Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/W9-M0ZMQXJYLfzGj1S_yAnxnnrw.roa
File: W9-M0ZMQXJYLfzGj1S_yAnxnnrw.roa (raw, json)
Hash identifier: t6G+QvFljMZn+4lCOD2mYlfrRdBlVYP1UsgjnPkKQVU=
Subject key identifier: 5B:DF:8C:D1:93:10:5C:96:0B:7F:31:A3:D5:2F:F2:02:7C:67:9E:BC
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 098E
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/W9-M0ZMQXJYLfzGj1S_yAnxnnrw.roa
Signing time: Wed 29 Sep 2021 02:53:16 +0000
ROA not before: Wed 29 Sep 2021 02:53:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 58.99.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 02:53:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5BDF8CD193105C960B7F31A3D52FF2027C679EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:b2:5d:b8:7f:bf:ec:bb:2d:83:60:9f:8f:
3a:70:8d:32:56:3c:ef:a0:9c:f7:82:a7:13:b8:31:
7d:bd:e4:e9:09:f8:b5:86:e4:b2:38:4e:c6:73:31:
07:11:d0:42:a8:db:b9:01:85:dd:9e:52:eb:cc:be:
37:eb:d5:a3:43:cd:90:47:d2:5e:34:0c:5e:d2:05:
89:63:8f:d3:d9:90:bc:89:71:f3:07:8f:dd:af:c7:
d4:60:63:f3:bb:ff:ce:49:a2:82:c9:48:bd:fd:21:
ee:f5:0b:4a:ab:4c:2d:2a:f8:47:d8:f7:6f:42:78:
a5:f9:66:a1:33:43:2e:33:09:40:d0:a2:8b:bc:9e:
ca:ca:8d:2b:b4:80:db:19:6d:f6:2f:c1:5b:6f:fe:
12:65:ea:95:0d:29:2e:a3:7c:ae:fc:ad:53:4d:34:
fe:3c:6c:88:d7:8b:a9:3b:76:72:a2:3e:8d:58:3b:
64:a7:77:99:4e:a5:c5:00:7c:e0:c1:b2:02:50:05:
68:cc:84:ad:d1:72:a6:b6:35:1e:41:f3:2f:98:e0:
5d:cd:03:ec:54:93:cd:76:44:16:42:7b:9d:18:d6:
7c:12:53:3a:18:da:20:21:8d:12:e2:ff:90:9b:c9:
37:51:be:d5:74:6d:29:5e:15:85:16:fd:0b:98:3a:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DF:8C:D1:93:10:5C:96:0B:7F:31:A3:D5:2F:F2:02:7C:67:9E:BC
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/W9-M0ZMQXJYLfzGj1S_yAnxnnrw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.99.64.0/18
Signature Algorithm: sha256WithRSAEncryption
11:41:35:a6:4a:f9:7d:a5:a6:9c:7c:97:2d:50:f4:eb:69:31:
e5:39:52:5d:c5:19:fd:0c:63:c1:f1:f5:8a:07:4c:48:06:25:
cb:e0:c6:e6:49:a5:b7:5e:44:73:eb:6c:58:a2:30:6f:9b:fc:
7f:1b:3b:43:93:ef:ab:a7:ed:cc:ca:3c:8a:41:31:09:f8:7a:
af:43:32:04:19:5e:72:63:22:bb:28:d2:58:96:9f:94:17:a3:
c1:f2:fb:d0:c6:c9:22:4b:93:e9:28:af:4b:67:55:39:b2:ad:
0d:72:2f:96:1a:ea:d0:4e:d7:25:38:f5:af:f5:b5:f3:fb:8c:
9f:03:40:dd:59:45:6e:bb:5b:45:32:57:8c:cc:93:34:16:5b:
d2:52:1b:44:43:26:56:23:28:06:20:63:5b:db:f9:51:62:c4:
58:b9:89:eb:76:77:07:d6:b3:c0:36:ae:18:11:fc:6c:cb:13:
6a:ed:cb:6b:57:2a:78:d9:56:65:fb:38:6f:e9:78:83:f8:a9:
83:dd:f0:29:41:65:27:83:68:1f:2c:d6:c6:5d:33:96:19:7a:
27:15:64:05:2a:c3:85:18:6f:4e:49:9b:1e:c4:ad:9c:45:88:
0a:70:0d:d1:c3:2c:8a:b2:cf:c3:99:3e:d3:20:65:a3:fc:d5:
82:d7:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org