Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa
File: W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa (raw, json)
Hash identifier: zArvIcUYtEPI5jmCy2QxOXcYmNNrNz8a1czBb6VsHVY=
Subject key identifier: 5B:F4:61:BB:9C:AB:53:AF:9D:84:26:C6:F5:AC:76:6B:82:60:43:17
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0979
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa
Signing time: Sun 07 Feb 2021 13:05:38 +0000
ROA not before: Sun 07 Feb 2021 13:05:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18424
IP address blocks: 121.50.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425 (0x979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Feb 7 13:05:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5BF461BB9CAB53AF9D8426C6F5AC766B82604317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:61:de:8a:99:33:09:71:79:ad:67:3c:d2:
bd:36:14:35:01:aa:2e:d5:ef:71:f1:54:b0:d0:ef:
bc:cb:eb:40:75:e3:97:2a:d7:10:5b:97:38:ce:9b:
b4:25:10:65:29:cf:8d:56:8e:2b:ca:fa:0a:67:56:
2f:e7:19:af:a2:7b:e4:33:de:ab:2b:c9:bf:65:de:
ba:32:d3:02:9b:85:38:37:56:94:99:e6:75:8f:31:
c0:c4:27:3c:dc:c2:dd:b5:88:4d:df:83:e3:b3:22:
8e:3d:75:5f:97:67:81:46:dc:31:63:b3:5c:86:9a:
d1:c1:c0:05:e5:3c:1d:66:4e:8e:58:e3:40:24:38:
f2:46:6d:02:b0:d5:a9:1a:dd:d3:83:52:43:bf:14:
51:a2:de:83:fe:40:2f:ec:05:31:2d:0c:df:f6:3c:
de:71:8c:3b:f6:64:d3:3f:a7:7d:dc:9b:90:a0:5d:
ef:32:c5:40:88:e5:95:2e:d0:fd:82:38:33:51:3a:
5c:49:28:bf:db:c6:a9:b9:98:fe:5d:d2:56:3b:0c:
b1:eb:46:2d:d4:14:23:c2:d8:8b:89:6e:b4:ed:cd:
a3:d3:4e:da:2f:15:b2:f4:f3:a4:c2:bb:9d:d6:02:
c9:75:e0:a1:c4:ea:cf:41:83:2f:b1:35:1a:e2:79:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F4:61:BB:9C:AB:53:AF:9D:84:26:C6:F5:AC:76:6B:82:60:43:17
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ad:f4:e6:dc:3c:19:53:4d:ed:75:58:c2:6a:f3:98:a4:f5:
a1:5c:38:16:be:a4:25:3b:08:ce:af:b9:05:a4:0c:45:ec:83:
96:bc:ed:51:3c:e0:5a:35:b0:6e:84:dc:d2:f1:30:8e:31:1f:
7e:66:f7:f9:67:4a:8e:e2:58:f9:30:c5:97:e2:d8:c4:6f:03:
63:02:ca:1c:37:15:d9:4c:32:f2:3b:f0:49:3d:c0:62:ae:72:
9c:40:84:1d:69:1a:8e:ec:3f:a3:f7:1c:59:6e:62:1d:fb:7b:
10:25:ac:bf:35:6b:0a:44:e2:9f:ad:2b:4e:32:00:48:b9:74:
79:09:32:26:e5:79:6b:c6:30:26:62:98:ea:cf:5b:32:e5:b0:
66:e1:2a:5d:b8:7f:43:00:d9:0d:75:ab:6e:32:83:74:fb:bc:
2f:fc:27:3c:c7:8e:68:28:f2:38:76:46:7d:62:fc:cd:15:3a:
94:95:eb:29:27:e3:f3:6c:25:ce:d9:a6:ea:18:db:7f:1f:b6:
ad:24:07:a8:90:a8:93:5d:ae:57:e0:08:7d:ff:21:44:f3:ee:
74:60:32:53:1c:f5:2a:50:3a:67:5e:73:da:b5:dc:03:f7:29:
05:75:a1:e5:72:77:6f:4b:0a:e8:2a:d6:c1:2a:55:47:f9:bd:
6c:7c:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org