Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/sAdTkq7sJnTi_DacDZdPw8B-UQk.roa
File: sAdTkq7sJnTi_DacDZdPw8B-UQk.roa (raw, json)
Hash identifier: hP9MhT4A0K3HEYEJ9q2eQachZig/6hwyNOrdYCNNPlI=
Subject key identifier: B0:07:53:92:AE:EC:26:74:E2:FC:36:9C:0D:97:4F:C3:C0:7E:51:09
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 08E3
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/sAdTkq7sJnTi_DacDZdPw8B-UQk.roa
Signing time: Sun 07 Feb 2021 13:06:56 +0000
ROA not before: Sun 07 Feb 2021 13:06:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 49.213.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Feb 7 13:06:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B0075392AEEC2674E2FC369C0D974FC3C07E5109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8c:4f:ba:80:b4:06:79:84:73:bd:fd:5c:ca:
4c:07:f2:73:c0:fd:47:e8:50:dc:79:f7:64:92:f6:
6f:a6:2e:35:92:eb:02:5a:01:90:ed:c9:6f:47:01:
51:56:2a:f1:82:42:8b:e8:88:2a:e8:10:b8:3e:98:
bd:0e:0a:fe:ec:9f:4f:c6:a6:38:ae:2b:ab:9b:e6:
1a:b5:73:e3:aa:d4:6b:4b:b3:fb:e8:df:a2:18:ff:
8a:74:28:ae:58:27:b1:df:a0:d6:4b:a9:db:5a:3f:
d8:bc:56:b9:7c:03:90:5b:99:10:6e:0a:35:b5:b3:
bc:bd:f7:0c:3c:c6:51:18:1f:c3:8d:b2:59:94:86:
bc:9d:1a:29:2f:a1:8b:2d:c9:b0:3c:a1:4c:e9:fb:
c2:59:16:5a:af:00:30:8b:26:0c:c6:06:9e:23:64:
84:7e:8f:3b:21:6b:4e:43:ab:3d:6e:43:bb:62:6c:
61:df:01:54:d9:1a:c4:29:f4:11:05:01:23:cc:3c:
38:22:23:e0:b9:b1:3c:f4:fa:6b:26:ad:27:e2:28:
57:de:a2:60:6f:cb:c4:74:78:84:51:d2:43:96:ea:
74:00:8e:45:0b:ad:12:4e:58:68:06:9d:76:65:cf:
6d:9e:ab:1b:9b:66:ae:b1:e6:d2:bf:ed:e1:84:5e:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:07:53:92:AE:EC:26:74:E2:FC:36:9C:0D:97:4F:C3:C0:7E:51:09
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/sAdTkq7sJnTi_DacDZdPw8B-UQk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.213.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:30:2f:1a:61:ce:3f:ef:82:f4:d9:90:53:cf:b5:20:cb:2b:
53:38:69:f8:53:4d:11:ab:6f:3f:4e:bf:2b:cd:87:ce:99:80:
5f:88:8c:dc:78:87:4e:45:60:c5:2a:37:eb:5f:bc:93:5b:09:
7d:ee:35:73:08:af:ab:a4:a3:40:e0:25:ad:ed:f9:c3:e7:17:
52:99:5b:7f:2a:48:ca:26:08:d9:63:56:7a:c0:4f:0c:91:44:
68:f5:ec:e8:8a:69:74:ee:79:20:5f:eb:59:6a:f3:c9:31:48:
0a:91:6f:ed:7a:ba:96:b8:82:6f:d2:5d:10:b7:fd:94:bd:1d:
76:07:7c:f6:2b:2d:58:31:e8:e1:8d:12:95:2a:a6:9b:fa:6c:
fa:eb:5e:1f:7c:cc:d9:b8:10:e4:0f:55:75:1c:2d:b2:b6:4d:
99:8f:d5:68:1a:db:81:57:73:46:cb:c8:97:68:54:b5:6b:13:
4c:4c:05:e3:46:ca:5b:89:98:09:e3:28:bf:82:23:e2:be:c8:
41:b8:70:a9:0a:73:43:30:72:db:4f:d4:68:20:48:23:68:b9:
c6:74:6a:79:14:1c:25:db:1e:20:c4:30:b1:72:92:af:a7:9d:
71:5c:d7:91:e5:63:8c:31:9b:62:bc:15:47:24:58:2e:f7:3d:
8e:32:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org