Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/nqCFcYGd5ETkvkQyM6ELj-GAf-Y.roa
File: nqCFcYGd5ETkvkQyM6ELj-GAf-Y.roa (raw, json)
Hash identifier: piINmhRYDehayYQV8ogtAVw7tL57naY4uVYj4Qro3p4=
Subject key identifier: 9E:A0:85:71:81:9D:E4:44:E4:BE:44:32:33:A1:0B:8F:E1:80:7F:E6
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nqCFcYGd5ETkvkQyM6ELj-GAf-Y.roa
Signing time: Thu 15 Sep 2022 02:41:23 +0000
ROA not before: Thu 15 Sep 2022 02:41:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 210.62.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9EA08571819DE444E4BE443233A10B8FE1807FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:f2:ee:8f:d2:fb:2d:50:d3:8d:44:38:f2:
a8:02:ce:d4:65:45:2b:a0:ba:74:cf:10:74:93:3d:
d4:dd:7b:e0:cb:f0:ec:b2:98:0c:81:81:a9:5b:d7:
2a:b7:32:9b:d6:e8:e3:80:1f:82:9b:06:f0:cc:88:
18:ee:db:fa:da:e2:36:33:3e:04:fb:2d:cb:ee:da:
2f:17:c2:c0:d4:70:f4:6b:f7:08:0c:66:fc:9a:71:
f3:0c:a3:6c:d2:07:3c:6f:a3:f2:15:d2:db:42:e8:
e1:df:ff:27:51:76:12:53:42:ce:26:ab:bb:2f:36:
9f:ec:30:7b:35:14:90:05:2a:3f:e3:32:2d:55:e8:
40:d8:19:2f:f9:25:5c:da:16:03:3f:5c:d0:85:1a:
c5:91:af:58:c2:74:37:10:f7:0a:9c:0b:6c:17:5f:
fe:cd:4e:88:10:0b:c0:84:e4:c7:e4:ef:85:c8:07:
70:33:57:1d:07:fe:a5:f8:1b:f9:4d:eb:8a:23:72:
80:30:be:b9:e4:76:d9:73:cd:b7:f5:8c:e0:c3:1c:
75:67:ae:4e:16:09:68:13:4e:a2:f3:14:36:70:74:
80:c5:d2:c1:b7:de:e1:52:48:f7:62:be:c6:e7:31:
2e:9b:42:43:ee:7a:78:aa:a3:0d:37:bb:1a:01:64:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:85:71:81:9D:E4:44:E4:BE:44:32:33:A1:0B:8F:E1:80:7F:E6
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nqCFcYGd5ETkvkQyM6ELj-GAf-Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:9a:6b:54:e6:23:4f:59:7a:9b:fb:9b:34:da:0a:60:e6:d1:
27:fc:41:6a:31:8c:e2:5d:ff:2b:a3:35:80:07:3f:41:b0:7a:
96:2f:1d:d5:4f:95:fa:d5:30:f0:24:f0:a8:83:e4:f4:d7:b4:
51:2c:3e:15:27:8b:bd:93:a1:cc:41:83:ff:2d:8d:d8:60:74:
b6:51:c9:1d:cd:cd:ff:9f:74:84:56:42:cd:8f:da:f7:aa:01:
7e:7f:8d:6f:32:89:de:00:57:39:7c:ba:39:e7:e5:3c:8d:22:
b6:4c:63:0a:00:97:5f:87:72:81:14:e8:bc:67:05:13:d4:f2:
37:57:3f:9a:78:87:9a:9f:52:8e:82:77:8d:ef:1b:8e:3b:3f:
e8:cb:c9:28:bb:12:e9:94:3f:57:90:7b:7d:8a:2f:bd:54:78:
be:c3:03:4c:2d:bb:aa:e2:91:c2:9c:95:31:fb:41:32:87:d3:
f2:04:26:e3:3e:6b:88:05:25:b0:60:35:13:c1:a9:cb:9d:1f:
61:8a:3f:dd:65:57:24:b9:fe:df:fa:39:d4:07:84:18:b7:75:
5a:02:ca:83:87:59:39:63:73:80:e4:87:fd:2f:fe:46:49:78:
83:12:a1:c9:8b:b5:c0:22:d8:66:7b:d2:cd:37:73:88:d0:11:
d3:46:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org