Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/VP39qFUtqME4L82mfFa8x-51N90.roa
File: VP39qFUtqME4L82mfFa8x-51N90.roa (raw, json)
Hash identifier: Njbe9QNg7f8IfbanNUuMQN1BnA9s5pF5P6QpoUoFYns=
Subject key identifier: 54:FD:FD:A8:55:2D:A8:C1:38:2F:CD:A6:7C:56:BC:C7:EE:75:37:DD
Certificate issuer: /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial: 0934
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/VP39qFUtqME4L82mfFa8x-51N90.roa
Signing time: Thu 13 Jan 2022 17:21:17 +0000
ROA not before: Thu 13 Jan 2022 17:21:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 133955
IP address blocks: 223.165.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356 (0x934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Validity
Not Before: Jan 13 17:21:17 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=54FDFDA8552DA8C1382FCDA67C56BCC7EE7537DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:dc:86:78:29:9c:2f:5d:65:2e:7c:f9:15:
f9:47:82:12:c0:17:93:ee:f3:11:51:64:dc:d1:ea:
ac:a6:d5:df:29:8b:48:2e:a8:30:e4:ab:d8:a9:30:
ad:1e:cf:ed:f0:f4:f1:5b:a5:91:41:fe:70:93:3a:
21:d2:36:65:03:76:24:f5:03:07:f0:2c:6a:fd:4e:
78:0e:ad:11:7b:22:5d:41:63:af:86:57:98:6b:13:
5d:0b:de:1f:3e:89:5f:8f:c7:83:b8:9c:68:f5:78:
d3:11:82:11:c8:58:bc:63:f8:74:bc:e0:0c:20:e5:
0f:63:a4:25:c7:76:da:d3:0a:52:49:7b:39:f3:8d:
e9:1a:c0:38:a1:06:71:04:a5:05:1c:9a:12:40:60:
26:01:16:d3:13:e1:8e:8a:30:e9:c9:3c:01:08:82:
6b:02:76:53:31:c4:26:e2:4f:d6:78:49:73:06:55:
85:a6:ea:f0:bb:27:62:69:9f:01:f6:d8:c4:d4:5d:
e4:09:d9:6f:3f:02:a8:b7:48:11:fd:66:25:7e:7a:
cb:a1:87:85:f3:91:56:96:c2:74:df:55:b0:7a:0a:
94:70:02:e7:6a:ab:e9:54:a3:5d:3e:a8:12:af:67:
0d:f5:3d:1e:9a:d9:be:18:6e:6d:cb:fb:6e:3c:d7:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:FD:A8:55:2D:A8:C1:38:2F:CD:A6:7C:56:BC:C7:EE:75:37:DD
X509v3 Authority Key Identifier:
keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/VP39qFUtqME4L82mfFa8x-51N90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.165.8.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c4:ce:46:e9:69:c9:f0:e4:98:a6:6a:22:85:35:b3:c7:3c:
cc:b5:46:76:e6:63:98:66:01:35:70:62:d3:34:06:22:d8:3c:
72:d9:f4:07:11:ae:a3:6c:a7:09:d7:03:6b:ca:7d:d3:c1:ef:
4e:db:9a:6d:44:11:96:5b:25:74:48:a5:65:62:ab:d5:c9:c1:
9c:49:4a:8e:15:d2:23:9a:41:9f:80:61:6f:4f:92:08:43:47:
dd:15:78:c1:a1:84:5b:75:0e:e4:50:44:56:73:21:e2:b5:b6:
88:b9:c6:05:2c:5d:7e:33:b1:a8:15:26:93:58:89:7c:bf:0d:
4e:90:1c:c7:a7:ff:28:9c:42:c4:7e:03:a0:a1:36:45:1e:d1:
a9:73:fb:1c:06:4d:16:82:72:d1:12:df:81:de:b1:36:2b:60:
90:51:e6:2c:f0:67:89:1c:0e:8c:41:ba:f0:80:4c:58:13:b0:
c6:3b:ac:ab:93:38:d2:dc:21:76:2d:de:79:9d:ef:84:8b:3c:
98:07:ca:94:06:1a:c7:20:87:50:02:9c:b8:2c:ef:81:d3:cf:
29:e1:10:32:7a:4d:56:24:d9:df:3f:69:cf:29:e8:98:f9:05:
63:26:dd:40:7a:49:85:3b:de:96:96:92:58:43:2a:cd:2d:9d:
5e:a2:3a:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org