Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/3I3GcOv7TQHgfXF4kPHEc2QRID8.roa
File: 3I3GcOv7TQHgfXF4kPHEc2QRID8.roa (raw, json)
Hash identifier: xuKawrdXVDfirLcLl/3b33qlonExRrN5TWBSYZMroKc=
Subject key identifier: DC:8D:C6:70:EB:FB:4D:01:E0:7D:71:78:90:F1:C4:73:64:11:20:3F
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0991
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/3I3GcOv7TQHgfXF4kPHEc2QRID8.roa
Signing time: Wed 29 Sep 2021 02:53:17 +0000
ROA not before: Wed 29 Sep 2021 02:53:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 49.213.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 02:53:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DC8DC670EBFB4D01E07D717890F1C4736411203F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:cd:62:e1:ab:7c:15:17:07:b2:71:78:bf:
cc:67:6f:1a:29:5e:3e:b9:47:66:d2:d8:62:77:97:
67:44:03:af:27:1d:98:23:b1:6b:fc:78:0a:3d:12:
bd:82:98:dc:ff:24:34:1d:45:52:4f:23:43:78:28:
f9:d2:9b:22:1d:e8:09:6b:63:81:5b:05:bb:af:1f:
39:35:7c:9b:58:80:dd:4a:7d:7d:8e:3c:5b:40:26:
cc:e8:9a:f4:77:b2:d2:67:8c:ca:86:29:f2:ee:a5:
28:1c:68:cb:57:f1:93:77:43:f4:ef:9b:10:22:98:
3c:5a:3f:eb:18:1c:50:c2:4b:97:4c:19:29:d0:1e:
56:24:1c:24:da:7d:c6:49:3e:96:af:dc:4a:ae:5a:
77:f8:71:23:0a:ab:97:bf:fe:eb:6c:18:de:10:a6:
6d:bc:8d:27:b1:f2:2a:55:4d:48:00:0c:06:14:a4:
de:05:0a:79:53:4d:6e:4a:5b:6f:54:83:6b:5b:db:
df:cf:c9:07:06:03:dc:fa:99:99:4a:22:57:39:76:
ce:89:d2:87:e6:19:e5:48:9e:a0:86:dc:ce:71:8e:
6f:7c:8a:e5:3f:aa:fb:eb:7f:93:ab:03:5a:a5:8d:
85:80:8c:9f:4a:78:91:56:04:1d:35:72:63:77:05:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:C6:70:EB:FB:4D:01:E0:7D:71:78:90:F1:C4:73:64:11:20:3F
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/3I3GcOv7TQHgfXF4kPHEc2QRID8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.213.128.0/17
Signature Algorithm: sha256WithRSAEncryption
31:b7:93:5d:4a:21:b8:17:d2:f8:bd:4e:ba:dc:34:a6:ed:b1:
b5:96:04:8f:ab:c1:6a:51:eb:37:68:d4:58:1a:ee:38:68:18:
73:bc:e5:52:0b:e2:b6:ca:a5:fa:f0:88:36:48:b9:f8:a7:0b:
66:74:55:b1:63:a9:2b:e9:ee:33:7c:41:d3:a9:ad:9c:5a:c3:
4c:93:6f:da:63:02:90:8e:5a:0f:96:15:83:2a:1d:73:89:88:
a5:d4:c7:38:de:af:a3:19:3b:7f:16:cd:36:5d:2b:14:5d:08:
29:83:7f:c5:a6:51:ab:3e:1e:a5:f6:30:38:b5:55:5b:2d:85:
e8:43:d6:96:ac:5b:9f:70:45:1a:9a:c2:6a:58:b8:f6:b2:43:
48:54:c9:05:a1:36:72:70:70:92:f2:52:a3:91:c3:a5:5f:c1:
9c:79:c8:b1:7a:34:0e:92:1c:2e:c8:19:aa:25:9f:d7:d4:40:
81:b7:27:8f:ef:45:9d:52:48:9a:5a:c8:79:63:ab:3f:d4:d1:
04:e6:86:7d:fc:b6:70:c3:2c:9a:c8:5b:06:4d:f2:09:9c:c9:
bf:4c:db:3e:6b:2e:2b:70:88:e2:ab:5e:e5:9b:fc:60:d7:31:
3d:dd:29:13:a7:88:06:7d:8f:33:81:09:ec:47:b7:51:62:dd:
33:58:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org