Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ts-CeGnKDbXvUKzeFtwgcqkmJ90.roa
File: ts-CeGnKDbXvUKzeFtwgcqkmJ90.roa (raw, json)
Hash identifier: TJmS60HgYTld1ipktMre30yz4huwxx4Ks9aC6uPGEoA=
Subject key identifier: B6:CF:82:78:69:CA:0D:B5:EF:50:AC:DE:16:DC:20:72:A9:26:27:DD
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07DF
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ts-CeGnKDbXvUKzeFtwgcqkmJ90.roa
Signing time: Tue 29 Sep 2020 10:06:34 +0000
ROA not before: Tue 29 Sep 2020 10:06:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 203.71.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B6CF827869CA0DB5EF50ACDE16DC2072A92627DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:cb:f6:b4:a8:7b:98:09:01:8e:a0:6e:0b:
5d:d9:eb:10:92:fa:62:bb:de:16:47:7b:3e:42:f8:
e5:e9:2e:78:37:84:b0:d6:84:9c:ff:7f:93:b0:a4:
9f:ec:fd:64:40:85:65:40:f9:c7:c9:7d:40:10:bb:
93:55:f6:26:68:75:c4:03:80:cd:bc:e7:ee:05:3e:
1e:45:96:0f:46:77:0d:0e:01:5e:21:96:e2:fa:f2:
30:3b:01:78:21:83:0d:3b:9c:4f:19:9f:a6:fe:72:
c4:29:70:d2:42:de:1a:d9:68:64:1c:18:cf:c9:73:
88:2d:87:1c:e9:44:a7:73:a4:40:e5:31:ee:fe:dd:
59:d5:dd:d4:5f:6a:e9:8c:49:f9:e5:bb:46:59:b3:
b0:d5:8b:e9:d0:c4:1d:d3:4d:f1:e7:d7:96:1f:37:
fb:73:c7:5c:d7:7f:7c:2d:c6:41:58:e5:24:4b:1a:
cb:87:66:08:64:04:de:c7:36:2b:5b:d5:e2:82:71:
6f:10:0f:7c:02:ed:6a:e5:ac:5c:f7:24:92:af:2b:
67:e9:cd:0b:84:ad:f3:32:4e:97:5f:a6:31:cc:f2:
01:b0:90:1c:43:4b:eb:d9:6c:cf:ce:10:92:9b:a9:
03:5c:3e:db:ce:9d:62:b5:b7:51:d2:68:09:47:d6:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CF:82:78:69:CA:0D:B5:EF:50:AC:DE:16:DC:20:72:A9:26:27:DD
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ts-CeGnKDbXvUKzeFtwgcqkmJ90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.71.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:78:83:f5:d3:e8:d3:23:88:78:d1:57:f8:f7:e8:fb:73:95:
3f:e8:de:8e:a6:b9:6b:3a:42:87:dd:b2:98:ce:d0:cb:d6:d2:
62:4d:54:6a:45:43:a0:8e:09:48:50:13:b3:4e:26:d1:fc:78:
cf:61:90:eb:5b:8c:a6:71:28:c8:19:67:1a:68:6f:e3:e6:61:
34:3f:b3:fc:e5:d7:30:3c:d9:25:9d:21:7b:de:0d:a7:6c:f6:
bc:f7:34:ff:bc:23:40:c9:ab:0f:80:b7:51:6c:e0:7d:1a:83:
d0:48:ca:ee:05:f6:02:60:1d:0e:a9:45:aa:59:ea:2b:a9:f4:
83:19:61:c9:c7:7a:8d:06:19:8d:4e:c6:37:aa:ca:9f:cf:a4:
15:b2:16:f6:59:ff:dc:7c:8a:0c:99:fd:3d:40:fb:d1:7b:63:
70:b7:d5:e8:ff:4b:cd:fd:f2:74:01:28:68:d5:75:f5:e2:88:
e9:5b:79:ed:41:1f:a8:e3:40:18:ef:d2:7c:d2:d2:e8:e9:6f:
2f:20:a9:5c:db:cd:7c:27:bb:17:24:9a:7c:d3:aa:20:a5:13:
c3:4d:47:d5:fc:3b:93:73:cc:13:ef:a5:e2:d9:6d:e7:4c:2b:
a9:ba:5d:ec:31:2a:8a:c4:5a:54:5f:98:29:94:d3:d1:4f:f7:
e7:85:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org