Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oivDo4IKdJiHVUzIbhQ3-53JOAA.roa
File: oivDo4IKdJiHVUzIbhQ3-53JOAA.roa (raw, json)
Hash identifier: N/jTb4p1vi7e2VIJkVjMeBj0utQrW77jT7vamQfUnJY=
Subject key identifier: A2:2B:C3:A3:82:0A:74:98:87:55:4C:C8:6E:14:37:FB:9D:C9:38:00
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0787
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oivDo4IKdJiHVUzIbhQ3-53JOAA.roa
Signing time: Tue 29 Sep 2020 09:59:59 +0000
ROA not before: Tue 29 Sep 2020 09:59:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131596
IP address blocks: 61.58.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 29 09:59:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A22BC3A3820A749887554CC86E1437FB9DC93800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:51:5f:e4:17:52:17:bc:6d:15:3a:7c:13:
34:ba:92:30:5f:33:4c:cf:6d:92:18:24:ce:43:69:
fd:01:de:4d:98:50:68:7b:0a:0e:db:79:75:8d:ff:
f6:c7:6e:88:e4:f2:c8:79:5c:74:cf:77:75:41:59:
06:e7:d2:f1:49:48:4e:4a:98:00:0a:9a:68:f0:95:
89:dc:d3:ad:cb:02:0f:9a:ed:78:57:02:05:05:b7:
21:2f:9f:2e:4c:ab:bf:36:29:e8:9a:9b:0e:fb:38:
39:f1:cd:a5:ce:cb:ba:23:41:4f:f3:52:2a:29:d2:
f9:49:97:77:fd:c9:4d:d5:ce:ed:df:2f:99:e4:45:
7b:0b:22:25:54:20:57:cb:b3:ad:85:66:46:c8:e1:
d2:66:f8:f1:1c:cb:99:df:2e:f2:c7:5e:9b:dc:f3:
61:ec:31:61:2d:12:0a:c6:c5:e5:ed:36:a7:ef:d4:
f9:4d:65:1f:23:1b:28:a0:88:02:55:6d:e5:1b:0c:
49:10:9b:7a:f3:f3:c5:d5:75:84:9f:84:83:dc:ec:
35:b1:1f:ac:44:dd:79:1f:83:83:7a:8a:d3:92:fa:
c1:1f:da:b8:a2:61:66:29:6f:d7:04:16:ac:06:03:
d8:45:05:43:58:83:55:d8:9e:12:f7:e7:f4:d6:c5:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:C3:A3:82:0A:74:98:87:55:4C:C8:6E:14:37:FB:9D:C9:38:00
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/oivDo4IKdJiHVUzIbhQ3-53JOAA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/21
Signature Algorithm: sha256WithRSAEncryption
95:9e:7b:95:ed:19:96:80:b2:dc:6f:5c:c0:95:0d:6d:2f:10:
93:ac:ef:05:65:7b:4b:c2:65:01:ff:d3:d1:58:18:15:c1:59:
6c:d5:58:a2:ac:69:3e:c9:74:be:25:8a:76:87:e0:f9:ce:d7:
de:e3:14:72:e7:4c:fa:35:06:b1:5a:50:36:71:25:ee:bf:46:
b8:b7:f1:62:4b:d8:64:f1:e9:dc:fb:f6:5a:c0:8a:a0:25:24:
23:bc:25:33:77:54:91:0b:34:64:08:1c:d5:27:dd:dc:cf:25:
83:26:a7:5b:28:e5:64:9f:11:d1:0e:33:18:b3:35:07:7b:df:
8e:28:40:28:7c:43:d8:03:53:dc:51:c2:52:de:46:4b:8b:fa:
6b:9c:83:6a:75:18:9d:a4:bc:95:45:ab:1f:be:67:b9:e2:9f:
cf:3b:de:30:4e:cb:1b:47:49:53:98:09:84:f4:80:65:9b:35:
87:87:c4:37:20:b3:cb:e1:4b:e0:d5:a3:aa:8c:34:22:c5:73:
b6:70:e0:cc:f9:d5:b0:c9:e5:ff:2b:cc:cb:be:76:2c:5e:1a:
ce:f5:52:9b:39:2a:82:c2:f3:f8:9b:c2:d8:1f:10:f1:d9:b9:
66:0f:02:90:8f:43:9e:79:ba:9f:27:eb:b7:df:04:a1:14:6a:
f5:d6:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org