Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/wPP1G466sm6MVnKkdGHJt2nfhVE.roa
File: wPP1G466sm6MVnKkdGHJt2nfhVE.roa (raw, json)
Hash identifier: 9Hy+pObMM9gxp7EiKdsEWzu2EnUjuGsMzg4m6ODHfZo=
Subject key identifier: C0:F3:F5:1B:8E:BA:B2:6E:8C:56:72:A4:74:61:C9:B7:69:DF:85:51
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 08C9
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/wPP1G466sm6MVnKkdGHJt2nfhVE.roa
Signing time: Sun 07 Feb 2021 11:50:55 +0000
ROA not before: Sun 07 Feb 2021 11:50:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 43.250.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Feb 7 11:50:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C0F3F51B8EBAB26E8C5672A47461C9B769DF8551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:c6:90:88:4c:4e:1b:46:05:39:3c:82:40:
aa:bd:fb:18:e0:b9:9f:be:69:fa:53:52:bb:77:c8:
b4:da:64:1c:5b:89:06:71:6b:d3:fd:23:10:63:5e:
3f:5c:db:15:a4:8b:6e:e7:0f:63:3a:3e:9f:cc:46:
65:f3:b5:a7:9e:1c:2b:6a:80:cd:77:95:2d:cf:a2:
4e:81:f4:12:82:4a:1f:b7:36:0f:93:8a:f8:d3:dc:
d0:06:7d:f5:81:87:d7:03:5b:15:28:a7:fa:20:23:
96:1e:f4:2a:44:35:e2:97:4f:17:fb:4c:ab:98:d6:
00:4b:4e:a2:c1:49:09:0d:ea:fc:76:c1:52:3b:6e:
fa:4c:ce:66:3d:a9:c9:25:7e:62:fe:0b:68:85:11:
44:91:22:62:f6:ea:f8:66:ac:ea:61:6b:4e:f6:75:
e5:db:e8:53:5b:5f:b9:23:6c:56:b4:31:c0:f8:96:
f8:0b:35:75:02:08:d8:23:64:9a:ab:e1:3e:0e:f6:
80:92:d4:bb:9a:a8:60:54:a3:d5:02:90:d8:40:0b:
19:d8:ca:a6:f0:af:95:0c:fd:d8:d3:c3:c9:2e:39:
3d:69:25:f2:07:a8:44:14:2a:be:cb:97:ce:53:e5:
8a:e7:3a:90:da:83:6e:e1:2b:5b:57:a7:85:60:d0:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F3:F5:1B:8E:BA:B2:6E:8C:56:72:A4:74:61:C9:B7:69:DF:85:51
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/wPP1G466sm6MVnKkdGHJt2nfhVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:55:53:e8:1d:b0:60:cf:12:6a:60:33:78:22:e2:5d:ca:8f:
28:8d:c1:27:e3:1e:84:55:37:8b:2c:86:91:72:b4:80:6b:e8:
1d:53:b8:78:d2:53:2a:b6:63:1d:d5:ed:9a:3b:fe:40:4f:32:
7e:44:64:b7:b0:f8:55:e1:ac:89:e0:c2:13:0e:74:c4:75:54:
07:23:04:73:16:68:5d:7b:93:0f:d5:c4:30:d7:05:93:45:b6:
53:f3:41:a4:98:62:4b:72:1e:31:c8:93:67:1d:ee:8c:f6:5d:
ff:79:98:47:d5:63:c0:fc:8d:9c:46:ed:5b:99:98:4a:14:0d:
2f:b9:61:ea:ad:4c:67:49:4a:4e:51:fd:bc:42:b2:b0:60:f7:
97:57:e5:af:54:b2:a0:bf:0d:a6:3c:9a:a2:2e:e6:9e:82:2e:
e2:a4:a9:c9:cc:ee:24:d5:a6:3c:a3:07:cc:92:c7:c3:ab:ef:
78:d9:bf:43:1b:15:d3:3b:4b:3d:cb:38:71:88:93:cc:a8:22:
b2:66:b9:55:e9:de:45:7f:d7:9a:e5:b8:40:82:08:75:d4:eb:
9c:45:46:0c:1f:d4:98:8b:ad:02:55:58:e5:73:4c:34:61:72:
1c:1a:81:ae:20:10:08:56:74:ae:61:f3:af:2a:30:63:46:7f:
ff:da:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org