Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/TwHi5xLRoa2406UKzIZ_budppxc.roa
File: TwHi5xLRoa2406UKzIZ_budppxc.roa (raw, json)
Hash identifier: F9q38tZzVFBNeABvOcNIp6YSolISULLpEVWIUkfWUBk=
Subject key identifier: 4F:01:E2:E7:12:D1:A1:AD:B8:D3:A5:0A:CC:86:7F:6E:E7:69:A7:17
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0994
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/TwHi5xLRoa2406UKzIZ_budppxc.roa
Signing time: Wed 29 Sep 2021 02:53:17 +0000
ROA not before: Wed 29 Sep 2021 02:53:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 61.58.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 02:53:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4F01E2E712D1A1ADB8D3A50ACC867F6EE769A717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:d3:48:a3:b3:63:3b:25:5d:37:53:f4:4a:
2e:02:17:3d:a0:70:5e:ae:0c:ed:64:85:39:1d:77:
fd:3d:2d:33:87:44:cf:d2:8f:8b:b7:a0:8b:54:99:
b3:f6:d3:18:59:bf:06:c4:68:81:3c:d8:7a:ee:e3:
eb:e3:f3:85:af:5a:99:1a:1a:73:81:81:70:ca:7c:
46:38:fc:28:f2:69:3a:38:f2:de:38:14:e8:89:a2:
09:49:8f:56:d5:b0:49:88:31:8a:c1:0c:c1:91:18:
68:9e:87:a7:e3:97:9d:90:88:98:26:16:9a:3c:d0:
e3:c9:b7:2e:11:b4:37:bf:59:ca:c8:02:9a:f5:ef:
bf:2b:5c:c5:f4:ef:b9:c5:1d:6e:82:bf:ee:70:81:
fa:b3:f7:63:cd:96:9e:fd:b0:91:d0:58:e7:7b:38:
01:40:c2:eb:2f:12:08:09:99:d7:48:18:87:90:ab:
03:3c:3f:d4:43:00:b6:ad:14:4f:f2:50:6a:76:f6:
33:6f:45:6e:f6:45:af:0b:b4:9e:5f:6d:8c:35:b3:
5b:a7:e8:fb:d8:0b:12:2c:d3:be:c2:f3:fe:0f:57:
9d:e5:36:09:94:6f:ae:cf:07:df:b4:29:08:2d:c4:
59:86:7d:cb:9d:31:dd:dc:46:30:db:05:7a:55:7b:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:E2:E7:12:D1:A1:AD:B8:D3:A5:0A:CC:86:7F:6E:E7:69:A7:17
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/TwHi5xLRoa2406UKzIZ_budppxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4f:a1:97:41:e1:53:1d:1f:ae:a1:7a:0c:97:d5:67:0d:ea:
2d:b2:8e:b8:ca:aa:1f:89:f2:3b:31:12:03:ce:22:04:24:03:
63:d6:14:ae:26:11:32:56:a9:35:ba:a2:a4:5e:34:48:ce:0a:
f5:f4:e5:9c:28:f8:be:40:25:7b:3f:44:16:9e:8c:fc:f3:e3:
6b:3c:20:5e:b2:52:bb:0c:49:8a:6e:61:0f:96:b4:b7:87:0d:
53:2c:84:b2:08:50:b4:cd:95:41:84:ba:0d:10:75:4b:0c:6f:
b9:5f:32:7f:9b:0c:48:1b:de:c4:f9:cc:d6:5e:89:dd:e0:19:
eb:90:bc:d0:64:cd:8c:4b:f5:29:19:cc:d7:80:78:f5:d6:db:
44:12:b3:6e:43:6d:17:59:de:de:d9:11:ec:7a:1e:ef:17:82:
1c:10:e6:89:be:1c:33:01:1a:4b:9c:71:56:d8:a4:65:e2:ab:
6d:b2:78:4d:d9:2a:35:eb:41:68:3a:31:b3:d5:74:b1:d9:fa:
93:c4:dc:10:f2:5d:f8:cc:8c:f1:c6:b2:5f:94:2b:b9:0c:e2:
0b:27:80:db:ff:1f:ec:f4:41:3e:ca:e9:8e:f5:38:84:5d:ea:
c6:72:61:59:45:a2:28:43:3e:5a:bb:64:57:a7:9e:36:b6:df:
80:a3:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org