Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/WBUs6_621AEtK4NTMorlRKR_JoA.roa
File: WBUs6_621AEtK4NTMorlRKR_JoA.roa (raw, json)
Hash identifier: 5Y8vjShiQ1L9Mu1tPneisUSAZRy5FgGnXBA7BDtzFA8=
Subject key identifier: 58:15:2C:EB:FE:B6:D4:01:2D:2B:83:53:32:8A:E5:44:A4:7F:26:80
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 08C9
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/WBUs6_621AEtK4NTMorlRKR_JoA.roa
Signing time: Sun 07 Feb 2021 13:07:51 +0000
ROA not before: Sun 07 Feb 2021 13:07:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 2914
IP address blocks: 61.58.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Feb 7 13:07:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58152CEBFEB6D4012D2B8353328AE544A47F2680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:e5:22:1a:ce:0b:a2:f7:38:55:e9:56:c8:
dc:51:7a:d0:35:5e:d1:82:00:2e:5e:14:97:03:49:
9a:84:8d:8a:98:d9:f1:14:59:74:05:be:cc:87:2d:
0b:3c:ea:f9:b8:65:85:e4:a1:75:97:96:de:5a:79:
6b:3d:8a:e0:af:87:32:9b:32:88:30:52:bd:45:49:
48:76:4b:e8:07:f8:9d:42:e6:5a:27:59:c5:09:3f:
40:46:7e:6b:f9:a8:73:59:cf:70:43:13:a0:a6:ee:
03:aa:b8:06:12:4c:a5:81:da:6a:ef:34:1a:81:ed:
89:f9:96:7c:79:74:c8:c2:6c:de:db:85:7f:d0:71:
30:90:3f:20:d1:26:fe:cb:ab:57:79:24:a8:79:51:
0a:33:86:f6:0e:e9:74:e6:fa:94:4f:5f:7e:08:90:
8e:53:98:31:38:60:f7:cc:66:35:aa:fd:33:00:d4:
af:5a:75:1f:d0:8b:4b:49:00:91:e1:3a:f6:2f:e3:
4e:17:d0:0e:e8:fb:2e:16:3d:6d:ee:88:b4:0d:b0:
a8:77:e5:36:c1:46:aa:93:55:7e:aa:55:a7:5c:fc:
31:44:74:53:a8:6c:ba:09:be:eb:e5:86:5b:0a:07:
fc:c4:ed:8d:03:8a:d9:81:92:01:61:de:c3:3b:8c:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:2C:EB:FE:B6:D4:01:2D:2B:83:53:32:8A:E5:44:A4:7F:26:80
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/WBUs6_621AEtK4NTMorlRKR_JoA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.32.0/20
Signature Algorithm: sha256WithRSAEncryption
46:8f:e3:05:7a:57:7b:57:bb:fe:22:27:9a:6b:f9:a4:e5:b2:
41:ab:06:e7:5c:2d:09:4f:cf:98:a0:49:ee:ed:59:53:f3:39:
bb:b5:d2:a0:cc:df:d6:b1:25:41:f4:9d:5f:4f:78:ed:ad:08:
ea:35:26:aa:a3:ea:69:5f:55:25:f3:49:be:aa:15:4f:08:5a:
e4:26:c1:ae:9c:9a:48:3b:c0:fb:bf:c4:66:cd:30:23:46:f4:
ae:09:cc:84:a8:6d:03:71:0c:7c:2d:b0:73:1c:03:23:75:87:
91:3a:7e:27:67:dc:e0:8d:bd:bd:55:ce:5e:7e:9f:06:29:bb:
5c:a5:9b:78:69:4b:60:7b:d3:f6:b9:3b:41:3b:68:b8:a1:7f:
bc:f0:cd:ac:37:92:bf:d7:19:37:6a:f8:e9:1b:1d:a0:52:e6:
b1:20:30:a9:ba:b7:61:04:29:a0:9e:dd:35:30:12:59:8c:fb:
8f:8a:14:4c:9d:0f:74:c4:57:25:6b:a1:fb:81:4c:8a:ba:48:
c2:35:9c:1c:09:3f:59:fe:5e:69:d8:c3:ce:d5:35:78:fd:35:
b9:52:20:17:8d:30:8d:17:80:8a:ea:b3:85:15:23:1a:52:65:
18:8b:f4:2a:9b:b7:f8:b6:1e:d9:5d:61:1d:7e:a8:71:13:ef:
07:cb:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org