Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/x2RQ6oEwxeAKI9bgjvygkR1tqrE.roa
File: x2RQ6oEwxeAKI9bgjvygkR1tqrE.roa (raw, json)
Hash identifier: T5WIftn3jVfodoF0mFDKdlPeP5WLN6787R+CqSVgk+A=
Subject key identifier: C7:64:50:EA:81:30:C5:E0:0A:23:D6:E0:8E:FC:A0:91:1D:6D:AA:B1
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 07F8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/x2RQ6oEwxeAKI9bgjvygkR1tqrE.roa
Signing time: Tue 29 Sep 2020 10:06:41 +0000
ROA not before: Tue 29 Sep 2020 10:06:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1659
IP address blocks: 163.14.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040 (0x7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 10:06:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C76450EA8130C5E00A23D6E08EFCA0911D6DAAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:e4:a8:ba:ff:0f:7d:e2:24:e3:24:cd:16:
8b:81:7f:4b:ab:65:f2:6f:5d:c2:e0:7d:8f:c8:b1:
1a:ba:90:2a:6f:0f:e3:9d:bb:af:c4:80:76:b6:5c:
5f:1a:ea:32:c1:3b:11:2e:cb:00:c2:28:c7:02:97:
68:2b:3e:99:c2:77:37:70:49:08:42:28:fa:59:37:
35:ca:6e:fb:b2:5b:4a:bb:80:4d:38:4b:b1:eb:cb:
be:74:23:5a:b1:03:38:dc:63:b5:96:24:52:fb:f2:
77:6d:96:a0:b4:7e:a2:cb:47:05:8f:39:42:7b:12:
26:f7:43:72:4c:cc:7d:92:74:c6:bc:7d:39:e2:c8:
c6:af:b1:dd:f1:4b:58:86:d8:75:ce:da:e6:c6:8d:
46:16:2c:90:88:38:5d:8b:8c:fe:6e:9e:97:43:0b:
11:98:89:aa:3d:7a:b5:b4:4b:9d:91:d7:17:43:1e:
fc:90:58:6c:bd:22:32:cb:e9:6b:32:88:1e:59:7f:
ca:13:a2:05:1c:d4:07:ab:74:7a:13:a7:bf:a3:60:
60:a3:e8:8d:a2:91:e1:d3:59:8c:5b:b7:4e:29:cd:
da:1f:a8:ac:45:a5:41:18:d8:b7:14:e5:63:53:67:
45:57:35:80:f1:5e:e9:b8:2d:8a:44:ba:6e:ae:3a:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:50:EA:81:30:C5:E0:0A:23:D6:E0:8E:FC:A0:91:1D:6D:AA:B1
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/x2RQ6oEwxeAKI9bgjvygkR1tqrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.14.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:38:f1:2e:03:3b:37:67:55:a7:44:47:c2:87:4b:16:c0:43:
bf:cc:b8:3a:a1:98:9d:2e:fe:d5:dd:1d:63:0b:cc:6d:e9:7c:
b8:5a:95:d8:02:f3:23:0a:c9:5e:b5:f5:6c:24:a4:83:51:30:
95:05:e7:51:92:15:70:c5:a2:bf:a2:53:16:33:66:bf:3f:87:
e0:9b:60:c0:dc:a9:92:57:85:eb:23:44:15:89:1f:16:76:c2:
41:25:49:95:01:da:01:69:78:77:51:f5:07:19:f9:ce:de:8a:
09:00:3d:ef:6f:52:e6:34:c3:da:a3:a3:9e:75:42:4d:8f:73:
e8:f5:37:61:62:de:d8:57:05:09:4c:c0:54:5b:75:23:49:84:
c4:5b:b6:ad:41:25:74:27:3b:66:b5:c3:e7:e3:6d:49:c4:8a:
cb:ba:5a:01:1e:71:ba:da:6d:95:99:04:f7:af:0c:30:cb:25:
9b:29:ad:cf:e2:c0:3f:e8:e5:1c:1e:15:c5:a1:08:9e:70:4e:
01:bd:bf:da:22:50:1f:c4:7f:1f:11:0c:c8:e4:9f:71:22:c9:
cb:a1:83:ae:b2:9b:01:29:41:fb:6d:46:6e:55:59:94:6b:64:
30:d4:a7:84:27:14:50:a9:81:90:96:5d:13:4b:e6:5c:6e:68:
81:4d:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org