Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WIlAmFOlwwQdLlAiE_5j9yhGjNQ.roa
File: WIlAmFOlwwQdLlAiE_5j9yhGjNQ.roa (raw, json)
Hash identifier: dGIaHpP6T7iyO5e+OE46/FsuezDOfD8kY3Qhw1E8zIM=
Subject key identifier: 58:89:40:98:53:A5:C3:04:1D:2E:50:22:13:FE:63:F7:28:46:8C:D4
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 093B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WIlAmFOlwwQdLlAiE_5j9yhGjNQ.roa
Signing time: Sun 07 Feb 2021 11:53:03 +0000
ROA not before: Sun 07 Feb 2021 11:53:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24168
IP address blocks: 121.50.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363 (0x93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Feb 7 11:53:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5889409853A5C3041D2E502213FE63F728468CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:06:1d:f3:63:56:ed:19:40:4d:c7:2f:92:
6d:97:a5:79:17:7b:a4:f7:39:b1:fd:ae:61:17:24:
a4:a2:bd:06:70:e0:e8:d7:ff:70:63:f0:5b:7d:7a:
ff:b3:f5:b3:1f:45:d5:81:09:fe:8a:1c:c2:9d:41:
ae:cb:4c:6a:04:2a:7f:46:1f:47:90:44:f9:60:d9:
4b:e0:dd:83:d8:92:8b:ae:9d:07:20:23:d7:0e:c9:
fc:e7:3b:81:e7:1d:3b:d1:5b:ca:96:29:1f:d9:9d:
0e:2a:41:59:83:ad:cd:6c:85:70:2d:37:c4:57:d3:
4f:4c:7c:34:42:21:43:80:02:33:bf:5c:29:14:2f:
07:0d:ba:00:2b:9f:a0:e5:d4:d1:15:89:82:80:61:
ff:5e:50:70:14:94:72:81:4b:41:90:3f:76:bb:99:
b9:50:34:5b:de:e3:78:06:85:d5:86:38:f0:77:28:
32:4d:fa:b1:c8:ea:9a:95:1e:4b:d9:ec:11:8e:95:
4c:8d:80:8a:aa:ee:05:b2:3c:ad:0b:98:e4:16:b4:
fc:4f:71:d8:e1:06:1c:fb:dd:f9:bd:c8:6c:7f:f7:
11:51:21:c1:4f:89:3f:86:af:2e:12:89:9b:17:b3:
6e:e8:83:57:b3:4c:df:f7:0e:c8:fb:1d:ba:c4:d1:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:89:40:98:53:A5:C3:04:1D:2E:50:22:13:FE:63:F7:28:46:8C:D4
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WIlAmFOlwwQdLlAiE_5j9yhGjNQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.148.0/22
Signature Algorithm: sha256WithRSAEncryption
69:01:47:42:58:dc:49:57:3f:28:ed:88:66:da:4b:7d:7f:86:
91:70:03:e6:e5:65:e4:2f:72:eb:5f:d5:00:b9:b2:14:ce:20:
47:db:b4:d1:1d:d8:b1:bb:5d:bd:cf:65:8c:95:b2:dc:aa:72:
49:46:41:72:fd:e3:4a:88:ba:14:be:23:96:f8:c4:e2:02:ac:
55:89:21:df:2c:57:5d:16:96:29:c7:07:ac:71:17:8d:a7:a9:
cd:19:3d:13:53:d2:80:9c:bd:d7:87:5b:ca:ac:c5:31:42:ff:
bd:ed:1e:34:b3:be:0b:ed:40:4a:4e:9b:b4:fc:28:99:80:8e:
0f:91:b3:4f:32:e5:f7:9f:f1:19:29:b5:ee:86:c4:77:12:66:
5b:91:33:dc:8e:30:73:b4:53:b1:f6:4c:8b:20:89:2f:8e:d2:
53:60:52:cc:53:92:90:4c:0f:bb:4d:ba:22:0b:ce:7a:72:e8:
d7:0a:a7:79:af:71:66:8b:ab:4d:62:97:b5:f9:a9:09:99:ee:
70:98:88:d5:da:f9:8f:48:4a:ab:c2:86:f4:cd:7d:20:34:a4:
3d:c6:2f:2c:a2:56:7f:dd:0d:33:0a:f9:d6:78:50:5e:6d:10:
65:6e:bc:da:60:d5:c7:2b:22:38:67:64:ef:a6:e6:d6:a2:10:
c5:ca:fb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org