Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/vsG31wM612Te0iZlCNcdv00ZGAs.roa
File: vsG31wM612Te0iZlCNcdv00ZGAs.roa (raw, json)
Hash identifier: XcBsBrbkY+ITVxIOuCDtkvX3tC/5XF2i/eq1BMK/6kY=
Subject key identifier: BE:C1:B7:D7:03:3A:D7:64:DE:D2:26:65:08:D7:1D:BF:4D:19:18:0B
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 09C4
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vsG31wM612Te0iZlCNcdv00ZGAs.roa
Signing time: Sun 07 Feb 2021 12:42:49 +0000
ROA not before: Sun 07 Feb 2021 12:42:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 192.83.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 7 12:42:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BEC1B7D7033AD764DED2266508D71DBF4D19180B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:50:7b:cd:5f:05:9f:e8:9c:c4:d1:4c:03:
1b:fc:1c:2a:7b:d4:56:2d:00:70:7b:82:38:f6:90:
1a:81:02:1f:c7:33:c3:cd:fd:aa:18:2c:f7:82:bf:
a3:9f:97:c6:c2:d0:66:6a:63:d9:07:5e:12:da:3c:
8d:bf:71:72:c9:a8:ca:5a:6c:85:1d:a8:75:f0:bc:
cb:a5:71:bc:bf:1a:04:e6:8c:4e:89:08:41:01:f6:
b9:34:6a:e4:1b:65:86:b0:75:a8:ba:d6:81:3b:24:
69:c6:d3:81:0f:8d:64:07:19:98:01:d8:10:be:3a:
fd:55:bd:09:b2:ff:0d:fa:b2:c1:04:60:e9:dc:e6:
d9:91:a2:ab:46:2a:21:f8:d4:63:a9:8a:83:fb:c4:
7b:6b:94:9e:8a:ff:02:90:92:dd:90:f2:6b:94:1d:
6d:38:a7:63:82:5e:43:a8:22:9a:c0:44:ff:24:09:
4f:63:fc:38:2b:c0:48:39:28:28:62:b3:8b:e4:cb:
38:d0:49:24:33:af:aa:81:02:1b:24:9b:69:37:80:
73:ce:97:5d:38:3f:98:d3:4d:0a:90:50:5b:38:22:
69:1e:9e:0e:d8:d5:68:bb:b7:42:23:c3:d0:26:7d:
e5:dd:bc:8e:81:83:b9:20:9c:10:be:f7:98:c2:b4:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:B7:D7:03:3A:D7:64:DE:D2:26:65:08:D7:1D:BF:4D:19:18:0B
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/vsG31wM612Te0iZlCNcdv00ZGAs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.168.0/21
Signature Algorithm: sha256WithRSAEncryption
34:81:cd:3b:0b:fa:be:95:6c:39:8e:c1:e4:23:de:4b:b0:54:
61:cb:a0:1f:71:a0:c6:04:a3:dc:5e:9c:1d:8b:80:85:6e:f1:
b4:75:ab:f9:8d:26:16:63:39:b6:72:04:bf:81:a4:8f:39:f8:
a0:96:af:72:a7:35:b1:17:ae:fc:48:d2:37:fe:f9:8b:fe:2f:
4a:44:38:87:d3:ce:e5:a7:fe:7a:18:ec:d2:ea:87:42:bf:12:
66:d2:07:21:0f:94:78:19:66:9a:fe:b3:df:dd:b8:a0:8f:db:
c0:ba:24:d9:da:ae:70:84:48:ef:d4:0e:58:91:8f:27:bf:ba:
80:ba:56:98:8c:99:2d:17:1d:dc:e6:b3:1a:84:5e:c5:0d:09:
45:90:ea:b0:57:f7:39:61:5f:d4:e8:34:fb:42:5a:9c:25:90:
82:5d:8c:cc:23:54:bd:cc:0a:6e:3f:e4:95:90:ea:d4:91:46:
e9:8f:e1:30:1d:96:da:8a:73:39:29:b2:e8:96:37:b4:d0:04:
8e:42:a8:74:96:fc:6f:3d:f3:70:9d:84:c9:86:65:2c:10:23:
e3:75:8b:47:b7:c1:90:c9:c9:d6:99:8d:04:87:60:bf:cf:74:
0e:1c:7a:3b:15:2b:b6:c5:ad:7a:cc:de:cc:19:13:de:da:ef:
d2:e5:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org