Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/a-_v7p4dOUtApGH2RqrIdZ8CVFg.roa
File: a-_v7p4dOUtApGH2RqrIdZ8CVFg.roa (raw, json)
Hash identifier: rWUb3wIW5uPnmN6OdEsAQiYPnKtEPfLKugUviwvAMTE=
Subject key identifier: 6B:EF:EF:EE:9E:1D:39:4B:40:A4:61:F6:46:AA:C8:75:9F:02:54:58
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 08CD
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/a-_v7p4dOUtApGH2RqrIdZ8CVFg.roa
Signing time: Sun 07 Feb 2021 13:07:54 +0000
ROA not before: Sun 07 Feb 2021 13:07:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 61.58.41.128/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253 (0x8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Feb 7 13:07:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6BEFEFEE9E1D394B40A461F646AAC8759F025458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:72:4f:33:02:bd:6d:29:a6:83:02:cc:aa:
18:1c:d3:1c:d8:74:8f:86:32:e4:e3:3d:68:2e:96:
04:e5:c6:b1:90:28:b5:fc:dd:d8:6e:6c:69:43:2b:
39:8a:e8:72:6e:d1:2e:9e:5c:4b:fb:b9:2f:d3:61:
86:eb:95:16:6a:37:54:53:48:21:3b:31:b6:78:9d:
9f:08:bf:1a:11:b2:06:3d:e6:55:8b:e4:32:cc:a1:
bd:7a:db:62:50:19:74:c7:0c:f1:56:18:51:2a:96:
93:b6:8a:c9:7a:e7:f0:83:6f:19:a1:88:87:bf:a8:
73:9b:c7:42:ce:db:90:02:87:b5:10:a9:94:aa:ed:
95:76:87:b9:04:9e:4c:f3:8b:cb:11:0a:1c:5c:dd:
92:f5:f8:1b:17:b4:0b:ff:e5:24:57:ee:57:e8:8a:
87:9d:31:36:98:67:2e:33:a3:af:60:c6:69:0a:64:
e6:36:90:ac:d3:36:55:ba:9e:35:8c:f7:77:41:78:
62:4e:84:c4:0c:cf:d2:9e:94:ab:15:f5:71:c0:e8:
54:65:91:c5:92:3e:83:f8:08:2e:f4:e0:bf:37:f0:
41:87:2c:88:cc:4f:14:ea:d6:2b:fb:4b:be:cf:30:
78:8e:be:f3:fa:25:71:bd:5b:d6:f5:2a:c8:76:f8:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:EF:EE:9E:1D:39:4B:40:A4:61:F6:46:AA:C8:75:9F:02:54:58
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/a-_v7p4dOUtApGH2RqrIdZ8CVFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.41.128/29
Signature Algorithm: sha256WithRSAEncryption
a6:42:b4:27:67:f6:2c:26:ab:93:bc:28:61:41:c2:ca:ad:60:
b8:5d:e0:92:7d:e0:98:a6:75:89:a2:3c:f4:83:d8:db:38:f7:
cf:95:de:30:88:e3:20:d2:06:a2:c8:55:47:c3:9f:53:83:f5:
57:bf:0d:9e:35:57:16:c7:31:82:47:3e:ee:15:fe:f1:19:f7:
fe:3f:53:cb:aa:df:b4:d2:76:7b:1a:99:91:a8:ac:ae:3c:c9:
85:ab:9e:36:50:6e:be:5d:cf:28:7f:67:01:e5:5c:20:06:0d:
6d:a7:6f:fc:e2:f7:63:f5:40:74:68:40:ff:2c:8b:40:d3:8f:
d5:ee:c1:32:d2:de:de:46:b9:bc:c4:7f:7c:75:b2:83:53:33:
a8:f1:d2:6b:70:bb:29:64:4b:db:ab:fa:1a:ef:7e:7d:95:07:
98:2b:53:e8:cd:ab:fc:cd:18:2a:1a:2d:fb:d0:d4:46:26:e9:
c4:65:ae:41:c6:aa:e7:bf:ac:25:5c:e0:cc:1f:f6:94:df:88:
1d:7b:10:e8:42:a6:2d:4b:84:42:ca:2c:50:3d:5f:11:fb:80:
40:2a:c3:23:9b:fa:fe:95:97:f8:b4:ca:12:ea:64:1c:44:74:
30:28:b2:ae:10:86:6f:77:ae:13:8d:e7:6f:3d:66:9f:0f:5d:
85:52:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org