Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/p566lUb-ZTZn20wTLDjVAxitbSo.roa
File: p566lUb-ZTZn20wTLDjVAxitbSo.roa (raw, json)
Hash identifier: s7sFB/C0R80QSpPRGyYKmE9KFneZeLsI5HoxtiC+5ZI=
Subject key identifier: A7:9E:BA:95:46:FE:65:36:67:DB:4C:13:2C:38:D5:03:18:AD:6D:2A
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 08E5
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/p566lUb-ZTZn20wTLDjVAxitbSo.roa
Signing time: Sun 07 Feb 2021 11:54:00 +0000
ROA not before: Sun 07 Feb 2021 11:54:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131596
IP address blocks: 61.58.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 7 11:54:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A79EBA9546FE653667DB4C132C38D50318AD6D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:46:fe:ce:36:8e:48:90:93:2e:78:f1:f5:
63:66:d4:26:15:a8:92:4d:3a:35:e6:17:fc:1a:90:
fa:ce:11:74:43:65:72:ff:9f:25:9b:ea:89:d2:d4:
70:d0:6e:e6:d2:d8:fa:73:c6:d5:0d:9f:e4:5f:3c:
01:5f:ad:90:93:ac:5a:1f:72:9e:de:f4:b5:90:b0:
1e:11:da:20:bd:54:ef:28:4c:37:4f:90:b4:fb:d2:
7e:e5:b6:b0:a1:07:65:20:4c:cb:e2:59:13:95:e6:
48:12:17:6f:ab:c4:f2:47:7d:19:45:83:46:21:94:
c5:48:17:e7:7a:2a:8b:b8:be:b9:ff:9c:36:bb:cb:
6e:2c:37:ee:e7:83:f5:5b:8b:91:26:38:65:92:8f:
76:69:6b:32:6e:60:03:f4:68:ce:9d:a6:c6:c0:02:
6a:be:24:41:f3:df:80:aa:2e:d4:11:4c:f4:87:96:
db:ab:68:f1:6a:d2:31:3c:2d:9d:fa:37:af:5c:a6:
5d:7b:de:c6:14:f4:b3:04:97:45:7c:1e:d4:05:d9:
30:6a:ef:6b:a7:99:5f:82:25:db:88:7f:a9:ba:38:
6d:8a:fa:79:79:65:8a:a6:fa:a6:bb:8a:58:fb:b6:
52:de:eb:5c:54:10:94:ae:8a:52:55:86:c2:dc:1a:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:BA:95:46:FE:65:36:67:DB:4C:13:2C:38:D5:03:18:AD:6D:2A
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/p566lUb-ZTZn20wTLDjVAxitbSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:eb:a3:6a:08:5e:80:3f:81:4a:49:9b:5b:af:c1:7a:b8:34:
9e:cc:b5:b1:47:61:09:00:e6:e6:bc:77:58:0e:6e:9f:1a:b0:
09:30:8b:06:0d:de:2e:0a:f3:de:72:31:bc:a5:48:b2:bf:29:
69:8f:34:45:8d:83:da:39:c1:aa:6b:44:a7:3a:b0:2b:f9:65:
4e:a2:91:83:70:14:4e:53:21:02:40:3f:9c:f6:c7:04:39:4b:
0d:60:a8:cb:20:4e:2c:f7:84:d0:6a:99:05:ab:01:54:15:8c:
19:31:a1:fd:2b:29:21:d9:10:00:5a:4c:9f:95:6d:12:cb:de:
06:6a:7c:c4:27:83:e7:bc:bb:82:47:99:e8:75:5f:82:df:7b:
f8:ad:fc:fe:71:b8:a2:32:68:06:ec:25:0e:76:1b:1c:db:0a:
3b:d3:d8:75:78:4f:75:e6:b1:14:0b:25:20:dc:ac:87:f2:92:
51:37:7a:db:78:e4:a7:b7:46:0f:53:24:07:cb:9d:62:88:85:
50:b1:c9:42:e6:7e:27:23:7d:c8:d1:d1:7a:2c:02:70:9d:5d:
c5:b5:90:94:a0:8d:0e:2d:7f:87:e3:1e:b4:a2:e9:30:1c:52:
db:fc:45:d4:aa:b7:c3:8a:8f:3b:8d:b9:da:c8:aa:58:11:a0:
be:44:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org