Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/dKUPYWlbcV9UFQXeeiYxf_jHuD8.roa
File: dKUPYWlbcV9UFQXeeiYxf_jHuD8.roa (raw, json)
Hash identifier: 3WGEg9IB4WzPudHwoVlZJzEHbqOtEqKK2wsXFs47jFg=
Subject key identifier: 74:A5:0F:61:69:5B:71:5F:54:15:05:DE:7A:26:31:7F:F8:C7:B8:3F
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 077D
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/dKUPYWlbcV9UFQXeeiYxf_jHuD8.roa
Signing time: Tue 29 Sep 2020 10:00:55 +0000
ROA not before: Tue 29 Sep 2020 10:00:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 116.118.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 10:00:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=74A50F61695B715F541505DE7A26317FF8C7B83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:4a:16:1e:6a:24:25:68:35:ed:69:09:e7:
41:62:e7:f7:d0:57:5a:b1:db:94:86:04:99:9c:6f:
d5:b9:b6:85:78:c0:f3:71:96:85:71:26:7a:6e:36:
80:aa:b5:94:12:0a:a2:07:93:77:1a:f0:53:f8:c4:
7c:a2:c0:91:71:b2:1a:9d:b0:a5:41:a1:2d:56:4c:
e7:53:f7:63:d5:1a:71:1d:69:9a:8b:69:ff:cd:84:
be:da:1d:4b:3e:b0:cb:49:8e:69:4a:e6:a9:bf:03:
a6:59:84:fa:bd:69:b5:c9:60:1e:90:bc:2b:f0:19:
91:da:32:6a:0b:8a:82:d3:e9:2b:06:f4:73:04:4a:
5d:17:ae:3c:95:46:04:e6:6d:a3:da:ae:a5:dd:18:
2c:c6:50:65:f9:9f:e3:aa:4a:88:3b:45:7c:91:a2:
9f:26:6b:10:0a:f9:02:32:ac:53:65:47:91:23:a5:
a5:06:0e:2e:7d:de:76:25:5f:9f:f9:00:df:1d:af:
2e:cf:63:01:de:e6:9d:03:3f:05:03:f1:19:aa:c7:
3c:cc:37:aa:a3:c5:44:5b:c3:eb:ab:af:6e:3d:31:
74:61:58:f3:07:38:5e:c1:24:9d:19:21:d4:4d:a6:
30:b5:f2:e0:70:88:3f:6e:b3:bd:45:02:a6:c6:84:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:0F:61:69:5B:71:5F:54:15:05:DE:7A:26:31:7F:F8:C7:B8:3F
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/dKUPYWlbcV9UFQXeeiYxf_jHuD8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.118.128.0/18
Signature Algorithm: sha256WithRSAEncryption
05:95:95:60:48:92:b0:3a:ba:fc:32:de:f3:90:5a:a3:42:d5:
6b:88:2b:a1:c2:82:11:b6:0c:0c:10:88:1b:a3:97:48:33:7c:
d0:0c:3f:47:3f:7b:70:b1:8d:0f:df:8c:fc:69:6a:b9:48:d7:
fc:1e:f7:27:f2:b1:5f:c2:7c:42:99:8a:b6:02:ab:5a:4b:d3:
c5:15:8b:1e:d7:2e:cd:5a:27:d4:ff:9d:b9:61:8c:70:4b:12:
b0:91:39:b4:04:12:af:9a:d3:b9:90:2d:cc:44:af:bb:6f:43:
86:8e:fd:cd:08:5a:56:d3:82:33:9f:0c:f7:1d:e4:5f:7d:fa:
12:6e:6b:5c:f5:34:5f:0e:1a:43:39:50:01:c3:cd:47:bd:a9:
a2:7b:3a:b2:f1:ba:b3:64:4a:75:cf:45:3c:84:62:f7:53:fa:
90:1a:44:61:ac:78:6f:5c:80:0a:5f:33:ce:2c:44:99:a1:e3:
7b:e7:0b:7a:77:1d:27:54:da:e7:2d:88:41:10:bb:6a:77:d8:
f1:d7:4f:cc:d5:c9:2a:eb:0f:ac:14:21:24:f1:84:04:83:17:
14:1f:ca:06:bb:a6:ea:af:2f:e3:9b:71:be:8f:2c:e8:64:4a:
d9:9c:79:b3:d4:29:40:50:ef:d8:d8:85:09:4c:4a:6c:58:23:
f8:22:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org