Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/tXcLDwI6JHiQxb1_R-PsDZTbRHs.roa
File: tXcLDwI6JHiQxb1_R-PsDZTbRHs.roa (raw, json)
Hash identifier: X5T60wREPoBNk8JaSdoI3eP0X4HQqTUNQucthr7q+rg=
Subject key identifier: B5:77:0B:0F:02:3A:24:78:90:C5:BD:7F:47:E3:EC:0D:94:DB:44:7B
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0884
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/tXcLDwI6JHiQxb1_R-PsDZTbRHs.roa
Signing time: Wed 04 Nov 2020 09:08:05 +0000
ROA not before: Wed 04 Nov 2020 09:08:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24168
IP address blocks: 121.50.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Nov 4 09:08:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B5770B0F023A247890C5BD7F47E3EC0D94DB447B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:b9:9b:6d:cc:e1:46:11:df:ba:79:97:33:
be:9e:13:0f:34:a7:2a:13:99:7a:77:b9:bc:c7:b6:
df:b0:36:15:db:39:88:ad:d3:1e:10:11:36:c5:98:
59:69:7b:9c:f8:97:8f:48:19:da:67:0c:fb:63:0c:
e7:27:06:ee:92:99:d6:8e:03:41:e8:62:83:43:91:
68:a2:b0:10:54:a6:c9:a8:28:57:61:2c:25:04:71:
fb:55:25:8f:a3:47:8e:44:94:31:db:26:b6:a8:40:
a3:73:7c:dc:09:83:5c:2d:25:e0:3a:22:25:64:12:
79:e2:c9:1c:2f:97:66:01:5b:80:5d:49:3d:a3:72:
ea:d6:e1:89:de:29:bc:e6:c1:cd:ac:99:b9:9b:09:
fa:1f:7b:2c:55:74:66:0b:9d:9a:d6:c4:4b:6e:e5:
f3:9f:d4:77:97:4c:2a:c8:35:61:91:da:cd:3e:96:
e4:8e:43:7f:d8:23:b1:36:9a:71:35:29:8f:cb:1c:
fe:cf:6b:cf:0c:fd:0e:92:b5:10:8b:79:79:7b:0d:
15:ae:ae:cd:00:a3:a7:95:cf:0a:d4:b2:5a:19:ec:
04:14:33:4f:96:6e:f5:65:b3:cf:0c:b4:3f:f4:7a:
44:9b:ef:6b:5a:65:d3:97:86:fa:af:14:64:1f:ca:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:77:0B:0F:02:3A:24:78:90:C5:BD:7F:47:E3:EC:0D:94:DB:44:7B
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/tXcLDwI6JHiQxb1_R-PsDZTbRHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.151.0/24
Signature Algorithm: sha256WithRSAEncryption
17:09:b2:ca:ce:5c:c8:ef:3e:76:cb:ca:ac:eb:03:f0:5b:34:
93:0d:33:2c:dc:0b:78:94:4a:2b:87:fe:c0:a7:18:13:bd:00:
25:e1:ef:83:5f:94:d0:49:de:34:0f:3f:92:26:d4:4f:28:cf:
f8:c9:2a:70:80:68:f1:24:fc:cd:c0:9d:c7:14:a2:a2:58:20:
04:73:06:c1:e9:30:0a:83:7d:40:de:5c:35:04:69:f5:45:6f:
5f:c7:2d:68:f8:6e:dd:13:16:2c:fe:31:f6:09:68:8c:dc:45:
b1:91:cf:07:bf:fd:4a:4f:d8:d1:a2:62:aa:22:f6:f8:8a:db:
fe:e5:bd:0e:47:6c:7a:df:44:27:41:f7:17:e3:f2:44:0b:16:
2b:7b:90:d6:36:46:ea:d8:14:98:74:1a:c4:74:46:d1:b1:9c:
bf:08:06:0f:fc:56:83:48:3f:e8:a7:40:fb:aa:1c:07:dd:88:
06:3b:66:93:c2:27:64:d3:24:47:68:7a:24:62:e9:e1:bc:ac:
11:5b:28:96:de:f5:f7:3f:c1:1b:cb:94:75:a7:24:72:bf:a1:
6e:24:df:54:ac:64:c2:49:f4:1d:e2:69:d4:66:63:7e:49:39:
38:21:e7:19:7b:d1:f3:f1:f1:a4:00:e0:f2:02:23:e5:cd:b7:
47:45:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org