Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/r77XCkzLWKBMn36FmfwKO46AIV4.roa
File: r77XCkzLWKBMn36FmfwKO46AIV4.roa (raw, json)
Hash identifier: RxbRFokdIiUBbAIJ2ydvuTZHvMHlxAE3IdoR/xCPl0Y=
Subject key identifier: AF:BE:D7:0A:4C:CB:58:A0:4C:9F:7E:85:99:FC:0A:3B:8E:80:21:5E
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/r77XCkzLWKBMn36FmfwKO46AIV4.roa
Signing time: Thu 15 Sep 2022 02:41:23 +0000
ROA not before: Thu 15 Sep 2022 02:41:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 163.24.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AFBED70A4CCB58A04C9F7E8599FC0A3B8E80215E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:b4:26:90:72:c0:ea:70:2a:89:5a:6d:c0:
f1:5a:83:39:92:ea:6b:82:0e:0c:9c:a2:2d:de:2d:
65:70:fe:d8:83:e1:4a:22:83:44:89:4d:4f:cd:68:
8d:83:3c:5d:7d:ae:c7:38:2c:c7:b8:bf:99:7b:8d:
d2:aa:e8:15:45:64:2e:7b:94:1d:86:d4:e8:b5:80:
f5:17:7e:37:71:73:d4:2d:01:58:7a:7c:fa:d6:ff:
43:05:b4:dc:78:b9:a9:50:d4:1c:ad:8c:dc:76:60:
af:06:4f:ed:c2:dd:7b:4a:bb:39:a4:9d:54:24:9e:
3d:22:50:8a:58:5d:a4:57:6e:3c:29:35:37:9d:a3:
36:fc:bf:9b:36:54:81:cb:e3:06:a7:54:0b:79:b3:
5d:5d:8e:88:54:f2:36:e4:91:85:87:43:f6:d4:cd:
28:c5:54:ec:48:79:f4:6d:d3:20:6f:de:f3:ba:08:
b8:28:71:73:5b:83:b6:0c:c6:f1:b5:22:50:db:19:
c8:07:71:16:68:90:36:db:08:40:dd:2b:0f:05:20:
1e:a9:d1:07:4f:7c:84:48:05:7c:e7:45:01:7b:cd:
57:63:28:03:c0:71:4b:67:af:59:63:aa:36:3c:41:
79:b3:ac:c5:19:9b:af:4d:2d:57:9d:99:89:08:d9:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:D7:0A:4C:CB:58:A0:4C:9F:7E:85:99:FC:0A:3B:8E:80:21:5E
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/r77XCkzLWKBMn36FmfwKO46AIV4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2a:e8:be:83:62:86:13:8c:da:d7:3a:34:d8:e7:e9:37:d1:0f:
92:b3:9a:7c:74:4f:ff:3c:22:57:c8:3a:52:99:d4:fe:1b:78:
c8:08:db:71:17:8b:32:0c:14:84:e1:d8:2d:ff:b2:05:fc:bb:
27:bc:01:a5:34:60:f4:f4:9c:76:75:6d:29:74:51:b2:e2:8b:
32:73:5b:b0:68:60:f3:93:a6:da:7f:28:0e:11:ee:3c:08:ce:
96:c7:5c:b4:6f:8b:06:4f:d7:47:21:72:d0:f1:b9:f4:da:35:
28:dc:d8:91:64:69:46:c3:41:e4:f1:42:9b:59:b5:90:85:0d:
ae:4a:be:e1:8b:21:2f:31:ee:87:45:67:1f:da:22:23:17:e4:
af:7b:dc:db:1a:bb:b8:2d:a7:16:3b:24:e4:79:12:46:f0:07:
09:04:7d:70:f0:55:ab:9d:7b:c1:7c:85:77:c3:97:82:f0:60:
02:d6:b7:4e:6f:3b:90:bf:80:56:41:12:6f:e6:27:d2:cd:08:
0d:12:ac:e5:1f:74:81:fd:5d:59:d9:4c:a1:86:ac:44:a5:bc:
52:18:c9:28:ca:1e:e6:ca:c1:75:a7:e4:4c:11:57:41:f7:2d:
8b:8a:aa:15:da:0d:bd:e6:1e:f4:db:ab:9a:ff:07:be:be:cf:
11:05:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org