Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/uTdnzXhHcezEJ5YYHxKsg7yb3YM.roa
File: uTdnzXhHcezEJ5YYHxKsg7yb3YM.roa (raw, json)
Hash identifier: 1WEKR7fmNBQ1Nm64DMcyS66/UEM+XwC5IuDNHA8dQOQ=
Subject key identifier: B9:37:67:CD:78:47:71:EC:C4:27:96:18:1F:12:AC:83:BC:9B:DD:83
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 099D
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/uTdnzXhHcezEJ5YYHxKsg7yb3YM.roa
Signing time: Wed 29 Sep 2021 02:53:19 +0000
ROA not before: Wed 29 Sep 2021 02:53:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 27.100.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 02:53:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B93767CD784771ECC42796181F12AC83BC9BDD83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:c7:67:50:95:48:61:37:cd:ea:1c:1a:92:
cc:f9:76:e4:22:69:3b:c2:6b:21:0f:06:c1:5a:00:
bd:be:d8:0a:92:ea:63:8b:f2:ea:4d:01:d5:56:97:
86:50:f6:9b:32:0e:d9:d2:77:c3:d1:35:32:af:f2:
c4:dc:0c:0a:00:1e:d0:e9:2c:2a:3d:68:4b:6e:2b:
26:32:6b:10:77:01:43:4a:f7:f1:85:f6:8f:be:4e:
4f:67:f3:2b:b6:32:14:7f:b0:9b:eb:c1:58:f4:de:
55:ba:05:a2:14:77:af:c8:59:a8:cd:4f:87:a6:22:
68:f2:10:bc:d3:d3:6a:2a:2e:2c:6f:54:f8:f2:98:
57:89:27:96:7a:7c:e3:23:24:bf:55:8e:d4:9e:b7:
7b:3d:ce:76:68:82:2e:f5:64:a9:94:f2:fc:57:7f:
7f:a8:5b:22:d9:a3:9d:20:5f:cc:f8:d5:e8:1c:cd:
b8:25:db:40:dd:d0:6e:4e:58:21:1d:a3:1e:a9:43:
a4:a9:5b:2b:23:26:61:6f:8f:1a:08:a9:1c:f3:94:
42:84:92:31:a5:5b:75:1e:95:71:e5:05:3a:8e:ff:
cb:79:f6:23:e5:cf:07:16:46:bb:b8:86:a9:47:28:
2a:9f:29:a7:f0:16:2c:89:58:a6:75:59:1c:e0:84:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:67:CD:78:47:71:EC:C4:27:96:18:1F:12:AC:83:BC:9B:DD:83
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/uTdnzXhHcezEJ5YYHxKsg7yb3YM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
60:1a:77:92:3e:e0:99:26:8c:8e:ac:92:73:90:76:46:4d:7e:
9a:5f:05:54:f5:a1:a6:d8:6f:3c:96:05:a9:ea:2a:d8:d1:51:
eb:43:d8:46:55:a0:a7:b7:d9:5a:56:b8:1d:99:f9:0d:ea:f1:
c8:b1:24:9c:26:47:1b:ac:38:58:8e:b0:29:4a:1a:de:30:d2:
3e:37:85:86:4a:7c:bf:1b:8a:51:aa:4e:67:4a:05:54:75:07:
1a:b7:cf:31:74:cb:07:96:c6:f4:fd:17:8c:2b:c3:13:b8:48:
e8:c4:3e:7e:de:37:c3:7a:e6:ab:d7:a0:3d:cf:c0:1c:70:c8:
eb:ae:90:61:94:ec:c3:fc:f2:b8:a1:50:be:be:e1:30:6c:a1:
86:49:4b:e3:89:dd:c2:a0:76:17:2a:90:c3:cd:9c:3d:d9:d8:
bc:ac:a0:4c:65:7e:5f:a9:21:a1:b4:05:fe:7c:b9:56:a3:b2:
59:77:5d:ec:a2:b1:b9:55:22:6d:3d:81:b7:41:73:97:7c:d0:
58:ef:52:e1:e0:1b:ea:71:8d:6e:be:e7:42:32:e1:64:16:e8:
55:42:9c:36:7a:d6:14:b0:f6:db:b2:34:6e:0f:cd:38:2b:37:
0e:08:06:8d:ff:0e:f0:8e:e2:7d:d1:1b:d5:75:1c:d5:cb:f2:
80:68:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org