Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/oVJnonbfocs4dInbJfa0R9rG8EQ.roa
File: oVJnonbfocs4dInbJfa0R9rG8EQ.roa (raw, json)
Hash identifier: w6lX7+2qoOuTlsgdCZDOhTk2qqO+SCr+GWekeE48Do4=
Subject key identifier: A1:52:67:A2:76:DF:A1:CB:38:74:89:DB:25:F6:B4:47:DA:C6:F0:44
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oVJnonbfocs4dInbJfa0R9rG8EQ.roa
Signing time: Thu 15 Sep 2022 02:41:17 +0000
ROA not before: Thu 15 Sep 2022 02:41:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18185
IP address blocks: 120.117.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A15267A276DFA1CB387489DB25F6B447DAC6F044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:49:9e:1c:5f:ad:5b:f7:96:b3:b9:b6:ac:
d7:12:f6:60:fa:ea:52:ee:48:61:51:74:ca:4c:cc:
68:49:cb:62:25:a2:5d:ca:bb:a9:a7:a2:e7:34:61:
59:27:f0:de:99:be:73:95:d9:c3:0f:ff:03:ba:56:
d6:62:47:61:08:be:31:b0:40:1a:33:96:96:e1:72:
ba:13:8a:11:eb:32:b8:b1:15:82:62:61:e7:69:95:
dc:51:a4:9d:e2:a0:2f:27:e2:09:2e:38:a2:21:7a:
f9:bb:93:b2:ef:8f:5e:eb:f9:74:c4:36:5e:41:fd:
c5:d3:ce:5a:ce:72:7d:e0:5e:aa:09:07:45:99:da:
af:1d:29:f5:16:ba:02:eb:ee:08:f0:a6:d8:6d:f5:
a9:e0:d6:34:79:c6:00:84:7b:9e:e7:4d:81:54:0a:
6f:22:fa:86:e1:aa:63:45:e4:a6:88:27:19:fa:ed:
ee:1d:ee:91:78:c5:8a:52:df:e3:ca:f6:f3:0f:37:
9b:db:5c:61:88:05:6a:26:2d:d3:6d:78:4e:cc:da:
6a:f6:32:a5:bb:27:3f:06:06:f1:09:e2:8f:c1:38:
28:66:70:39:4b:b4:c3:16:4c:85:61:3d:d8:2d:6c:
5a:03:61:0b:e6:d2:ea:d4:78:b8:9e:9d:7f:75:78:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:67:A2:76:DF:A1:CB:38:74:89:DB:25:F6:B4:47:DA:C6:F0:44
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oVJnonbfocs4dInbJfa0R9rG8EQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.2.0/24
Signature Algorithm: sha256WithRSAEncryption
10:36:0c:51:a4:a0:01:63:85:df:bb:28:7d:bd:24:4a:4d:71:
38:58:bb:db:72:a9:d0:e0:9e:8a:32:5f:47:4d:50:8f:c1:72:
6e:44:74:16:11:3a:87:05:35:e3:00:15:97:dd:d6:8b:76:15:
7c:dc:d6:6a:13:80:76:5c:bd:88:88:04:68:71:24:7f:56:64:
5d:92:76:a5:07:14:d1:35:04:a7:fa:1a:d5:af:7f:b1:79:b1:
d2:1f:88:eb:04:d1:bd:44:d5:ac:f6:8d:0c:1d:a5:ba:77:2a:
e9:06:b5:43:0f:43:18:90:6a:79:2e:89:b7:5c:cd:2c:98:99:
97:7e:20:21:3b:74:f3:e1:a5:ec:42:59:c1:17:f1:bc:4e:37:
86:38:e2:0e:3f:52:a1:15:01:b3:6f:12:4e:8c:d2:12:c5:bc:
3d:b3:9e:f3:82:7b:a1:92:89:b2:76:7c:4f:4f:36:34:93:d4:
b1:10:77:aa:96:ef:2b:43:b8:72:16:60:c2:65:ef:b0:e5:2a:
1b:b9:dc:64:f8:23:3f:11:26:8d:19:47:26:fa:fb:cb:44:a1:
e6:2b:78:42:a4:2b:11:9a:b6:79:e1:38:9c:19:77:b9:47:5d:
d5:62:25:6c:1b:06:20:60:ad:37:08:bd:ab:1a:fb:bb:96:4f:
3d:22:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org