Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa
File: JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa (raw, json)
Hash identifier: kLRMTqEjt/9mpJpJGgHfPPVM63Fwjm3wdP4c/x0TRLQ=
Subject key identifier: 24:25:AC:4F:52:8F:F3:E1:B6:35:FF:F1:5E:E1:82:65:A9:F1:AC:12
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 078C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa
Signing time: Tue 29 Sep 2020 10:00:32 +0000
ROA not before: Tue 29 Sep 2020 10:00:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24168
IP address blocks: 121.50.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Sep 29 10:00:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2425AC4F528FF3E1B635FFF15EE18265A9F1AC12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:4f:84:d0:68:23:88:7e:46:c7:f0:80:8b:
71:2d:75:65:ff:52:e8:31:d4:ec:c8:5a:88:b5:db:
e1:91:f3:78:ee:b1:64:91:1b:4f:17:52:dd:15:d6:
c8:dc:ec:db:d5:6c:3a:23:b9:3a:4b:a9:6a:c1:bb:
a9:41:2c:f5:6b:33:fc:8d:61:fb:b6:91:44:bd:54:
a2:1e:a3:f8:25:41:60:e0:dc:79:10:fc:12:c0:5f:
dc:5f:82:24:25:07:68:d1:9b:a2:15:1d:89:89:22:
30:7a:c2:9d:fa:53:02:63:0f:20:28:a0:76:4e:7e:
65:b0:df:0e:38:48:01:c9:01:64:06:14:3c:44:a7:
8c:89:9b:bd:7e:b2:75:c3:a1:ff:a2:3a:24:0d:98:
08:aa:50:be:12:80:11:d4:aa:e8:c1:24:f1:4f:2a:
9d:5e:3c:73:e6:13:83:28:3a:a1:64:fe:1c:3c:d3:
e4:22:cd:0e:79:25:0f:83:39:fb:2b:b0:b4:0f:1e:
ef:30:a1:65:80:af:f4:7d:f0:34:01:72:62:4a:ba:
43:8e:66:5e:e1:ff:59:e7:0b:41:61:8f:7b:be:36:
44:e0:b0:ba:04:3d:55:e0:70:ff:b6:f9:37:ee:e6:
f2:88:2a:40:5d:5f:bf:64:fc:93:8f:7b:5e:50:1a:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:AC:4F:52:8F:F3:E1:B6:35:FF:F1:5E:E1:82:65:A9:F1:AC:12
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.149.0/24
Signature Algorithm: sha256WithRSAEncryption
93:01:16:a0:79:20:ec:87:a5:f1:34:9d:19:a9:73:6c:00:34:
d4:2e:5b:83:e7:0a:d4:e9:52:5e:30:be:d4:04:f7:fe:f1:ea:
07:e7:11:ad:5c:06:88:5f:8f:0a:d9:e4:fb:cf:d0:f4:65:c5:
c3:df:ad:c3:c5:80:48:b1:4e:a0:a7:d9:84:6a:bf:3a:60:59:
e5:04:c4:1d:7a:ad:22:4e:aa:7c:36:0a:33:a5:b6:2d:44:1d:
49:75:31:f8:e0:21:b8:85:ca:5b:2d:fd:b6:a1:33:18:35:83:
dc:bd:9b:ae:74:a1:2d:31:39:80:6a:ff:d2:89:08:84:e0:1d:
97:6b:89:df:c3:86:88:9a:a3:67:d4:3e:eb:5d:e5:02:5b:d0:
a1:2d:5f:93:18:98:3e:b7:5e:59:78:1b:92:d3:22:b4:41:d9:
86:a6:d2:6f:a1:5b:54:1f:5e:b5:e9:bd:a6:fb:45:a0:16:e6:
20:f1:dd:23:f9:4c:e9:40:8f:d7:9a:41:7d:d5:f1:39:f0:a8:
55:b8:29:8e:60:9c:59:9f:6f:d1:6e:46:64:8d:27:f9:c0:92:
1d:39:b9:82:3b:79:ed:dc:51:fb:a2:28:09:d1:42:c6:a9:8d:
17:4e:13:b0:c0:c0:77:2f:4e:08:97:4c:72:a4:ec:0e:09:45:
5d:10:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org