Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/jJ9hN4NceJJQPSVA3sVsm3LyQic.roa
File: jJ9hN4NceJJQPSVA3sVsm3LyQic.roa (raw, json)
Hash identifier: TODkb0jxMnyBDNjI95hLcksIn7A1+yS2sF+HwBvFpl4=
Subject key identifier: 8C:9F:61:37:83:5C:78:92:50:3D:25:40:DE:C5:6C:9B:72:F2:42:27
Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial: 0878
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/jJ9hN4NceJJQPSVA3sVsm3LyQic.roa
Signing time: Sun 07 Feb 2021 12:48:08 +0000
ROA not before: Sun 07 Feb 2021 12:48:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134098
IP address blocks: 103.122.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Validity
Not Before: Feb 7 12:48:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8C9F6137835C7892503D2540DEC56C9B72F24227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:c7:f5:ee:76:9e:63:92:8e:38:03:64:72:
04:3e:25:da:03:1a:13:2b:a8:5e:d8:ff:23:26:b4:
b9:bb:9c:6d:22:a0:46:b7:15:c2:dd:9e:6b:3b:89:
6b:56:93:29:7e:62:f6:2f:52:04:8e:89:1a:a1:e5:
42:20:98:d8:c8:c6:f6:10:49:60:9a:32:d1:7e:c6:
5e:54:e2:21:08:18:f4:9a:13:ea:1e:bb:60:25:19:
12:c8:a7:20:dc:b0:21:f9:2e:92:85:50:47:0d:86:
4c:5c:20:ec:12:40:05:3b:dd:5d:65:9f:45:7f:42:
2d:f1:a8:96:e7:bc:25:32:cd:dd:ba:d5:33:5b:ea:
47:99:04:c8:71:07:ed:7e:7e:c9:4d:8c:a7:11:89:
7d:ef:9f:20:f5:11:53:74:28:5f:07:13:9f:06:26:
5d:dc:4b:bd:25:d5:54:b5:1a:01:40:98:6b:e4:7d:
d4:96:00:57:14:3b:a4:68:00:fb:d1:07:54:04:71:
ea:9e:50:14:c5:8c:d9:eb:1f:ad:8a:45:d9:6a:f2:
6a:ae:8c:66:c0:e9:f4:22:ff:94:26:c3:ca:2b:12:
cd:f8:fd:c4:63:07:d1:8a:9e:05:e9:8a:0c:75:e9:
85:1e:7c:71:d9:fb:91:1f:b7:c0:bd:4c:ba:81:fe:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9F:61:37:83:5C:78:92:50:3D:25:40:DE:C5:6C:9B:72:F2:42:27
X509v3 Authority Key Identifier:
keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/jJ9hN4NceJJQPSVA3sVsm3LyQic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:25:45:26:e5:b5:b2:77:fb:15:f1:1b:9d:24:1e:c1:eb:8b:
76:a7:5d:88:b3:60:8b:23:66:0e:db:d6:20:23:38:0e:94:d0:
22:c4:4c:12:b1:46:6a:06:2f:a0:9f:d9:8b:9e:bf:fc:43:0a:
1e:3a:9a:37:f6:77:c1:76:1b:05:29:c7:8f:ef:3c:f1:4b:b4:
bd:0d:53:7a:e8:57:ce:ff:d6:f5:63:30:6f:f4:c9:1e:ef:6f:
8b:1e:db:10:28:f8:ef:d6:02:83:4c:61:f8:19:b1:82:6e:75:
51:73:5d:ff:6f:37:14:ad:6b:b8:2c:b9:95:76:f8:23:22:7c:
29:9e:95:4c:d8:66:41:6f:50:da:2a:fb:a8:bb:f2:c4:18:75:
06:fa:99:0d:87:88:cf:97:79:0c:aa:b2:20:0d:7b:c2:84:85:
de:07:a4:37:2d:71:42:4b:f5:63:89:87:07:8b:6b:48:13:d5:
23:17:dc:b1:c2:64:95:03:36:ce:70:d8:a7:22:d5:d1:34:a1:
1c:54:21:87:42:70:18:d9:05:72:ac:df:8c:7a:60:58:c5:80:
c7:d3:77:c2:9b:fd:ce:49:cd:ca:32:9e:27:ec:b1:63:98:61:
57:b4:e8:8c:5b:5c:04:d9:6d:4a:fc:cb:7b:0d:69:16:5e:d6:
03:e3:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org