Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/oj_mCVJ7eS8dCsW-HqPjFF2vKOA.roa
File: oj_mCVJ7eS8dCsW-HqPjFF2vKOA.roa (raw, json)
Hash identifier: IAE81Swf7d02jYic5R4fRmRe4/FbKLfMXoG1+5Kiu3Q=
Subject key identifier: A2:3F:E6:09:52:7B:79:2F:1D:0A:C5:BE:1E:A3:E3:14:5D:AF:28:E0
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 09BC
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oj_mCVJ7eS8dCsW-HqPjFF2vKOA.roa
Signing time: Sun 07 Feb 2021 12:42:41 +0000
ROA not before: Sun 07 Feb 2021 12:42:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 140.110.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2492 (0x9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:42:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A23FE609527B792F1D0AC5BE1EA3E3145DAF28E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:38:06:05:2f:23:66:b1:51:e3:72:35:4a:
44:5d:be:87:30:65:df:0a:87:07:5d:36:69:57:25:
72:08:46:04:f0:f7:b4:98:a8:72:34:db:f8:83:2d:
29:23:f5:fd:92:58:e7:a2:1b:8f:6d:b2:8d:be:e2:
70:d1:d6:aa:6b:df:1f:7c:59:dc:cd:3a:71:3b:c6:
32:53:66:65:3c:2a:0f:b0:37:ba:a2:62:e5:cd:83:
a1:01:3d:ca:a9:50:84:9d:d5:f9:12:0d:a3:8b:fd:
e5:94:01:1e:d8:93:47:2e:8d:21:b6:16:97:0d:8e:
cc:11:a1:e1:51:4e:21:cc:1b:0b:2a:18:34:32:2e:
6e:fc:02:ec:99:87:d6:00:a1:7d:f9:20:aa:64:43:
7a:4b:6e:bd:49:f9:25:a7:d0:f8:4e:54:95:2b:92:
64:f1:97:6e:e8:9c:37:d7:9c:fe:9c:2e:43:b3:85:
1c:14:2c:fc:0b:05:f2:c8:81:65:9b:6a:5c:c2:f1:
15:e7:87:9e:03:1f:4d:52:6d:fb:18:e3:fb:a7:d1:
68:73:29:67:b3:22:c1:2d:cf:07:4d:8c:4b:cb:26:
fb:11:f4:28:db:46:9e:47:58:ae:db:69:92:2c:2a:
7a:30:e0:b1:db:39:92:22:cd:36:5c:93:d5:4c:9e:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:E6:09:52:7B:79:2F:1D:0A:C5:BE:1E:A3:E3:14:5D:AF:28:E0
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oj_mCVJ7eS8dCsW-HqPjFF2vKOA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.110.0.0/15
Signature Algorithm: sha256WithRSAEncryption
83:30:61:69:78:27:f7:dc:32:62:1b:cc:03:14:fb:05:57:35:
6d:5b:25:c1:51:67:1f:49:8f:d7:8f:08:c5:aa:6b:09:dc:1a:
9d:2e:63:cb:44:1d:46:91:e7:7c:ea:20:36:7c:46:b2:31:7c:
57:3b:ca:d3:9f:ca:e2:33:dc:1c:45:8c:4e:65:65:39:5b:0f:
7c:f0:b2:c4:bb:1c:01:ff:d2:9d:7d:04:cc:66:dd:ac:46:12:
2b:3a:2e:d0:09:33:4f:02:8a:de:06:6f:d4:9b:8e:f1:49:ed:
ba:6d:2b:72:56:8a:4a:ce:b8:0f:b8:24:f5:0a:f3:97:3c:40:
83:47:c2:20:68:68:a5:1c:0c:8f:7a:af:d5:97:36:2d:ee:64:
54:8b:d3:5e:b8:c8:79:f1:c4:1b:30:ce:6d:fd:66:fa:e5:14:
b8:e9:0d:42:26:b7:64:55:0b:2f:59:58:26:f6:6b:6d:31:4a:
f5:11:28:3d:a7:6c:b4:4b:52:e0:e1:99:05:a4:d5:46:77:61:
a3:1b:ca:d0:77:dd:04:c7:30:28:6b:e4:3a:87:09:6a:26:b5:
2e:65:36:c4:b9:46:29:f3:3f:e6:8b:cb:1d:f2:a9:60:6b:a6:
c2:f8:1f:3f:a2:2c:33:be:1e:d8:91:f8:b5:06:0a:47:93:b7:
2c:34:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org