Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/4d571xRsoN7VdKZx8mAAfS1Iiy4.roa
File: 4d571xRsoN7VdKZx8mAAfS1Iiy4.roa (raw, json)
Hash identifier: MOH6L8LaJQ/3LejuUNhUql6Su9pj5oF7JLX1vGAT6TM=
Subject key identifier: E1:DE:7B:D7:14:6C:A0:DE:D5:74:A6:71:F2:60:00:7D:2D:48:8B:2E
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 077F
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4d571xRsoN7VdKZx8mAAfS1Iiy4.roa
Signing time: Tue 29 Sep 2020 10:00:55 +0000
ROA not before: Tue 29 Sep 2020 10:00:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 211.73.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 10:00:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E1DE7BD7146CA0DED574A671F260007D2D488B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:d5:1a:e3:1b:ea:32:97:32:7c:ec:dc:fc:
5d:b6:82:fe:61:32:06:ef:aa:39:27:61:91:ef:e5:
62:d5:d7:20:29:72:04:1c:a0:a1:7a:ff:fe:78:a5:
1a:2d:da:f4:68:1a:a8:6c:3f:97:ee:b4:68:9c:78:
35:15:21:52:06:67:1e:27:12:1f:e7:0b:fe:ae:96:
62:42:b8:ee:a7:9d:0d:bb:d8:a1:15:c6:08:c6:6d:
1f:4b:a9:6c:d5:d2:4d:8e:ac:bf:c9:97:0a:1f:57:
c4:1b:fa:06:62:1f:88:14:ef:2f:f8:93:35:9f:1f:
13:d2:ce:c1:fd:d0:ce:a4:51:6e:38:17:d6:99:0c:
fd:20:0e:08:26:f2:d1:82:25:1e:3e:07:f4:54:d3:
15:37:54:77:1f:00:95:11:ab:1e:1b:df:bf:b9:34:
dd:6f:d2:5a:dc:c8:1d:eb:67:ce:05:68:6d:89:3e:
6e:18:02:2d:53:fd:52:d3:81:bf:e6:78:60:9b:a1:
d2:56:4f:7d:1b:e5:d5:02:7b:1f:c8:16:be:9e:4c:
10:46:b0:30:30:b3:9f:82:c5:07:65:37:ae:c2:64:
3f:92:e6:28:4e:1f:df:b4:34:e3:d5:a9:f6:aa:70:
f6:49:1c:f3:91:2c:01:02:86:a8:34:ac:71:4a:ef:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:7B:D7:14:6C:A0:DE:D5:74:A6:71:F2:60:00:7D:2D:48:8B:2E
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4d571xRsoN7VdKZx8mAAfS1Iiy4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.160.0/19
Signature Algorithm: sha256WithRSAEncryption
07:e7:b6:a7:0e:0c:0b:64:1d:9c:c3:95:71:e9:68:57:77:6c:
57:a8:b4:03:89:b4:5b:3c:03:0c:75:a8:c6:9b:3b:f8:06:7d:
5d:2d:76:21:be:d2:8d:89:14:20:94:f4:b6:ce:c1:b1:06:e2:
43:40:af:6b:f5:a2:64:17:a4:ae:37:b5:12:58:9d:62:11:ba:
47:d8:df:a9:24:cd:e8:35:c0:53:60:c5:d9:64:1c:92:e9:4e:
d3:3b:28:b7:43:7d:38:8e:e4:85:66:29:28:7a:89:66:52:b5:
a1:79:c1:89:16:a7:fa:31:20:76:b9:10:70:46:bd:54:3c:30:
37:85:ad:af:f8:ee:b7:06:25:22:ab:d7:ba:cd:96:eb:e1:73:
c5:3d:7b:c7:4d:5d:40:e6:4a:d0:68:f0:61:2a:ab:d7:fb:6f:
ef:27:0e:33:69:5a:fe:e4:ba:c7:04:08:c9:1b:80:09:49:6a:
bb:47:ca:ec:3e:40:a2:74:40:be:54:3d:93:ec:48:67:9c:2d:
ba:a0:fc:4f:1c:09:16:6f:05:30:26:28:91:46:0d:3f:2e:fe:
6f:b2:87:65:ac:0a:92:b6:6f:6e:41:84:aa:23:4f:21:1c:1e:
7a:c5:ae:08:8e:52:a9:bc:1d:69:a9:23:53:da:60:f2:06:e4:
49:54:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org