Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/W12Ycy4Dt60CDfgcx-n5GWef_Rk.roa
File: W12Ycy4Dt60CDfgcx-n5GWef_Rk.roa (raw, json)
Hash identifier: /uD8ereGqF9rXocFhZoivrol1MBfI/MiiZkNoQvMU7I=
Subject key identifier: 5B:5D:98:73:2E:03:B7:AD:02:0D:F8:1C:C7:E9:F9:19:67:9F:FD:19
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 0A5B
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/W12Ycy4Dt60CDfgcx-n5GWef_Rk.roa
Signing time: Thu 15 Sep 2022 02:38:53 +0000
ROA not before: Thu 15 Sep 2022 02:38:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 43.250.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Sep 15 02:38:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B5D98732E03B7AD020DF81CC7E9F919679FFD19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:27:2a:81:7c:a0:56:65:ee:74:d9:f0:22:
5f:a4:0e:a5:1d:56:70:ec:00:dc:51:8d:f8:ea:84:
6e:5f:eb:be:28:78:aa:dd:55:6e:29:16:a0:c3:c1:
ee:0b:5f:16:8d:9c:b0:39:22:9c:1e:7b:d0:f9:a7:
57:e0:05:b8:13:6c:1a:1e:e9:30:ef:28:f4:f7:01:
ab:03:1d:fb:84:59:3f:fa:03:05:57:2b:6f:d4:e5:
e9:68:6d:33:d2:d0:ef:9f:7a:c1:4a:19:98:bf:5f:
e1:74:c2:08:12:d6:51:93:bd:31:29:dc:f1:c2:82:
00:0e:f8:20:04:bb:c3:a1:a9:43:ad:1f:cb:66:52:
23:50:88:40:4e:a4:b3:37:95:6b:43:da:db:46:f3:
38:72:21:22:47:b5:0d:48:ab:b0:d3:39:d3:d9:b4:
bb:8e:af:0a:35:6e:ec:c9:c7:71:59:f1:4d:4b:ae:
2f:bd:8c:d3:c9:af:74:78:98:27:02:8e:ee:4b:90:
65:52:d7:b9:13:43:92:f6:36:b0:ec:26:e2:d9:07:
75:dd:8c:c8:31:2a:c3:ad:b8:9e:56:87:50:0c:b1:
4a:55:11:49:0d:bf:91:4d:12:ee:d0:6b:f4:77:4a:
67:7c:a5:c2:4e:c7:58:a5:f8:79:9a:15:00:b1:52:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:98:73:2E:03:B7:AD:02:0D:F8:1C:C7:E9:F9:19:67:9F:FD:19
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/W12Ycy4Dt60CDfgcx-n5GWef_Rk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.44.0/22
Signature Algorithm: sha256WithRSAEncryption
84:91:45:dc:e2:ee:75:04:9b:5d:c2:7f:ea:65:1b:d1:a0:72:
fc:b9:dc:f1:9c:0c:53:e6:70:35:52:24:c0:5b:d8:ed:19:b8:
b7:15:61:a1:a8:a9:00:86:9b:57:a6:a9:95:46:da:16:6a:f5:
9b:34:11:cc:14:0f:cb:b1:cc:a3:9b:a9:e7:13:3b:ac:e6:fd:
6e:60:64:48:f4:84:36:a7:14:c3:81:d1:41:45:af:f5:af:72:
df:3b:c4:9b:3a:4e:f9:1a:d5:b2:3a:fc:14:c7:dd:02:67:f4:
1d:a4:d3:10:19:bf:b1:18:ff:30:bf:8a:34:76:53:30:b2:80:
fc:44:aa:31:da:8e:d2:1e:99:0c:14:c2:2e:53:30:59:aa:a2:
96:f7:81:87:f3:0a:1b:60:5e:c9:4b:d1:8b:04:d4:ea:6e:98:
40:51:f2:b9:6f:dc:17:b1:60:3d:01:a7:ed:20:e6:70:31:fb:
e8:ca:a9:2c:e7:24:42:b6:0a:dd:d0:fd:f3:93:28:c6:a5:bf:
23:83:1d:9e:c8:9c:65:7d:ab:8c:d5:7c:a4:5c:f9:d4:20:fa:
e6:5f:d7:7a:62:6b:6e:ca:3e:6f:5a:a1:8d:3a:60:52:27:66:
0c:b5:cc:86:a7:f1:d2:ce:a3:54:9b:e7:31:f0:f0:aa:fe:54:
55:93:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org