Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/jvgB63XEP3Ki1tef0v621jasKA8.roa
File: jvgB63XEP3Ki1tef0v621jasKA8.roa (raw, json)
Hash identifier: wqHv0Ellhp5TbRjjdSwqYjzeiE3JSqbJuBoA22a3P64=
Subject key identifier: 8E:F8:01:EB:75:C4:3F:72:A2:D6:D7:9F:D2:FE:B6:D6:36:AC:28:0F
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07ED
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/jvgB63XEP3Ki1tef0v621jasKA8.roa
Signing time: Tue 29 Sep 2020 10:06:37 +0000
ROA not before: Tue 29 Sep 2020 10:06:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 210.240.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8EF801EB75C43F72A2D6D79FD2FEB6D636AC280F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:c8:d6:3e:15:a5:8f:cd:09:8d:f4:0c:e1:
a1:d2:db:60:e9:af:b1:3c:46:24:60:44:36:82:b1:
7b:75:60:72:6d:92:07:f5:a6:32:db:ff:0f:59:e0:
9e:ac:7c:6f:fb:31:77:e6:6a:ae:57:aa:36:52:11:
57:4a:41:f8:76:7d:07:b9:55:cb:ed:0f:7e:49:39:
e0:89:f7:95:91:8c:a6:f9:4a:3d:f6:40:02:d1:5f:
13:fa:9d:94:eb:52:a7:c1:b8:b1:4c:02:53:d1:5b:
78:b1:ee:21:58:56:ab:37:9c:33:7d:4e:bd:3c:08:
fa:4b:dc:4a:8b:21:58:cd:86:30:ea:61:0a:d8:29:
49:ab:3c:61:25:e0:d8:80:cc:d8:e3:24:21:dd:04:
e1:8f:d7:4c:1f:3a:b0:b8:ce:59:0d:03:dc:34:c8:
73:13:8d:b7:d1:6b:3a:4d:2c:73:bb:f9:63:01:9a:
b0:23:45:32:61:3f:5c:0f:85:fc:6c:4a:c1:7c:d0:
bf:4f:45:4f:c4:a0:49:b1:da:ed:77:d7:3f:bc:f8:
e3:86:00:73:0a:be:fd:9f:93:2e:a9:1c:36:c6:ff:
e0:dd:38:aa:5d:eb:b9:82:a5:b6:13:96:08:67:75:
31:20:8e:ae:86:9c:60:21:d9:a4:75:e7:27:52:b4:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F8:01:EB:75:C4:3F:72:A2:D6:D7:9F:D2:FE:B6:D6:36:AC:28:0F
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/jvgB63XEP3Ki1tef0v621jasKA8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:20:90:c0:ae:9b:27:e7:3c:1b:0c:ea:26:85:5c:24:4b:6c:
a7:1f:a6:a7:27:e0:2b:98:d7:1b:0f:4b:e4:4d:1a:17:08:d8:
16:db:bd:6a:e4:62:63:d8:84:84:20:b6:60:0b:e6:3e:03:c9:
fc:19:78:ca:1d:26:0b:87:e3:61:bb:04:50:4c:35:99:b4:40:
42:d0:27:60:f3:84:55:6b:e9:71:d1:cb:e2:ac:14:60:36:ea:
ab:ca:ee:69:4f:cf:50:91:cf:aa:65:c1:67:8c:b7:d8:03:e1:
24:c0:3f:cd:b7:db:dc:ad:64:34:e1:ec:b7:4f:0b:fd:c4:86:
64:ae:81:04:e3:2b:78:48:e2:35:f5:a1:8a:91:0d:d7:9d:45:
44:e9:a4:fe:d5:8d:74:eb:c9:54:ac:96:4f:b1:40:cb:e5:a5:
8f:ef:67:51:8f:4f:1f:d0:34:d9:e7:26:b3:45:df:4c:e4:12:
bf:ec:68:bc:5a:cf:91:ad:53:62:57:b0:2e:a3:29:34:b8:18:
e0:c7:07:07:e5:36:1a:a7:10:a1:e9:15:d0:62:d9:70:cc:93:
8a:14:df:a9:aa:a4:b0:c9:32:6a:75:86:e9:71:4a:db:24:61:
6a:94:69:45:bc:ce:88:fa:ba:a4:7f:e5:7d:c8:44:3c:e2:1d:
97:12:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org