Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mGhg73QyytA-6VsuWV5K_r51AE0.roa
File: mGhg73QyytA-6VsuWV5K_r51AE0.roa (raw, json)
Hash identifier: sOZRumCIcCle6Vq5lzsUEIrHTgo6JG/olUJI9WOKIlI=
Subject key identifier: 98:68:60:EF:74:32:CA:D0:3E:E9:5B:2E:59:5E:4A:FE:BE:75:00:4D
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0990
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mGhg73QyytA-6VsuWV5K_r51AE0.roa
Signing time: Sun 07 Feb 2021 12:39:00 +0000
ROA not before: Sun 07 Feb 2021 12:39:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38845
IP address blocks: 140.136.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448 (0x990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:39:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=986860EF7432CAD03EE95B2E595E4AFEBE75004D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:be:da:86:47:d8:c0:a7:c1:a9:6d:a5:f5:
1d:30:86:9f:1c:95:d4:06:9f:c8:e1:66:c7:89:4c:
2c:3c:53:39:86:f9:2c:9c:61:83:66:ad:e7:62:5d:
82:4f:b4:e0:10:98:3c:09:99:25:41:d7:87:46:e2:
b6:e5:29:61:0a:ec:87:90:99:66:cf:69:21:b2:dc:
24:00:47:a7:2c:5a:2d:64:ca:34:02:80:35:a3:e2:
b8:0a:01:62:f4:d8:ef:03:ef:05:c2:c0:d3:ad:25:
51:87:a6:c8:79:4b:ce:13:68:87:39:93:da:e8:4d:
50:13:91:97:0c:eb:bb:f2:d1:98:6f:90:35:16:49:
3a:98:d2:a6:7b:34:9f:c8:3c:ee:85:f9:7c:59:a4:
e1:75:62:b1:aa:7d:32:ad:a0:55:3e:54:90:82:b8:
9b:49:db:0b:a4:36:0b:a0:ba:cf:db:bd:bc:06:8a:
80:6f:8f:7f:f4:96:cb:3c:7b:f9:46:c4:80:3d:b5:
94:ab:cc:70:30:74:ac:eb:e8:8d:9e:23:1d:cb:5f:
73:fb:3e:b8:7a:96:4b:0b:95:b6:dd:93:6c:44:52:
92:65:4f:d3:ec:c2:d5:1f:c4:a0:51:47:3c:ea:f1:
fc:73:22:34:6f:72:d4:e6:df:e5:e5:c6:06:21:aa:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:60:EF:74:32:CA:D0:3E:E9:5B:2E:59:5E:4A:FE:BE:75:00:4D
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mGhg73QyytA-6VsuWV5K_r51AE0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:23:f1:0c:ab:4a:bf:a1:3a:e3:96:55:0b:05:00:56:36:80:
7e:7b:9e:70:7b:a9:b2:27:f4:05:b0:61:a3:98:92:a5:a9:9f:
92:76:85:a4:f4:3f:ec:ad:f1:e0:2a:0e:a1:e0:2e:16:86:5d:
d6:c2:3a:a4:89:7b:3e:97:fe:7b:8f:f7:19:33:66:c6:ab:d1:
cb:46:9f:3c:a9:73:34:1c:a9:5d:1c:ad:df:f5:71:e1:10:31:
cc:de:a7:ca:25:d7:32:36:a6:f7:19:d3:27:65:4a:77:a0:e2:
76:ba:89:52:32:73:0b:b7:d9:73:ad:de:3a:a0:9b:89:58:3d:
90:01:12:7e:40:c9:cf:18:2a:85:d6:28:2c:ae:d0:dc:ab:2e:
48:d3:95:46:1b:ee:47:52:52:4b:c2:15:2e:52:27:c2:ff:88:
1b:99:87:ae:da:b5:1d:8c:e2:38:0d:b7:04:9f:83:60:7d:eb:
38:99:ad:01:a9:3a:03:0d:a6:dc:fa:83:8c:b0:d8:81:4e:10:
20:ff:03:57:30:b9:5c:46:c7:d1:78:4e:a8:53:33:14:f9:a8:
4e:6f:a3:75:d4:81:7a:27:6b:25:b3:90:83:20:93:98:b6:8c:
12:2f:b8:49:f2:cc:9b:9b:82:74:d8:56:48:50:c1:5c:28:11:
5e:c2:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org