Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/6Gn8bqV9sfPHBZs9DMOk14ZmYok.roa
File: 6Gn8bqV9sfPHBZs9DMOk14ZmYok.roa (raw, json)
Hash identifier: c9GvnIYWK8C6efg7lrYXymPalnA9h7hTbhsis65x9ko=
Subject key identifier: E8:69:FC:6E:A5:7D:B1:F3:C7:05:9B:3D:0C:C3:A4:D7:86:66:62:89
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0989
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/6Gn8bqV9sfPHBZs9DMOk14ZmYok.roa
Signing time: Wed 29 Sep 2021 02:52:29 +0000
ROA not before: Wed 29 Sep 2021 02:52:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131596
IP address blocks: 210.202.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 29 02:52:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E869FC6EA57DB1F3C7059B3D0CC3A4D786666289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:af:c2:e5:91:0c:c5:9a:9a:c6:cd:fc:21:
2f:59:ce:7b:1a:2e:37:66:b5:8b:89:8f:aa:dc:46:
66:90:69:6c:3a:c9:ad:2d:f7:51:23:11:c8:62:35:
93:11:27:19:cc:db:e4:3d:f8:d1:60:57:2f:f9:d0:
6e:20:f6:89:20:cb:d7:d4:17:f0:48:13:74:a6:0f:
e9:30:c3:57:58:4c:04:df:f6:3d:72:a6:68:16:51:
61:48:d2:6b:46:6f:e8:db:be:df:67:b1:1d:a0:34:
11:12:cc:ab:24:55:53:67:9c:d6:f2:ba:dc:dd:9a:
84:ed:ec:33:53:30:e2:29:2a:a2:f4:a4:84:00:f9:
da:0f:43:72:0a:34:3d:64:1e:b4:3c:1f:f8:0b:dd:
0c:4f:74:1f:1d:83:bd:39:d1:5f:28:c9:6d:e5:c8:
14:63:3d:75:2a:9d:3d:41:05:eb:d8:0e:77:7a:56:
41:59:e6:c8:0c:4f:01:10:70:b1:60:a2:a1:1e:25:
35:f2:fa:19:e0:78:35:1e:eb:6e:ef:bc:2a:d5:ba:
e2:44:b0:95:02:9a:55:1a:ff:ba:68:d6:10:66:a6:
c4:0c:d4:7f:45:53:e2:f7:65:83:2b:0b:c9:cb:7b:
67:82:41:e5:e9:dd:19:f2:ec:31:ad:2a:b1:c8:68:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:FC:6E:A5:7D:B1:F3:C7:05:9B:3D:0C:C3:A4:D7:86:66:62:89
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/6Gn8bqV9sfPHBZs9DMOk14ZmYok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.56.0/21
Signature Algorithm: sha256WithRSAEncryption
68:24:fc:d5:89:c3:88:d2:18:a1:2b:0d:a4:7d:ea:8c:8a:f6:
f2:66:54:8a:df:d9:3e:61:c5:3d:f4:c3:c7:a0:55:8e:d0:4c:
0b:a7:d4:20:9b:5d:c5:3f:d0:36:2b:91:bb:c1:5d:f9:a7:48:
77:49:55:72:4e:3e:f8:ff:a2:ec:04:73:07:20:8b:38:e0:5f:
1b:5d:89:50:e8:0d:6e:2d:4b:a2:4c:82:a5:71:a1:0f:a5:67:
c0:aa:7c:c8:50:fc:c6:d4:be:87:d7:0c:e9:82:fb:a8:0d:3e:
34:62:cb:87:eb:65:90:15:c6:50:80:f0:38:4b:fc:ed:fd:0d:
58:f1:e4:75:69:ac:cc:03:49:23:22:0e:93:b4:fd:e5:0f:c7:
b4:f5:20:57:c6:e9:96:ea:ea:77:2d:5c:5d:1e:c0:8b:2c:7d:
31:3e:e5:90:bb:74:5b:ef:ec:cd:96:1f:b4:c9:9f:12:2a:c3:
3c:83:5a:4a:76:34:17:33:6d:bf:de:c8:31:dc:1e:d1:bd:0e:
dd:d1:6d:5e:ab:e2:d6:63:ae:b3:0b:56:76:06:db:6d:34:06:
de:37:3c:a8:c0:e2:0b:01:1e:be:c6:03:06:19:ae:c8:de:b9:
a5:fc:21:b5:fd:d5:37:71:46:66:80:d4:24:f0:f7:f0:fb:27:
f0:05:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org