Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/p37K3rBE5R5ZrF58m8tyyIID6Mg.roa
File: p37K3rBE5R5ZrF58m8tyyIID6Mg.roa (raw, json)
Hash identifier: jd2fd3ffCDSql+QcZk+9b1gr4yEZG3WJ4NFKR0vWxoU=
Subject key identifier: A7:7E:CA:DE:B0:44:E5:1E:59:AC:5E:7C:9B:CB:72:C8:82:03:E8:C8
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0990
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/p37K3rBE5R5ZrF58m8tyyIID6Mg.roa
Signing time: Wed 29 Sep 2021 02:52:31 +0000
ROA not before: Wed 29 Sep 2021 02:52:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131596
IP address blocks: 61.57.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448 (0x990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 29 02:52:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A77ECADEB044E51E59AC5E7C9BCB72C88203E8C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:84:53:56:db:b6:6a:07:34:d5:69:c3:5b:
15:0d:2f:2c:0a:a1:b4:d0:f3:24:dc:cb:70:62:a7:
cd:70:cb:31:76:f5:eb:39:f4:2f:22:cd:f4:82:6b:
a6:78:b4:27:c7:dd:60:a2:b3:c6:f5:a8:c0:58:99:
ed:0d:56:b3:f1:94:1f:25:e3:13:b2:f4:a8:99:11:
0f:8d:bb:18:d6:19:c6:89:92:71:64:8e:8e:b6:24:
aa:dc:06:2f:d0:af:89:5e:f9:3e:38:e5:2b:89:54:
85:e8:90:66:58:73:c0:21:e7:f2:de:e9:45:e6:6d:
63:75:b1:11:5c:c0:75:4c:08:de:c9:34:aa:03:e3:
0b:f5:12:fa:9f:0d:93:bb:5d:19:72:7d:c0:64:3b:
84:f8:5e:66:11:c3:30:92:ad:0e:bb:d5:f6:89:9d:
03:06:e7:dc:09:dd:ac:fb:1d:e8:8e:f0:ad:d4:99:
72:78:54:e4:19:c4:de:10:eb:54:f7:56:e7:d9:78:
c3:fe:40:a4:4b:30:50:49:46:26:60:7c:c5:4b:5d:
54:e0:a9:6b:0b:78:24:99:0d:8c:64:57:21:75:4e:
15:89:9f:46:d8:67:2e:42:03:7d:1c:fe:86:31:99:
da:c5:fa:29:f3:7d:b0:59:5f:e6:b5:43:02:a0:4e:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:CA:DE:B0:44:E5:1E:59:AC:5E:7C:9B:CB:72:C8:82:03:E8:C8
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/p37K3rBE5R5ZrF58m8tyyIID6Mg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:6a:3f:1f:4f:03:7c:f4:28:d7:b1:4f:1c:33:f3:16:50:1d:
67:62:be:2d:8a:d1:d4:e8:79:23:aa:28:4a:25:ad:ab:29:ed:
4a:8e:89:ac:32:34:8d:88:3a:6b:c1:94:cc:a8:61:7b:25:65:
fa:09:28:0d:bf:21:55:23:f4:90:18:8c:62:ae:ae:33:b2:e2:
a2:e3:c5:bc:3c:b7:50:fb:9d:99:b8:01:d7:cf:6e:51:77:69:
90:79:bf:a7:e2:50:f2:f8:10:2a:54:bc:30:28:ed:ba:78:fb:
1a:9f:ab:0e:a0:f9:84:dc:1f:e5:3d:c9:79:f2:5d:1b:f5:e9:
3f:fe:9f:7b:61:39:69:da:53:8b:3b:c3:e3:75:01:c4:5c:89:
da:db:6b:45:10:3f:a4:8c:20:d1:fc:a6:df:48:e3:2b:d1:7d:
21:d5:10:e8:9d:2d:6e:32:e3:3e:11:76:39:f5:c0:65:06:cb:
03:fc:85:0b:e0:05:f3:bc:e5:3b:51:3d:a9:a4:a9:7e:72:ad:
aa:05:ff:6c:3a:67:34:10:47:eb:e1:96:77:30:7a:24:6e:d0:
04:a4:dc:0c:3b:00:5d:ba:bd:1f:22:97:a4:e7:72:9f:ed:01:
4c:65:75:6d:45:74:ff:36:fe:43:ec:29:30:50:a4:1b:0b:7e:
e0:e3:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org