Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/my4C-uLIP5axajct8uk4cYiysJk.roa
File: my4C-uLIP5axajct8uk4cYiysJk.roa (raw, json)
Hash identifier: ycTEuSqBKuLK54sP5voIy8cBgZCU/R6VF1Dnrq248kY=
Subject key identifier: 9B:2E:02:FA:E2:C8:3F:96:B1:6A:37:2D:F2:E9:38:71:88:B2:B0:99
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 08E4
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/my4C-uLIP5axajct8uk4cYiysJk.roa
Signing time: Sun 07 Feb 2021 11:32:56 +0000
ROA not before: Sun 07 Feb 2021 11:32:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 112.78.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Feb 7 11:32:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9B2E02FAE2C83F96B16A372DF2E9387188B2B099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:9a:e1:39:df:08:52:cc:14:41:28:29:6b:
23:e8:ff:26:8e:92:96:5a:02:27:cc:79:1f:95:54:
6f:38:c0:51:72:af:f5:ee:35:d8:b3:a5:5e:a6:57:
e0:b8:8f:52:44:aa:79:d2:f7:d3:78:26:6f:87:03:
5f:3f:64:7d:e0:ec:23:3e:c6:a9:82:4d:2d:66:07:
10:46:12:8f:d6:be:ca:37:36:5b:c3:ba:28:ad:fc:
67:04:d5:66:0d:c0:7e:7e:e0:e6:ac:ba:66:e6:98:
64:1b:2e:0b:c9:e7:d3:22:86:a8:19:df:01:7d:59:
a9:bd:5e:5d:b2:e6:5c:d7:8c:28:53:a1:93:99:6f:
c8:40:bd:d2:f3:77:54:ff:98:09:b8:f6:66:4e:76:
fe:9d:f2:c7:d9:7f:37:e8:58:1f:eb:b8:a5:a9:39:
a2:36:c5:81:a9:27:2b:f6:a1:5b:b1:95:7e:05:d6:
dc:98:c0:c4:df:2f:a0:39:19:5c:b4:e1:2b:d7:c1:
e0:52:a2:a1:83:43:8f:02:21:2b:ca:ae:18:5d:b5:
3b:d5:df:57:61:ef:7d:d5:ea:24:2d:bc:b9:17:cc:
de:6f:34:dc:71:f4:66:c7:5c:11:3b:db:8c:ac:d0:
23:ad:bd:9f:ee:ff:38:9f:01:1c:66:87:7d:e8:1b:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:02:FA:E2:C8:3F:96:B1:6A:37:2D:F2:E9:38:71:88:B2:B0:99
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/my4C-uLIP5axajct8uk4cYiysJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
15:b2:86:41:65:9b:dd:4f:e3:27:ee:59:4e:78:42:26:aa:53:
fe:42:26:9e:45:78:5d:3a:85:5c:fc:e4:08:f7:c6:5a:00:52:
9e:99:c4:55:b0:74:b1:c8:d4:90:41:e3:df:f1:c2:ca:fd:cc:
dd:5f:ed:a2:9d:e6:cb:03:05:45:2f:c3:d5:8b:57:e4:fd:db:
ee:67:77:a7:36:7c:9a:43:df:b5:4d:d0:df:54:f8:3a:c8:7a:
dd:b4:f3:b3:6e:b1:12:6c:07:15:8d:06:de:ba:a2:92:a1:97:
e8:0b:aa:62:9c:53:8d:22:77:e8:d1:cb:c1:8c:46:cb:54:d6:
21:e3:91:80:ed:b7:d1:93:98:c1:01:82:0b:a5:61:3e:af:69:
4c:48:0e:4f:af:eb:5b:eb:d8:aa:76:2b:21:a7:df:7a:4f:a0:
35:e7:7b:29:16:ca:95:c6:e7:e6:13:cf:8e:fb:53:6e:5a:a9:
67:94:9f:26:cd:2c:47:98:e7:f8:04:a7:dd:0c:4d:b4:f4:dd:
44:5e:08:af:f5:29:18:fa:81:fa:79:a7:fa:fe:f2:1e:5b:85:
49:b1:22:e4:44:fb:02:a8:12:4c:81:90:42:6e:21:e6:b2:36:
0e:2a:4a:bd:e5:95:06:99:09:8c:51:6a:02:cf:4a:ad:83:ae:
28:ce:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org