Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/kwKcdzOgtwxyeVgYE4eJEyfNoWQ.roa
File: kwKcdzOgtwxyeVgYE4eJEyfNoWQ.roa (raw, json)
Hash identifier: CDqOrnRA/DZMnF1LPkeLBvMRZ1FVIQOgAsKXvx71sJ8=
Subject key identifier: 93:02:9C:77:33:A0:B7:0C:72:79:58:18:13:87:89:13:27:CD:A1:64
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 097C
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/kwKcdzOgtwxyeVgYE4eJEyfNoWQ.roa
Signing time: Wed 29 Sep 2021 02:53:07 +0000
ROA not before: Wed 29 Sep 2021 02:53:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18018
IP address blocks: 122.255.94.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Sep 29 02:53:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=93029C7733A0B70C727958181387891327CDA164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:96:44:9f:3f:e6:66:da:e8:d5:63:64:f3:
4f:9d:da:ff:97:e5:b4:b3:41:0e:a8:22:28:c7:36:
ce:27:8a:7a:52:92:b5:84:8e:93:f3:8c:b9:e8:2c:
45:eb:14:14:c3:5e:e8:ce:59:5c:93:30:c8:b9:64:
89:26:96:89:42:9c:07:3e:9d:8c:56:07:96:22:f7:
12:a7:9f:da:04:b6:58:73:91:11:02:40:0a:f5:17:
31:35:69:24:c8:4e:a0:d5:4e:32:ec:f7:15:c2:31:
b2:2a:06:43:45:70:8a:b7:05:b1:08:fb:48:ae:41:
a4:ea:b5:d2:a3:83:8c:65:b6:52:23:49:90:44:a8:
17:e0:ef:40:2f:dd:72:7e:e2:ef:57:72:bf:08:13:
51:4e:c9:d5:65:ca:1f:61:54:00:1a:af:95:7a:88:
97:df:5e:da:f1:d8:a4:15:75:dd:32:2e:f3:b9:9f:
bd:fc:f6:10:e5:84:29:a4:af:6c:3c:43:76:53:84:
25:2a:00:7d:68:bc:93:5f:a0:b1:e9:10:a9:01:00:
21:e5:b0:10:3b:f4:a0:d2:b6:95:c9:71:0d:41:ae:
47:4d:d8:5c:ad:67:73:0a:7a:e1:42:87:b5:81:91:
67:e3:8d:c1:3e:4c:91:31:6c:ee:72:3f:dd:bc:8d:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:9C:77:33:A0:B7:0C:72:79:58:18:13:87:89:13:27:CD:A1:64
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/kwKcdzOgtwxyeVgYE4eJEyfNoWQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.64/26
Signature Algorithm: sha256WithRSAEncryption
98:48:7b:08:73:a3:73:93:76:6e:6f:76:88:8c:76:0a:74:c4:
e1:68:eb:fa:57:0b:c4:75:6f:9d:a5:45:fb:89:14:bb:57:a3:
69:de:27:ac:d9:ed:ab:df:c7:2b:2b:83:4d:1c:d6:dc:af:db:
90:cd:bc:5a:a7:1a:20:7e:5b:36:17:74:51:ea:32:17:59:53:
46:6e:29:ab:31:ae:e0:b8:6c:5e:12:58:f4:25:42:a9:bb:f9:
40:e8:00:03:5d:be:9c:06:73:27:a4:53:b5:b5:f1:8c:a6:b3:
17:0c:36:90:77:0c:86:73:b0:9f:0c:c7:e9:fb:0b:0a:c2:38:
cb:67:ed:88:ca:ce:80:5c:2c:4a:6c:4f:7b:1d:f1:dd:83:1d:
b5:92:19:4b:63:e2:b4:e2:91:57:dd:e9:ed:49:1b:64:09:3b:
ef:1d:54:0b:64:5e:ec:08:fd:f7:17:1b:0d:dd:13:c7:e4:8b:
5f:44:25:48:ab:1f:f2:e2:a5:4b:48:13:8f:e9:dd:a2:56:c8:
d7:22:44:2a:f9:85:95:5b:b7:14:19:13:61:b0:dc:d3:33:2b:
59:9b:5b:e5:8f:ca:b7:c6:d2:6c:45:dc:32:77:eb:69:53:1a:
d3:67:89:f2:3b:9d:cf:b0:ef:1d:7c:69:ae:cc:3c:b8:c4:ca:
0d:c8:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org