Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mWwcafFL6XY0AMYokFV3Xf4BBME.roa
File: mWwcafFL6XY0AMYokFV3Xf4BBME.roa (raw, json)
Hash identifier: /400pp9z6qgFQTsQXb9qbBqLorMhzT2bZ4qGFGJqqwg=
Subject key identifier: 99:6C:1C:69:F1:4B:E9:76:34:00:C6:28:90:55:77:5D:FE:01:04:C1
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 09A6
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mWwcafFL6XY0AMYokFV3Xf4BBME.roa
Signing time: Sun 07 Feb 2021 12:39:29 +0000
ROA not before: Sun 07 Feb 2021 12:39:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 192.83.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:39:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=996C1C69F14BE9763400C6289055775DFE0104C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:1f:71:f4:b5:3f:2b:b5:29:68:76:34:bd:
81:8c:8d:fd:76:04:59:b3:0a:24:b1:f5:87:4b:c4:
6b:d5:22:50:4b:fc:fb:4d:6c:b6:77:e4:1d:db:87:
fb:4b:e2:0b:97:ce:4a:e3:a4:f6:66:5a:07:3d:e1:
f2:48:1b:fb:75:37:e7:62:08:c8:2b:81:79:17:90:
b7:76:91:90:0e:89:79:66:64:42:3f:bb:84:c1:79:
62:bc:03:9e:a8:8a:f9:c5:a0:82:b1:80:9f:f8:6b:
8f:cd:5d:54:f8:89:21:5e:d9:b3:3c:4a:45:51:f3:
02:9a:61:27:68:46:06:0b:a6:7b:0d:38:8a:78:e6:
27:a2:03:a1:36:1b:85:27:cb:4e:b0:2e:a3:62:18:
f4:3a:ae:d7:c8:d0:4d:60:ed:28:5f:15:d7:6c:a6:
52:3f:94:df:5c:df:3d:7b:35:d4:b1:ab:dd:60:a7:
91:26:a6:c0:65:fd:6b:5a:e7:ca:bf:59:00:2e:13:
8d:38:e2:0e:0a:49:df:03:9c:1d:02:e0:82:77:85:
6c:fd:e2:ad:85:3d:4f:1d:3d:c4:8d:f7:b7:81:c3:
b1:9c:1e:df:0e:7c:48:7a:40:93:34:e7:ab:c1:d2:
ed:68:9f:f2:23:4c:1d:24:e0:88:c1:66:85:50:8f:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:1C:69:F1:4B:E9:76:34:00:C6:28:90:55:77:5D:FE:01:04:C1
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mWwcafFL6XY0AMYokFV3Xf4BBME.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f6:e1:46:c1:df:f6:97:96:b0:82:d1:e6:bb:8f:1c:30:e8:
32:03:0d:c4:dc:bb:99:8a:a7:e4:96:e7:00:eb:15:4a:2d:0b:
eb:2e:85:b1:76:de:d9:7d:f2:1c:4d:9f:6a:bb:84:1b:90:02:
a5:81:d2:8f:ca:6e:14:6b:09:39:8d:22:9f:75:44:36:05:b1:
66:b7:82:dc:3a:ae:d0:f1:c2:94:6c:d4:e8:e0:0b:41:76:b0:
15:2a:c9:85:61:d1:a2:1f:57:6b:b4:de:a4:46:0e:aa:86:8a:
02:61:89:11:83:9e:33:2d:6e:93:40:b1:98:f1:30:9c:a2:5c:
46:f4:b7:ff:92:a8:aa:5a:b4:41:9b:27:61:ad:91:71:80:79:
84:4a:67:90:92:be:bb:4d:8d:a2:ec:d0:8a:aa:e8:01:ee:6f:
97:56:90:e6:85:e9:0d:e8:90:0a:5c:3a:56:f2:18:65:3e:7a:
07:d0:2c:26:84:4e:87:2e:a8:49:a9:9d:de:d3:0f:ff:e2:53:
a2:be:4d:02:59:7a:32:de:87:96:65:f7:cd:f3:28:f9:e9:4a:
ef:bb:f5:0d:37:ba:07:50:16:fb:4e:b4:0b:19:4d:16:36:80:
27:e4:a2:73:f8:ef:82:28:52:50:91:25:f1:43:2a:23:9f:08:
7f:d5:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org