Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/kxOBYcn9H4h-Z5VNqiVVWtvH_yg.roa
File: kxOBYcn9H4h-Z5VNqiVVWtvH_yg.roa (raw, json)
Hash identifier: xf4o+70JESegJdpT17Aujknsyr1cX3pf3s/HaRtjBEc=
Subject key identifier: 93:13:81:61:C9:FD:1F:88:7E:67:95:4D:AA:25:55:5A:DB:C7:FF:28
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0A84
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kxOBYcn9H4h-Z5VNqiVVWtvH_yg.roa
Signing time: Wed 29 Sep 2021 02:41:19 +0000
ROA not before: Wed 29 Sep 2021 02:41:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9916
IP address blocks: 140.129.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 02:41:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=93138161C9FD1F887E67954DAA25555ADBC7FF28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:1c:67:df:ca:7e:2f:0a:54:c4:1d:b1:91:
1c:73:36:91:71:fb:13:6a:7d:a6:03:a1:7c:23:e7:
97:50:d7:0f:a0:b3:0c:dc:af:85:71:55:83:5f:5d:
9f:f4:96:e2:f0:b0:a4:2e:ff:71:c6:5e:7c:75:59:
38:5f:58:e8:0b:ee:3d:17:56:c2:c4:fd:cc:9b:fb:
2d:3b:25:78:3f:d3:9a:ae:ab:92:8f:3f:92:99:42:
46:d8:27:15:b3:a8:fc:d5:bb:40:4c:ac:e2:6d:cb:
fb:6d:54:e7:f2:34:ea:f1:74:06:39:32:c7:bc:85:
8b:1c:85:99:e3:d6:1a:fb:e9:94:d6:42:71:88:89:
f7:e9:43:4d:ea:59:7e:c1:d5:3d:97:c2:f1:35:cb:
87:e3:af:3d:5e:50:27:99:64:e9:90:79:78:1f:bc:
86:be:8c:22:ef:2a:41:c5:89:3d:32:76:d6:29:6b:
ab:15:b1:b4:5b:a5:0f:33:7f:32:ad:52:fa:ce:4f:
51:88:30:ec:0f:ab:54:b9:e1:f2:f6:11:6d:a7:6e:
77:33:e9:82:07:0b:18:dd:9a:a3:15:06:00:b1:e9:
cd:b4:48:b1:a2:49:77:6d:c6:19:2e:2f:d2:0d:a7:
24:cc:2d:b6:ae:e1:5b:54:90:3d:ca:d9:ef:a7:9f:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:81:61:C9:FD:1F:88:7E:67:95:4D:AA:25:55:5A:DB:C7:FF:28
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/kxOBYcn9H4h-Z5VNqiVVWtvH_yg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.129.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9b:61:5e:7b:35:0c:2c:54:2f:fa:b6:ba:cb:9a:74:b3:d5:
8e:3e:00:58:9d:7b:ee:fd:45:f0:32:6d:78:ca:8d:41:1b:58:
47:7a:cb:b8:08:c3:a7:92:33:e7:4a:c0:62:26:07:49:82:d0:
3f:09:25:1d:cb:46:f4:39:64:3f:a3:1a:2f:58:e6:06:bf:1f:
c0:8a:50:c0:f6:3b:b7:1f:f2:e1:1b:23:f4:62:0d:c9:66:53:
58:f2:5a:bf:46:f4:e7:72:7c:a4:49:47:01:21:8f:e4:33:e1:
7e:5f:43:c4:04:76:3d:b1:8e:f5:7d:39:fc:c9:83:96:0b:0e:
0f:ce:64:22:fd:ab:36:c9:10:08:55:f2:de:da:30:9b:b9:7d:
3d:8c:2f:70:e7:72:77:fe:ee:ee:45:e0:09:36:a7:dd:66:63:
1a:4d:37:19:33:4a:e8:ee:b1:7c:67:0e:7f:01:97:97:fe:f4:
17:dc:11:cc:a5:40:4e:74:5d:b0:e8:54:78:1c:88:89:2e:e4:
26:3f:27:08:af:60:50:b7:76:92:2d:5b:a6:2e:a3:e9:8d:cc:
04:53:48:11:f2:b1:72:40:2a:7d:cb:eb:df:93:f1:94:4b:29:
05:b9:bf:ea:34:d3:39:e3:f7:2a:f4:3a:56:1e:54:d8:a9:89:
20:f0:a8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org