ba:25:82:21:8f:47:09:6c:23:4a:2e:da:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:B9:1A:88:AC:24:90:94:C8:0D:74:C6:15:C4:19:8F:7E:5C:49
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/jCC5GoisJJCUyA10xhXEGY9-XEk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9a:a8:49:7b:c9:08:95:57:56:48:e0:79:81:00:ff:4a:99:
e2:d0:2c:fb:93:50:aa:5e:42:d9:30:7d:19:ca:8c:96:0f:0f:
e9:60:6b:0a:4b:cc:70:6a:d8:19:e6:b1:ba:5f:09:28:22:f0:
b5:df:b7:d0:ae:8a:21:7b:89:27:8d:ac:da:f0:2c:a4:86:52:
23:0d:76:d2:d1:1b:21:96:9b:f1:44:0f:d1:55:8e:54:60:2e:
75:5c:52:32:cf:40:3c:73:00:6d:66:f9:1a:cf:4d:a5:cf:27:
29:c7:72:c8:32:5b:f4:67:7f:c0:0d:f7:9f:1f:75:00:fa:76:
54:ee:64:20:b0:c2:69:3a:e1:5d:7d:05:c7:a8:27:3e:09:2e:
63:b0:96:e3:4a:7e:c6:f2:f2:e7:c1:94:b8:a6:2c:49:d2:f7:
44:48:19:fd:33:74:ae:cc:36:a1:1e:fd:1b:60:b2:1a:19:34:
9e:c5:54:9c:df:f3:dd:50:06:c0:72:b7:f2:73:15:95:b3:a6:
ee:3a:84:a5:46:a8:26:f7:2c:11:ed:10:10:bd:41:8d:97:55:
45:55:1c:b2:fc:01:d0:1d:ca:d7:05:7f:8c:ae:4b:dd:ac:47:
a1:cb:0b:7a:6d:5e:3c:35:78:03:a9:8a:e7:66:14:dc:8f:ad:
c8:60:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org