Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/U3000i-WBeUXswPrgD8V6qwqyjk.roa
File: U3000i-WBeUXswPrgD8V6qwqyjk.roa (raw, json)
Hash identifier: zvhux4JFMeDQbCiGC/yd5Hv+jjir4PfqcXXwjUv9k0U=
Subject key identifier: 53:7D:34:D2:2F:96:05:E5:17:B3:03:EB:80:3F:15:EA:AC:2A:CA:39
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0775
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/U3000i-WBeUXswPrgD8V6qwqyjk.roa
Signing time: Tue 29 Sep 2020 09:59:01 +0000
ROA not before: Tue 29 Sep 2020 09:59:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24167
IP address blocks: 117.103.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 29 09:59:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=537D34D22F9605E517B303EB803F15EAAC2ACA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:21:cc:ad:31:dc:37:00:2c:ea:2d:82:61:
a0:cc:ee:a8:85:1c:b8:ed:e2:17:c1:80:ef:f9:cb:
7e:04:cd:5a:44:cf:5f:25:f8:90:01:c0:e5:ed:85:
a7:93:a9:90:8f:75:9c:4c:38:3c:2b:25:dc:27:6c:
05:d0:69:c6:77:db:28:37:ec:db:3f:75:aa:f7:9b:
d5:44:09:6a:ca:6b:1f:aa:f6:a9:ea:0b:1e:45:e8:
e3:64:d0:a9:fe:f6:42:d7:79:bc:8b:e1:f4:f9:af:
54:31:27:9e:69:20:c7:c7:05:b5:f4:09:1f:8d:a4:
58:92:5a:e3:d2:d1:69:1d:9c:e1:8c:c9:6f:0f:52:
3a:ab:af:96:f6:19:c3:bd:76:e1:af:c3:fd:23:8a:
30:4d:fd:41:95:cc:eb:dd:f2:5c:fe:dc:cd:8c:08:
cc:46:e1:aa:40:52:0a:fe:09:14:10:e0:3f:e8:a6:
38:0c:8c:f6:de:7e:6d:ca:9a:67:03:3a:65:ca:8a:
a7:a7:c3:ce:5c:7b:ca:c3:6a:52:76:cc:31:dd:19:
b3:46:f0:a5:86:77:5c:df:b0:16:3e:42:b4:05:f5:
4f:e5:12:7b:2a:c3:e4:ea:4b:d4:59:45:a8:cb:fc:
50:b9:57:0d:d3:2e:d0:bd:41:77:57:6e:bf:e4:fa:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:34:D2:2F:96:05:E5:17:B3:03:EB:80:3F:15:EA:AC:2A:CA:39
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/U3000i-WBeUXswPrgD8V6qwqyjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.103.96.0/20
Signature Algorithm: sha256WithRSAEncryption
ce:52:d7:c1:ab:d9:ca:9f:fa:fe:9c:a0:35:94:22:e2:5d:f1:
3c:83:1d:e2:e8:67:da:22:a8:01:a5:d3:cc:e1:c0:3d:ba:95:
66:48:6b:81:34:db:54:1c:b8:32:8c:f2:fa:4e:a6:3f:f1:1d:
69:32:8e:04:c4:37:16:bc:c2:90:c5:74:1d:73:43:8a:f2:80:
27:be:e4:55:50:aa:92:2d:b0:5f:8d:53:31:33:90:9e:5e:de:
7c:b1:a4:d4:8d:a6:f2:ff:46:09:71:9f:d0:75:2d:f5:e0:f2:
4d:c9:d1:44:b7:99:a8:36:75:6a:20:9d:85:e3:2d:e0:84:5d:
fc:35:ac:34:33:e2:bd:49:67:03:b6:c8:45:6e:ea:ad:db:c3:
79:b9:02:b4:a3:ee:7c:be:0d:15:0c:9e:05:9d:8f:a9:c5:2f:
b2:72:97:10:2b:c1:c0:05:02:ba:04:7a:d3:d7:0c:8d:b8:71:
3a:42:56:9e:25:13:a6:1f:b5:52:6b:28:46:50:1c:25:f5:51:
19:da:7e:4f:c8:ef:4f:07:9e:72:8b:ae:f8:52:18:7a:e7:54:
44:14:4b:a0:73:5d:a7:f6:a8:e2:f8:41:39:a1:98:6e:7f:cc:
40:f9:9a:c8:1f:7d:94:1a:56:6f:ce:f4:41:f7:a4:5c:87:e4:
5d:e2:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org