Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/_er5Lzm6CxRMQSVhiftTKexB2l4.roa
File: _er5Lzm6CxRMQSVhiftTKexB2l4.roa (raw, json)
Hash identifier: /Sdg9IWTzVgHsyn21MmvHPjuotlMQ+KCfKJG43FvFYg=
Subject key identifier: FD:EA:F9:2F:39:BA:0B:14:4C:41:25:61:89:FB:53:29:EC:41:DA:5E
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 08D5
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/_er5Lzm6CxRMQSVhiftTKexB2l4.roa
Signing time: Sun 07 Feb 2021 13:08:00 +0000
ROA not before: Sun 07 Feb 2021 13:08:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18018
IP address blocks: 122.255.94.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Feb 7 13:08:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FDEAF92F39BA0B144C41256189FB5329EC41DA5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:7d:ab:0b:a1:1b:90:80:7e:1c:47:1d:9e:
47:f0:4f:a6:11:0b:aa:86:92:48:3c:6c:22:8f:59:
c1:9c:0d:f4:ac:20:f5:e3:99:71:08:58:de:d8:67:
14:2a:1d:6c:81:4e:73:ac:ab:dd:34:22:19:7e:67:
8a:d9:64:14:67:9c:75:a2:cc:93:f6:47:50:5b:66:
55:2b:7f:96:40:50:32:4e:8c:8e:5e:60:da:08:72:
6a:1e:7e:4d:34:d6:91:67:95:d6:4d:0a:94:7b:e2:
fd:15:9d:e4:ba:03:2d:13:35:fd:f2:3a:49:b9:a1:
3d:6c:0c:da:e8:32:af:16:5a:8e:17:d6:59:28:55:
56:c6:e5:db:9e:65:80:cd:d9:4f:07:9b:11:8f:3c:
0b:0b:9e:63:24:6d:a7:bc:f2:97:a8:17:b6:6d:1e:
0f:c0:3a:65:f6:a0:98:42:fc:39:cf:11:40:e5:46:
c1:bb:b5:ab:f6:04:45:49:1a:2a:7c:f4:0c:a1:98:
5d:e5:ae:10:39:f7:c1:d8:fe:4e:0f:6b:30:63:e1:
b9:a2:80:0b:8d:b5:d8:45:ac:3b:5c:b8:3b:24:86:
35:48:a7:68:d0:22:98:41:9e:90:38:7d:8e:92:68:
79:2b:54:06:17:04:b6:4c:76:7a:0a:8b:71:4d:ab:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:F9:2F:39:BA:0B:14:4C:41:25:61:89:FB:53:29:EC:41:DA:5E
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/_er5Lzm6CxRMQSVhiftTKexB2l4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.64/26
Signature Algorithm: sha256WithRSAEncryption
32:75:79:da:71:bc:4d:73:7b:a8:14:1b:c1:7d:c4:19:15:33:
e0:1f:a2:5d:95:67:e3:b3:66:08:a5:1c:bd:c7:dc:b5:30:af:
5a:0b:11:8c:b7:83:50:20:fc:57:09:8c:65:1c:23:c9:c6:63:
6d:eb:fb:51:ad:27:51:34:9d:fa:4f:a5:9c:11:e9:df:45:20:
38:72:91:15:1e:ee:26:3e:15:ca:51:4f:e9:81:aa:6d:1f:82:
92:74:a5:5d:14:31:2a:db:33:3f:cc:2e:a6:96:ae:fa:d6:ea:
9b:58:5e:cc:30:4d:57:84:38:f0:91:82:3e:9a:7a:64:c2:93:
cc:62:df:b9:7a:99:8a:a9:13:bc:9d:7b:ae:a0:1e:51:04:bc:
ac:c5:73:7a:ce:c4:4d:fc:16:54:72:d0:9e:4b:bc:ee:55:f4:
33:35:bc:0e:8b:14:1c:c7:a9:23:a7:28:57:d7:61:b8:c1:10:
da:16:ef:87:71:b7:10:f2:74:1d:ec:ea:3f:da:0e:8e:b8:bf:
1d:ff:1a:f3:fd:e7:cc:51:ac:1e:ef:dc:bf:48:a7:ad:a7:e0:
bc:00:a6:80:b3:81:43:f1:2b:72:a1:1e:ad:53:a6:82:aa:f2:
35:d8:8a:e7:de:3b:52:a1:c9:41:c4:7e:c0:ae:f2:73:d5:7c:
36:ae:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-fra.rpki-client.org