Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qxX_5oKby-HE_RSd83rfz6pPiJk.roa
File: qxX_5oKby-HE_RSd83rfz6pPiJk.roa (raw, json)
Hash identifier: /Eb2DG7VH0I6K4U8SMKDUOoXFLx6GSf2byjVlI0ELkg=
Subject key identifier: AB:15:FF:E6:82:9B:CB:E1:C4:FD:14:9D:F3:7A:DF:CF:AA:4F:88:99
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07EB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qxX_5oKby-HE_RSd83rfz6pPiJk.roa
Signing time: Tue 29 Sep 2020 10:06:37 +0000
ROA not before: Tue 29 Sep 2020 10:06:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18185
IP address blocks: 120.117.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB15FFE6829BCBE1C4FD149DF37ADFCFAA4F8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e1:c6:ce:d8:4b:c9:91:39:d4:69:d8:e2:aa:
69:4c:4b:27:35:21:6c:15:38:7b:2f:e9:ed:61:fa:
bb:9a:20:23:17:f2:1c:e7:77:a2:01:d4:aa:2b:e6:
49:0a:3f:0c:fa:00:51:ef:62:a8:eb:d9:6f:be:2f:
5d:f5:01:69:52:81:3f:c8:23:49:00:5a:30:64:f4:
c8:06:6c:8b:96:7f:37:fe:2a:e8:7c:d3:e7:b2:71:
18:26:ee:67:20:aa:5a:09:19:c2:2d:21:78:47:ab:
b9:13:82:de:a5:f1:e8:6c:58:e6:e6:13:17:d9:48:
c4:d2:74:fa:67:d8:4a:e5:ee:93:c2:2c:6d:a2:f4:
4c:5b:f4:95:4d:a8:7f:ad:93:b7:ad:15:71:f7:96:
6d:f3:a7:51:c5:b1:d3:63:de:1b:55:17:15:78:90:
78:37:93:61:14:cc:35:5c:a8:a9:c5:32:89:68:dc:
fd:13:7f:d3:e2:9f:df:ff:58:b3:8f:1b:4a:6d:c0:
1a:d0:63:cf:bb:cb:c2:b7:7c:b4:87:8e:5f:2f:75:
ec:60:8a:27:3f:46:cf:63:25:dd:2e:66:03:b8:28:
d2:e2:a8:61:f9:4f:1f:24:48:26:5c:48:92:c7:04:
1c:31:de:39:70:ee:57:09:96:e7:e5:2f:be:2a:69:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:FF:E6:82:9B:CB:E1:C4:FD:14:9D:F3:7A:DF:CF:AA:4F:88:99
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qxX_5oKby-HE_RSd83rfz6pPiJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.2.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cd:9f:d7:72:0f:02:0d:92:97:41:dd:87:86:d4:d6:e7:3d:
3a:df:66:0e:b9:31:b7:d2:a8:38:db:a8:a0:ac:3a:73:a8:8c:
8c:e9:06:4e:5e:f8:f9:81:fa:4d:5e:85:45:13:c9:5c:f9:2e:
27:49:14:45:58:f2:81:74:79:5b:a8:7d:a0:ec:d9:5e:5d:0d:
0b:d7:fe:b4:36:d6:bf:d1:d8:7e:77:51:51:26:26:3f:72:06:
01:77:79:b6:c1:a7:37:af:df:e9:c0:65:1c:ca:31:d2:4b:a0:
b8:44:a2:30:94:7e:74:6b:b8:21:36:1a:43:23:77:f4:80:4f:
76:e1:a1:96:a6:83:04:6d:2e:22:0f:f7:61:ac:86:61:01:6d:
d7:56:23:01:81:5d:80:a7:23:4e:ac:dd:71:63:8c:06:fd:4b:
70:0b:6f:9f:a3:09:7c:38:6e:0c:8b:57:3d:1d:e7:7f:c8:12:
4f:92:5e:13:54:95:c1:2e:59:8c:d1:6a:85:47:52:51:bb:75:
8b:88:b7:02:33:b9:58:8d:af:fe:f0:fe:6d:a4:51:3e:94:09:
40:d7:48:7f:f8:71:f9:09:0a:d4:d8:13:3f:b0:c8:ea:0d:d7:
5d:be:f6:12:94:21:de:be:0b:34:40:30:5f:79:cc:de:bc:aa:
8b:28:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org