Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/q39-6BQ6iWykwoOdIQ2hVL8IPaU.roa
File: q39-6BQ6iWykwoOdIQ2hVL8IPaU.roa (raw, json)
Hash identifier: nxBApspMPFAYPMEi2tSyuedgy3i6emVKsSE2T54O2F8=
Subject key identifier: AB:7F:7E:E8:14:3A:89:6C:A4:C2:83:9D:21:0D:A1:54:BF:08:3D:A5
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07FD
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/q39-6BQ6iWykwoOdIQ2hVL8IPaU.roa
Signing time: Tue 29 Sep 2020 10:06:42 +0000
ROA not before: Tue 29 Sep 2020 10:06:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18185
IP address blocks: 120.126.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB7F7EE8143A896CA4C2839D210DA154BF083DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:fa:cb:67:da:17:8c:fb:90:89:e4:45:8c:
cd:aa:b7:86:bf:12:63:4d:25:29:98:e1:2d:c8:1b:
66:6e:7b:7e:47:54:99:e5:1e:36:9c:c3:c4:48:09:
0e:09:7f:bb:9d:53:65:37:62:89:50:fa:f9:e6:b3:
6f:3e:e1:a2:4b:c5:07:1c:3b:f3:b3:73:5d:52:53:
95:ae:9d:a1:f2:c4:1e:74:bf:ef:6a:ca:4e:20:eb:
29:61:04:91:ea:57:af:9d:6b:f5:d7:b0:38:f7:fc:
f6:81:be:55:7b:80:11:38:8e:7e:84:6a:19:2a:54:
ba:a2:4f:82:a3:bd:cc:31:05:79:ba:8e:aa:22:f2:
cd:24:a9:71:05:2d:98:fc:60:2f:18:9f:17:7d:3b:
d6:f7:e4:52:96:f0:93:b9:a3:ba:d0:a6:48:6d:f7:
5c:10:f8:10:0a:2a:40:2f:ea:a4:02:f6:9a:91:38:
82:97:0d:54:91:71:86:29:68:de:29:0f:a6:26:00:
9a:c4:26:81:67:8d:7c:a5:d4:0d:dc:ca:de:a6:b4:
e1:6d:d8:fd:7d:5c:c0:05:81:f2:e1:27:ef:6b:ef:
62:16:4a:c3:8b:f0:b9:15:51:c2:44:a1:d6:62:53:
f9:57:d1:34:32:fc:11:7a:ad:8a:24:90:ab:e2:0f:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:7E:E8:14:3A:89:6C:A4:C2:83:9D:21:0D:A1:54:BF:08:3D:A5
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/q39-6BQ6iWykwoOdIQ2hVL8IPaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:83:42:5f:c9:32:ce:77:71:07:a4:71:fe:28:20:8e:1d:78:
41:5f:4a:cb:39:99:7d:9d:9a:2a:aa:99:df:a4:ff:fc:fe:5f:
ba:bf:4d:b3:1d:6c:00:e4:c7:77:51:c6:eb:26:95:d2:7c:0b:
c8:9a:a5:cf:d2:96:eb:3e:7d:d0:4d:f7:63:e5:73:3c:29:ed:
3f:87:c9:25:92:cb:f6:9b:3a:2d:22:1d:38:6f:3d:90:3e:69:
3c:1c:c5:81:5c:c9:3f:d5:cc:ce:99:73:b5:d6:a2:7a:52:15:
51:30:9d:2a:19:37:18:42:6d:98:3e:d3:84:44:00:8a:28:ba:
22:96:09:36:81:5d:a3:cc:bc:fa:4c:ba:cf:0c:dc:6b:d8:4a:
1f:26:42:cf:e4:5d:77:af:46:16:69:c5:4b:98:68:50:5e:38:
be:d1:cd:4c:76:47:4d:a9:dd:9d:70:b8:83:3f:85:02:60:58:
48:8d:74:b8:ac:65:e5:b2:4f:52:49:2a:58:a2:16:ea:76:bf:
7c:4f:4f:e9:78:54:b8:e4:69:65:88:d7:79:0b:26:3d:2c:e6:
5d:e0:33:5b:a7:b5:4d:d2:46:af:d4:d3:51:0a:5b:51:54:ab:
7f:91:8a:ca:bf:86:4a:2a:a0:99:91:5b:bf:c5:a1:30:34:7e:
86:51:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org