Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/av2fAuLYUbxqOF8nthVSt5a6cpc.roa
File: av2fAuLYUbxqOF8nthVSt5a6cpc.roa (raw, json)
Hash identifier: 8MhHZ9q0WIukTTVMhj8Cp3uzuEJhF2mshQ+qXb8TIOM=
Subject key identifier: 6A:FD:9F:02:E2:D8:51:BC:6A:38:5F:27:B6:15:52:B7:96:BA:72:97
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 0A3F
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/av2fAuLYUbxqOF8nthVSt5a6cpc.roa
Signing time: Thu 15 Sep 2022 02:50:39 +0000
ROA not before: Thu 15 Sep 2022 02:50:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 396982
IP address blocks: 103.122.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Sep 15 02:50:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AFD9F02E2D851BC6A385F27B61552B796BA7297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:bc:0a:43:07:80:23:8e:2f:e7:8e:fb:8d:
ad:33:a6:d5:de:4d:67:49:69:ec:f9:30:fa:c5:55:
10:59:29:d6:57:38:41:df:90:21:11:1d:e5:02:ac:
7f:36:66:6c:78:93:dd:e4:fc:67:5c:2f:ce:97:75:
e8:9e:71:7a:43:e0:90:78:44:f6:dd:2c:54:45:b1:
4d:2d:c9:e4:b5:86:79:0e:7c:b2:36:67:1b:53:a8:
d3:9a:5e:3e:c4:f4:35:5f:8c:0b:44:26:6e:83:5a:
2d:c6:4a:0c:7f:aa:a7:4e:80:70:da:c3:47:e1:80:
46:d6:82:90:e1:f5:41:be:7c:e9:8f:16:83:ba:70:
86:85:e9:30:e6:b5:ae:a1:ea:10:cf:53:dd:af:8a:
c4:ac:ee:8e:bb:98:b3:b2:69:1c:55:2a:b6:e2:59:
42:4b:1d:e6:00:93:42:a2:3e:d1:0a:da:8c:30:e3:
07:f2:a1:e6:e6:1c:5e:d9:1a:8f:c7:6b:36:db:93:
5b:25:3f:30:74:a2:d1:52:da:d7:24:13:5c:89:e5:
f7:f7:d7:c3:f0:ee:fd:1f:51:2d:0e:93:ab:71:56:
45:09:5e:d3:4f:90:7d:55:50:fa:93:f6:eb:c8:7a:
22:d8:30:88:9b:7e:26:4f:9c:5b:36:12:61:48:6c:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:9F:02:E2:D8:51:BC:6A:38:5F:27:B6:15:52:B7:96:BA:72:97
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/av2fAuLYUbxqOF8nthVSt5a6cpc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.16.0/22
Signature Algorithm: sha256WithRSAEncryption
23:0e:3f:56:c0:1e:f4:1f:ef:8f:d9:6f:7f:61:05:d4:5c:99:
25:bc:b3:b3:b4:40:f7:0e:63:22:ce:90:35:50:56:55:7b:84:
31:b5:64:b8:df:a5:fc:40:9a:b2:76:d8:77:53:f7:71:6b:f3:
c8:d2:14:8f:c2:1e:71:0d:f7:5b:01:b1:0a:b5:57:b5:5d:bc:
ce:bb:5e:02:ab:eb:02:c9:d1:0f:1a:ce:33:05:b3:ea:ee:b1:
62:ce:7a:85:95:bd:64:2f:7b:a2:cb:87:86:e1:35:50:6a:ae:
59:fa:ba:0f:cd:54:5f:52:a1:54:bc:0e:d4:1b:5a:1b:bb:64:
0a:40:3c:11:c6:d8:f5:60:3e:7c:8e:b6:fc:f6:d0:9a:3c:17:
28:2c:94:96:45:40:96:35:a9:80:d8:36:5d:51:d8:cd:0a:95:
4b:0b:51:b6:ca:68:d8:7b:58:d8:28:a1:d2:c8:28:04:6b:83:
3f:f9:88:da:35:38:f0:90:96:f6:ab:cc:c8:5b:bd:de:f8:7f:
16:f8:bb:60:66:fc:6d:38:2e:87:ab:62:29:76:b1:15:05:a4:
09:2a:6e:8b:73:eb:0f:10:95:ab:f1:e9:d2:e5:a2:b0:0c:4a:
72:45:3c:12:17:2c:d1:8e:fb:04:42:7c:ba:d9:42:14:3f:c8:
ed:4d:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org