Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ER-a9dymzcJ1laqspfmFq3iFquk.roa
File: ER-a9dymzcJ1laqspfmFq3iFquk.roa (raw, json)
Hash identifier: TXiB+C6JjUr2sp0Kc0R9OUdMLgL8ExEx79Ph76tv3x4=
Subject key identifier: 11:1F:9A:F5:DC:A6:CD:C2:75:95:AA:AC:A5:F9:85:AB:78:85:AA:E9
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0977
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ER-a9dymzcJ1laqspfmFq3iFquk.roa
Signing time: Sun 07 Feb 2021 13:05:36 +0000
ROA not before: Sun 07 Feb 2021 13:05:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18424
IP address blocks: 121.50.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Feb 7 13:05:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=111F9AF5DCA6CDC27595AAACA5F985AB7885AAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:4c:5e:b3:db:b3:b9:4d:85:46:dd:46:77:
5d:b8:7b:44:b7:ec:78:87:67:4a:1e:1f:b9:ee:50:
a1:21:b2:b8:51:71:86:44:e4:f9:53:ad:ff:2f:65:
65:aa:87:5f:aa:ec:76:f9:94:e5:4c:a7:19:80:32:
49:7e:80:55:54:12:0d:9c:ee:96:07:81:70:94:dd:
1b:41:fb:54:c4:99:9a:fd:c5:14:a0:d5:25:62:a0:
bb:d0:c3:9d:f6:34:7b:60:bd:55:fa:ef:ac:f1:ea:
4f:59:8f:74:a3:e9:72:ff:5e:2e:9d:5a:03:30:33:
cd:b9:17:4c:f6:b9:00:bf:af:d0:82:9d:1e:6b:e8:
b9:4e:04:64:47:85:11:20:0d:38:69:81:2b:ec:66:
78:2a:87:a0:07:99:81:be:5f:76:ee:03:17:b5:22:
e5:f0:83:1f:8d:26:16:be:9d:77:c7:24:7c:32:11:
74:81:c3:40:d6:04:7b:57:ab:ec:40:11:26:e3:05:
77:c2:c3:e9:6e:d5:14:ce:1a:e5:5d:19:50:a9:cd:
de:be:7a:c1:9d:f6:ca:27:a0:de:6a:94:89:d0:c8:
0a:86:15:e7:74:71:d9:12:0c:ea:cf:3b:d8:86:30:
92:2d:04:3a:45:09:0b:62:8a:1f:b5:c3:f7:46:5a:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:9A:F5:DC:A6:CD:C2:75:95:AA:AC:A5:F9:85:AB:78:85:AA:E9
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ER-a9dymzcJ1laqspfmFq3iFquk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.144.0/21
Signature Algorithm: sha256WithRSAEncryption
01:6d:ef:29:c8:15:1c:37:2c:d5:9a:f1:8a:0f:f2:db:03:98:
a8:f7:fd:f2:d4:49:dc:dc:5c:32:b9:61:98:16:4c:31:b0:bf:
da:72:6b:f3:25:6c:86:ab:f2:a6:1d:f2:4b:0e:25:ed:89:75:
2f:0a:05:5b:19:f7:d3:7e:6b:79:38:f0:92:79:8f:1f:82:5b:
07:06:57:e6:ed:3a:09:ea:86:5e:2c:bb:75:46:1c:28:84:8e:
51:f0:45:58:c2:8e:22:55:5e:59:18:e3:99:cf:99:72:54:6a:
c5:7d:7e:6d:c1:f7:76:3b:bd:84:b2:4a:a9:22:0f:3d:55:75:
68:36:16:cc:3e:d5:bf:44:64:7f:0f:a4:50:43:cc:ec:fc:c5:
1d:d6:69:e1:b3:85:55:2a:f1:a6:4a:a7:22:d7:da:18:89:c1:
ad:31:4c:29:99:b7:4d:34:b1:f3:c6:39:6e:f6:60:3b:9c:77:
22:0c:fa:d4:c3:3b:0f:c7:18:b9:68:11:d0:c9:87:dd:29:7e:
fe:12:41:ef:39:03:71:a3:9b:9d:66:38:18:7d:c8:85:c2:94:
df:6d:38:cb:85:e4:8d:f6:93:95:1f:6f:79:e1:e5:e1:a3:68:
98:34:87:6c:ca:72:83:cd:70:1a:94:0f:46:65:c8:77:3c:5f:
7c:55:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org