Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/jvASmIXR62TWvQBhNgX1hojgj_M.roa
File: jvASmIXR62TWvQBhNgX1hojgj_M.roa (raw, json)
Hash identifier: P+ULKmlMYxEwdRHT4aWtBh6Owfel33W7B9OBaHpK6tk=
Subject key identifier: 8E:F0:12:98:85:D1:EB:64:D6:BD:00:61:36:05:F5:86:88:E0:8F:F3
Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial: 088F
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/jvASmIXR62TWvQBhNgX1hojgj_M.roa
Signing time: Sun 07 Feb 2021 13:00:46 +0000
ROA not before: Sun 07 Feb 2021 13:00:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18185
IP address blocks: 211.76.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Validity
Not Before: Feb 7 13:00:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8EF0129885D1EB64D6BD00613605F58688E08FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:52:2a:1d:a7:55:2f:d3:b5:f6:6d:39:91:
e2:50:e9:42:58:b7:79:68:b2:06:f9:ad:ea:87:92:
91:42:92:21:48:33:4d:e7:a1:cd:ee:6d:5c:6e:c9:
c6:2b:dd:f0:f9:4e:af:aa:86:28:74:16:cf:64:8f:
17:48:47:9f:8e:1e:fb:d9:bf:b0:b4:fd:e3:1d:b9:
bf:f9:c0:34:00:26:ed:a3:d9:42:9a:c0:27:95:de:
82:00:a3:e8:44:47:05:69:56:f8:02:4d:ff:fc:73:
32:66:fd:96:97:40:06:92:0d:85:99:ab:91:03:61:
77:38:ff:28:f9:aa:85:6d:b5:cc:d3:7e:46:39:4e:
ea:74:3a:fa:f2:84:e8:19:f0:76:49:39:ed:b4:b9:
84:f1:8d:5d:b7:26:8f:0e:33:a4:e7:05:b3:28:ed:
63:f3:2b:12:be:63:63:a5:99:42:8d:c7:1e:e6:56:
d1:74:01:dc:a1:f2:47:c7:86:f8:d1:16:f0:57:ff:
22:9d:bc:be:6a:1d:8f:05:18:90:95:3a:11:57:c9:
0b:96:47:f8:0b:9b:df:b3:51:9c:02:6a:e6:82:57:
5c:91:02:c3:f6:e2:1e:87:1a:73:d3:15:e5:9f:71:
cd:cc:f8:2f:12:78:42:53:83:91:20:66:66:d0:b6:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:12:98:85:D1:EB:64:D6:BD:00:61:36:05:F5:86:88:E0:8F:F3
X509v3 Authority Key Identifier:
keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/jvASmIXR62TWvQBhNgX1hojgj_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.240.0/20
Signature Algorithm: sha256WithRSAEncryption
14:b1:81:15:da:75:af:93:ac:ec:3d:08:4a:05:0c:7f:b0:5a:
94:bf:4c:23:f2:0c:42:fb:62:a4:c0:89:9f:93:f4:d8:c2:fb:
06:7e:4c:85:c4:12:b3:e8:0a:c5:9d:74:91:81:5a:bb:ba:9b:
94:6e:64:39:97:f3:c5:c0:27:b3:d2:4e:86:a6:83:24:c7:da:
e3:eb:a7:cf:1f:68:01:24:e1:f2:84:80:27:b8:be:ef:1b:20:
74:02:17:77:14:cc:69:86:71:59:24:a8:7e:db:0f:27:a1:06:
ee:6c:3b:93:2b:97:f5:f1:f8:b8:3c:88:53:f7:f6:8f:0e:8c:
c4:28:88:0c:ec:d1:2a:1f:8b:e8:60:2b:7a:1f:c8:db:e2:bd:
2d:eb:b6:cf:23:6f:4d:fb:91:f6:13:17:46:6e:aa:ef:41:37:
a4:e0:48:92:d1:a5:de:0b:5d:5e:e7:2e:7e:dc:00:0f:12:e7:
b2:a4:9b:d9:84:85:3a:b4:3c:64:09:8e:f3:79:07:ae:6a:1d:
98:46:78:99:e1:bf:12:2f:19:ec:23:07:b9:e5:56:55:8b:44:
91:a5:b9:84:71:80:00:cd:3f:af:42:8c:bb:b7:ac:8b:5c:8d:
d4:6e:45:25:88:11:01:19:76:86:0c:43:61:c8:0a:fc:b4:35:
e4:f2:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org