Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d7ZYw90EkhDhD9MEXfB_GeKEHc.roa
File: 4d7ZYw90EkhDhD9MEXfB_GeKEHc.roa (raw, json)
Hash identifier: vuG0lvEIKNoyHesBzcnVBoKwoNIsMM/tEmar32+sqjw=
Subject key identifier: E1:DE:D9:63:0F:74:12:48:43:84:3F:4C:11:77:C1:FC:67:8A:10:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15A1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d7ZYw90EkhDhD9MEXfB_GeKEHc.roa
Signing time: Sun 07 Feb 2021 12:05:40 +0000
ROA not before: Sun 07 Feb 2021 12:05:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 45.64.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5537 (0x15a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E1DED9630F74124843843F4C1177C1FC678A1077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:d4:f5:c5:63:44:9b:6a:e3:4f:cd:24:ea:
ea:9c:ae:13:03:b5:38:20:2b:56:6f:9e:79:43:85:
f1:fe:e5:90:27:96:dc:05:0d:23:bf:5e:64:4b:7f:
c7:73:f7:ba:1e:b4:5f:27:97:61:fe:c0:64:de:2d:
2a:61:68:d4:b7:93:9b:70:33:fb:e8:6f:37:a3:78:
bd:1f:82:67:8b:58:91:82:c7:50:14:c1:b1:cf:29:
24:ac:8a:b5:11:22:08:51:11:34:a6:57:e0:73:48:
29:66:df:f4:c7:51:5c:39:47:d3:98:b6:61:22:a0:
0a:97:1a:15:ee:35:7c:fd:e0:bc:4b:90:15:42:ca:
b0:71:eb:d5:39:f9:5e:28:7d:f7:5d:1f:7d:71:8e:
6c:35:e4:9c:08:00:e2:ad:2e:58:88:e2:2a:e6:4d:
a5:76:63:bb:71:4a:d2:08:92:4f:4d:f3:ac:66:46:
eb:a5:7e:31:16:4e:f4:94:99:27:e8:38:51:bf:16:
7d:44:ee:ba:e1:b3:34:79:f4:77:6f:41:4c:55:69:
c3:0e:0b:ea:f6:a6:58:35:64:c5:1c:e4:35:0d:e4:
f6:21:66:7c:cf:29:8f:df:57:f0:7f:d3:04:46:34:
81:7b:3b:4b:cc:2d:25:9b:c5:c3:b8:bc:37:fc:ec:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:D9:63:0F:74:12:48:43:84:3F:4C:11:77:C1:FC:67:8A:10:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d7ZYw90EkhDhD9MEXfB_GeKEHc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e6:0a:14:83:95:3b:6d:75:5c:c7:2d:b1:8f:70:a0:ea:ba:
b2:82:5d:d7:e9:c2:8b:9b:10:7f:e7:cd:eb:36:92:77:fb:f9:
70:86:77:ab:d0:92:1d:55:6c:08:f7:ec:24:2f:99:5d:7e:ad:
6d:ef:e7:c2:04:7f:5d:31:09:6e:1a:e5:8a:4f:15:74:4e:44:
07:9d:15:f3:19:3b:79:f2:3e:da:85:54:6b:4d:81:ad:1d:35:
65:35:f1:b2:16:3f:29:3b:f2:10:40:3b:a1:40:59:74:f3:df:
ca:2f:e4:2c:dd:c6:16:bf:98:4a:0e:d6:61:3a:3e:95:33:b0:
22:ab:81:46:8e:70:b2:b3:d3:8d:6f:01:4f:af:1f:d2:d2:fb:
2a:b0:7a:ee:39:8f:92:57:42:35:ee:cc:45:9e:1d:e8:e3:60:
3b:0e:37:f5:74:99:42:73:33:95:aa:9e:e5:d3:2b:f8:7b:5c:
da:c4:4d:9f:a2:33:40:2b:cd:f8:b0:e0:3a:31:5b:82:49:76:
46:2b:33:20:fb:39:c3:57:a9:25:62:3a:cc:3a:1e:eb:9b:13:
2f:a1:42:ec:ea:95:eb:19:08:ff:53:08:7c:6d:30:e2:eb:cb:
8f:da:9d:79:8a:01:a6:2f:bd:d1:d8:15:37:ac:fc:27:74:70:
90:1b:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org