Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/tD7XPsKPONiA_BgJ359Vxi9VtBc.roa
File: tD7XPsKPONiA_BgJ359Vxi9VtBc.roa (raw, json)
Hash identifier: 4dBx5Aq2XziJAO3Z+hlRaywBQs2plu4ypxf2Wk93aig=
Subject key identifier: B4:3E:D7:3E:C2:8F:38:D8:80:FC:18:09:DF:9F:55:C6:2F:55:B4:17
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07F1
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tD7XPsKPONiA_BgJ359Vxi9VtBc.roa
Signing time: Tue 29 Sep 2020 10:06:39 +0000
ROA not before: Tue 29 Sep 2020 10:06:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 210.62.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B43ED73EC28F38D880FC1809DF9F55C62F55B417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:5a:46:36:99:50:ed:99:13:6e:60:c8:9f:
3e:33:62:3b:0f:0f:f1:7e:2e:81:69:81:d0:5e:dd:
ed:f0:bc:8c:ed:da:89:a1:af:c0:2e:e5:86:41:84:
a4:5a:92:f0:86:38:10:f3:f8:b0:f2:61:29:5d:e8:
f4:81:16:0b:27:b3:67:c3:0d:c2:06:6a:f2:62:ee:
f3:f8:09:6b:1a:0c:12:4a:f4:77:98:c7:e8:9a:1d:
df:6e:44:ae:04:ff:46:26:99:51:f4:0f:a8:20:f7:
b2:59:8e:72:ca:48:04:29:58:03:b2:ad:e2:ad:60:
fe:3b:d9:4b:c2:56:e1:58:27:dd:67:2d:b9:05:0a:
3f:0e:e5:d0:a3:5e:c9:cd:4d:85:38:7c:07:0d:d7:
f0:60:c0:b9:78:c6:5e:f4:8f:52:4a:66:11:d3:c0:
f6:4c:7d:d1:40:ff:1d:98:d9:02:2a:64:1e:61:36:
26:7d:c6:ac:1c:21:1e:da:87:ee:b1:8c:0d:7c:a8:
fd:74:52:49:60:0e:b6:f3:ab:63:e4:bf:28:e3:3c:
52:32:11:b3:4f:df:30:aa:bb:06:cc:7b:f2:37:91:
50:8d:f0:f9:b8:8b:a1:63:ec:86:b0:69:ad:1c:06:
28:e3:f3:07:1a:fc:9f:cf:fa:6a:18:ad:5e:a5:2e:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:D7:3E:C2:8F:38:D8:80:FC:18:09:DF:9F:55:C6:2F:55:B4:17
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tD7XPsKPONiA_BgJ359Vxi9VtBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.240.0/21
Signature Algorithm: sha256WithRSAEncryption
45:a1:58:98:52:05:60:9c:6a:34:36:dc:97:3d:b7:24:b1:54:
8f:15:a5:11:8a:88:da:b8:ed:c6:7e:a4:fc:70:b2:d8:42:f4:
0f:fd:02:dd:4e:5a:3b:59:04:a7:7a:a6:59:f0:4a:bf:28:c5:
80:ee:0e:9a:84:3b:1e:1e:96:87:ca:6b:02:9a:e4:d8:72:73:
9c:22:59:a1:ba:a1:e2:94:90:82:2b:5f:1a:6f:2d:d4:cd:51:
9c:3a:14:9f:8d:47:d4:a0:61:15:44:e5:f2:1a:5f:e2:6f:14:
c7:cf:f1:08:57:e4:28:35:c8:26:fd:55:9c:a4:11:d1:e2:dc:
b4:ef:13:55:2c:f9:04:15:22:08:d4:5c:dc:a8:7a:53:d9:ae:
3d:d8:86:7f:8c:b8:b5:98:6b:f8:18:a7:00:2f:14:df:0c:c9:
f4:f7:31:96:ab:e4:2f:b8:ed:53:50:50:b2:15:5f:24:48:e7:
35:95:d5:1b:ca:23:5d:aa:f6:24:71:54:22:94:f6:74:01:0b:
78:8f:02:37:b7:ec:26:dd:ef:5a:d3:e9:15:77:db:80:6c:23:
d9:ae:db:1e:58:66:d4:77:49:79:08:7d:74:02:d2:f4:81:df:
17:13:b0:dc:b4:a2:04:63:7c:09:8f:26:03:83:43:b4:e5:ac:
7a:a1:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org