Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/uZIi99xMgg_WMzSM0VmF4G5Ropw.roa
File: uZIi99xMgg_WMzSM0VmF4G5Ropw.roa (raw, json)
Hash identifier: UfRwc2sjCpDgUglqO+ptXB04VcbAjxZAHKxrModKea8=
Subject key identifier: B9:92:22:F7:DC:4C:82:0F:D6:33:34:8C:D1:59:85:E0:6E:51:A2:9C
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 09CB
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uZIi99xMgg_WMzSM0VmF4G5Ropw.roa
Signing time: Sun 07 Feb 2021 13:12:55 +0000
ROA not before: Sun 07 Feb 2021 13:12:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9916
IP address blocks: 140.129.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2507 (0x9cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 13:12:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B99222F7DC4C820FD633348CD15985E06E51A29C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:f5:b2:74:a9:9c:46:77:1f:41:ae:34:31:
46:ca:5d:cd:c8:4d:d7:94:d8:ab:22:3a:22:4d:8b:
d2:77:89:68:96:2b:7a:40:56:40:a5:96:d2:42:0e:
0f:e6:73:5f:88:77:2e:af:54:07:be:fc:76:c2:70:
77:6d:77:0e:12:e1:a3:01:6a:fe:65:2e:73:6b:5b:
d0:1b:e8:55:83:12:df:b1:4b:9c:b3:c0:25:6b:ea:
86:57:26:de:9e:e6:99:29:18:f8:69:35:e7:55:10:
89:bf:a6:5b:13:cf:63:30:bf:42:c0:cc:d1:a4:48:
ff:b5:84:f0:54:21:c2:c4:d0:4b:23:8e:84:1a:b2:
25:94:25:17:68:cc:32:c1:5a:4c:49:f1:1d:38:fe:
6f:63:bf:ba:87:7b:03:e4:02:78:2f:fa:89:92:dc:
a7:c2:5b:22:78:d5:f5:a3:49:3a:a9:9a:46:59:db:
cf:a1:00:06:ca:dc:6b:b2:db:c4:42:26:68:9a:c8:
73:43:69:76:8b:a2:b0:07:d6:18:12:48:a3:d1:24:
5a:09:ab:c2:1f:07:d3:74:3d:bd:b4:69:a8:b4:b4:
df:ed:e0:be:73:21:0a:1c:3e:f2:cd:63:74:b2:ba:
01:29:01:3f:50:79:1d:4c:2a:cb:b0:e9:85:85:aa:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:92:22:F7:DC:4C:82:0F:D6:33:34:8C:D1:59:85:E0:6E:51:A2:9C
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/uZIi99xMgg_WMzSM0VmF4G5Ropw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.129.51.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fd:f1:d2:a4:e2:da:19:a4:80:53:ef:37:f9:08:95:eb:d2:
30:a2:c9:4f:9e:8a:a4:93:5b:b2:03:32:a3:ad:aa:0d:c0:6b:
2d:13:a4:d1:66:b6:53:7f:52:4d:3d:16:f6:04:97:17:61:9d:
45:49:e3:8e:92:59:7b:4d:8c:c1:bf:e9:a1:10:93:93:49:ca:
b9:27:99:a7:83:b5:88:b5:31:a9:9c:bb:8d:07:f6:cb:fb:27:
ac:13:6e:8e:5e:1a:19:90:b8:7c:d7:7f:e9:d0:5d:43:aa:1e:
af:a7:fa:2d:b7:a1:a3:9b:85:dc:28:fa:04:ab:e2:8b:27:d8:
46:cc:f0:a2:c2:f1:68:f6:d0:ee:19:8a:dc:99:6e:52:22:81:
b8:d3:aa:c3:26:73:9c:9e:95:ca:52:8d:fe:0f:79:bd:23:f1:
a9:62:89:73:16:45:11:a6:14:be:af:af:bc:14:ce:d3:19:52:
b7:42:b2:38:87:3b:8c:a8:67:fe:e2:0e:47:eb:0c:69:94:f3:
5f:c3:d2:33:77:87:69:ac:54:1b:10:ec:e6:29:8b:4a:c9:58:
89:0d:f5:2d:fc:16:67:20:d0:dd:16:23:4c:f1:97:07:9d:64:
e0:65:4f:1d:37:11:e2:8b:73:c7:47:c6:df:29:a7:a9:3f:f5:
2e:cf:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org