Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Gu0j2lZfr-LVqC1EFNRdAAKsvjw.roa
File: Gu0j2lZfr-LVqC1EFNRdAAKsvjw.roa (raw, json)
Hash identifier: Z3iCbM1bTaa2xbsVce75uOLdGfDzujzgEQOStTKqheo=
Subject key identifier: 1A:ED:23:DA:56:5F:AF:E2:D5:A8:2D:44:14:D4:5D:00:02:AC:BE:3C
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 096B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Gu0j2lZfr-LVqC1EFNRdAAKsvjw.roa
Signing time: Sun 07 Feb 2021 13:05:25 +0000
ROA not before: Sun 07 Feb 2021 13:05:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18424
IP address blocks: 121.50.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2411 (0x96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Feb 7 13:05:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1AED23DA565FAFE2D5A82D4414D45D0002ACBE3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:35:6a:72:42:62:15:49:44:a2:da:2c:0a:
9a:d5:7a:d8:61:04:48:6b:f5:23:ac:7f:dd:8f:0e:
2b:db:88:45:9d:b6:5b:3a:ba:a1:74:ea:f8:59:2e:
e6:5a:63:d1:c4:31:95:e3:ac:35:41:92:a6:41:61:
1a:61:55:f9:08:aa:57:d1:01:d9:c3:73:f0:c8:07:
98:01:57:72:8f:52:69:ee:1e:f4:21:01:8c:0d:0f:
2a:4d:54:a5:6a:c5:38:f1:08:4b:2b:e6:4f:3b:b9:
97:61:b8:10:2e:6e:8c:e7:08:8b:45:9f:24:b0:a8:
83:d8:d8:91:12:5a:f2:ba:02:77:07:0c:df:16:bd:
6f:de:9b:96:a4:fa:32:83:bf:7c:bd:af:af:a7:81:
ea:1e:b0:75:e4:b2:8b:18:e8:74:d7:f6:b0:0c:17:
2b:4e:a8:f3:54:e6:e7:dc:77:f7:a0:66:ed:8f:e4:
1c:11:55:50:5f:a4:bf:41:6a:72:3c:ce:60:ae:db:
dd:70:df:a7:a7:f3:05:d5:cc:46:96:1e:e6:1f:1e:
a5:14:a4:c2:31:a1:49:42:10:13:19:c3:c6:b9:e5:
80:50:c7:8d:88:53:3d:1d:b0:01:df:93:2d:d7:52:
2f:bc:30:41:34:9e:74:79:40:92:6a:e9:1b:c5:e8:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:23:DA:56:5F:AF:E2:D5:A8:2D:44:14:D4:5D:00:02:AC:BE:3C
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Gu0j2lZfr-LVqC1EFNRdAAKsvjw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.145.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f9:df:c0:43:45:8f:54:19:fc:8c:de:1d:15:6d:05:d5:40:
4c:20:45:38:00:8f:42:98:f3:e6:b8:80:a2:4b:ad:a7:e1:d0:
b6:b0:65:e8:38:7a:c6:81:32:0a:f2:eb:02:26:e9:eb:b5:ce:
20:90:9b:64:98:37:c7:6c:a6:96:cb:dc:e2:fe:ed:c0:8d:25:
a8:91:4a:53:21:97:d6:3f:55:db:5b:d0:6c:ce:41:48:86:64:
85:34:1d:63:44:25:a6:4a:13:d0:1c:50:66:60:fe:9c:19:7c:
c0:30:eb:3b:a5:a8:d1:5a:05:70:bd:9e:e6:21:53:9d:c3:52:
a5:6c:b8:89:f4:54:f5:7e:f7:a3:7f:df:a3:a4:67:63:b3:06:
91:d6:79:90:a8:ec:4e:c6:ab:6b:32:47:12:ca:a5:cb:88:a7:
3d:14:19:ed:02:a5:85:40:1b:e3:b8:f8:79:07:1a:84:48:9a:
31:8f:76:2f:96:c5:92:b8:71:e1:40:b3:17:b9:9f:cb:6c:15:
d4:d2:45:3c:78:8b:b7:52:74:b2:b2:d2:18:0d:a6:0d:7f:1d:
79:12:2e:fe:32:64:c0:2b:a8:6a:3d:a2:f9:2e:ec:2d:9b:45:
39:ad:76:ce:9f:a2:d3:3a:1e:ab:53:00:79:c4:5d:0f:f4:4d:
db:3f:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org