Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/sr-BpeyTVJIBOQr5BrTs6ETUwZ8.roa
File: sr-BpeyTVJIBOQr5BrTs6ETUwZ8.roa (raw, json)
Hash identifier: CtTA9ILq7kVC40Opu0x/GlggbFib/+ey0BZEmefwNz0=
Subject key identifier: B2:BF:81:A5:EC:93:54:92:01:39:0A:F9:06:B4:EC:E8:44:D4:C1:9F
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/sr-BpeyTVJIBOQr5BrTs6ETUwZ8.roa
Signing time: Thu 15 Sep 2022 02:50:59 +0000
ROA not before: Thu 15 Sep 2022 02:50:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 49.213.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 15 02:50:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B2BF81A5EC93549201390AF906B4ECE844D4C19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:2e:f5:19:ac:f8:5c:45:e3:e2:01:b3:8c:
ee:20:47:f0:4f:44:a0:b9:41:27:8c:e0:8f:11:55:
02:7a:e0:55:49:36:e0:d7:64:69:27:7c:f0:81:25:
c2:55:8e:30:b9:88:4e:b9:34:74:39:16:18:50:81:
0f:69:7f:9c:a3:d0:d3:15:ed:bf:9b:ff:9a:31:d8:
15:3d:35:60:66:1a:66:5b:8b:a6:14:dd:bb:22:40:
30:47:be:ce:e8:23:2c:d3:89:4f:50:eb:40:d5:f3:
ee:dc:08:60:65:09:36:85:2c:30:fb:14:75:ec:27:
3a:bb:0a:3f:79:64:95:52:75:41:08:db:89:31:1b:
f2:40:91:95:80:e1:ce:87:4b:1c:31:39:30:02:04:
c5:1e:17:5a:03:4c:e8:cc:84:c8:e1:79:55:51:ab:
20:68:e2:5c:7f:b0:40:07:90:1f:3f:0f:b5:a1:6b:
c1:e9:8e:65:7b:7c:c9:61:9b:be:45:a3:e7:c0:66:
27:aa:3d:45:06:e7:40:42:69:a2:09:a7:23:1d:ec:
84:fc:1a:93:18:e2:7e:76:ed:cb:f5:8f:52:b3:2d:
87:bd:b5:c4:ce:ab:f3:05:13:06:70:60:b9:dd:9e:
6f:10:22:75:1d:02:46:87:dd:53:d5:8f:c6:b5:83:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:81:A5:EC:93:54:92:01:39:0A:F9:06:B4:EC:E8:44:D4:C1:9F
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/sr-BpeyTVJIBOQr5BrTs6ETUwZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.213.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7b:dc:58:76:6b:80:b2:3d:81:8e:01:81:8c:df:b4:77:58:8e:
d1:b5:63:90:20:b3:7b:ea:4a:8d:16:b7:f8:df:8e:82:07:b3:
54:d2:2e:63:2f:5a:4c:19:34:0a:ea:cb:b9:cf:ed:8e:39:52:
b7:7e:79:27:74:85:60:0f:b1:e4:7e:94:25:39:ea:da:2c:37:
8a:97:f3:c7:78:46:c4:4d:a7:27:c8:34:b7:b6:89:28:05:e8:
ec:2b:73:72:6b:3e:0f:30:5e:2b:fd:e7:8f:20:28:ec:9a:ff:
57:30:5a:04:fb:40:c7:47:dd:6a:f4:61:b4:6d:93:6f:ea:48:
83:13:69:7f:48:36:8f:e6:0a:92:b0:50:3f:06:d1:e5:7d:2e:
6a:2a:2e:bc:3c:a0:25:9c:45:27:66:b6:e1:70:d4:68:0c:b7:
6f:a6:a3:4c:1f:17:57:ee:b4:43:26:16:ee:31:b1:6a:76:8d:
e4:ac:96:e5:19:67:cd:4e:04:ee:5f:4c:0d:72:f9:19:70:26:
18:c0:65:b7:9b:55:0e:b4:da:27:2d:04:bf:d7:dd:41:c7:f1:
1e:e8:e9:ab:cb:bf:19:41:a3:05:8e:f3:d5:9c:7b:80:02:1e:
ac:8a:43:16:2d:ec:08:8d:e1:17:c1:98:d1:ac:69:84:b5:ab:
36:1b:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org