Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TISNET/w7N9DFpY0uYPimRktaCJQ_tx11U.roa
File: w7N9DFpY0uYPimRktaCJQ_tx11U.roa (raw, json)
Hash identifier: 6CLsiV2P6MeiVysA66L1R9pEP+3SedtWVCeOcJYPzUI=
Subject key identifier: C3:B3:7D:0C:5A:58:D2:E6:0F:8A:64:64:B5:A0:89:43:FB:71:D7:55
Certificate issuer: /CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Certificate serial: 06
Authority key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/w7N9DFpY0uYPimRktaCJQ_tx11U.roa
Signing time: Fri 04 Aug 2023 03:59:33 +0000
ROA not before: Fri 04 Aug 2023 03:59:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7535
IP address blocks: 139.223.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Validity
Not Before: Aug 4 03:59:33 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3B37D0C5A58D2E60F8A6464B5A08943FB71D755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:56:08:55:32:2e:c1:8c:78:f5:d3:7a:3f:
9c:8e:9a:6f:fd:e3:1c:63:9c:ad:b5:77:c7:79:d2:
66:6e:ee:c5:a4:38:1b:ec:2c:7d:30:c5:48:eb:ff:
60:e0:2a:0b:c8:24:0d:7a:ab:6f:81:ea:4f:2c:97:
e6:ab:b0:c3:3e:34:4f:a8:33:ac:03:5b:dd:a5:cc:
f1:cb:f2:d1:89:9c:c9:71:cc:23:e5:79:c8:6c:2b:
07:ab:56:5f:fd:2f:5c:2b:88:f5:d2:b1:25:f4:31:
a2:d9:ca:66:77:61:d3:df:57:57:b2:05:00:0c:9a:
30:9b:e0:7c:21:c2:f6:4a:fe:73:be:0c:28:e3:c0:
f6:aa:b5:76:34:ab:5d:a0:e7:99:a5:b4:6a:58:88:
1a:6a:ce:b9:f6:a4:36:6e:00:b4:99:d2:2c:f8:a7:
b7:ed:4a:13:70:1c:15:99:fb:c2:54:48:9a:17:05:
0a:27:4a:34:12:39:f4:65:23:58:c0:ea:f9:bd:59:
cd:3a:09:60:ab:e2:cc:e3:1f:b8:87:02:77:a2:46:
ba:45:cd:c6:7a:9c:d7:6c:33:a7:e5:53:84:14:23:
b7:c4:18:b8:c2:43:5f:9a:31:06:58:05:fb:d4:51:
54:c8:b5:00:ab:9b:b0:05:e4:f9:08:df:b7:ca:d3:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:7D:0C:5A:58:D2:E6:0F:8A:64:64:B5:A0:89:43:FB:71:D7:55
X509v3 Authority Key Identifier:
keyid:06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/w7N9DFpY0uYPimRktaCJQ_tx11U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:4f:36:39:cb:55:de:6e:51:7f:04:89:ae:2f:38:ae:c2:06:
b0:ac:2b:17:62:f9:bd:e6:72:03:46:78:18:cd:fd:61:9c:9d:
8a:04:20:84:7c:d3:2b:6d:d8:4d:8a:8c:5f:7f:be:a1:f7:15:
ef:c8:6b:6d:a3:fd:9a:39:28:36:0c:40:1b:54:f2:8c:9b:a6:
a6:b7:d4:69:52:4f:83:88:56:7d:c5:75:e5:fa:95:e5:58:ab:
0a:db:21:06:45:00:ab:69:eb:77:69:3a:8a:27:56:1f:ab:bb:
f3:3f:86:73:67:30:1d:9a:d5:30:98:99:2c:9b:19:4f:83:56:
2a:cb:98:88:64:33:21:6d:e9:9b:1a:40:c6:24:38:1a:80:4b:
1c:7d:25:62:d3:24:62:bf:e4:a3:70:fc:85:74:16:d8:e9:9d:
a0:4c:25:4f:90:86:23:15:80:8c:29:36:1b:5d:2d:46:36:79:
b7:41:9f:bd:3c:4f:84:cb:4c:29:50:45:fc:99:d6:48:1b:55:
12:d6:ef:f4:f2:3b:aa:f6:d2:50:23:6a:2b:44:88:4e:ec:20:
07:f8:58:89:49:2d:bf:ad:8c:e0:52:3b:1c:2c:21:f7:82:a5:
41:1c:1c:cc:fc:ca:d9:61:de:6d:60:53:b4:42:6b:23:da:1d:
a5:ee:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org