Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/cnPCMbPtrFp7Vy_WDbQhkykiZ3I.roa
File: cnPCMbPtrFp7Vy_WDbQhkykiZ3I.roa (raw, json)
Hash identifier: VSuDD7IdYJ1/xbEr/1wnCLFocu7fFQVF2viGiPc40xU=
Subject key identifier: 72:73:C2:31:B3:ED:AC:5A:7B:57:2F:D6:0D:B4:21:93:29:22:67:72
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 0842
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/cnPCMbPtrFp7Vy_WDbQhkykiZ3I.roa
Signing time: Mon 07 Dec 2020 03:34:23 +0000
ROA not before: Mon 07 Dec 2020 03:34:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 1340
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Dec 7 03:34:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7273C231B3EDAC5A7B572FD60DB4219329226772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:0f:bd:07:c4:88:90:5e:42:a1:cd:4a:9a:
cc:3c:f1:7a:71:bd:45:8c:2f:d2:0c:a1:1c:fc:64:
eb:91:2e:73:fd:82:04:2d:f2:81:32:49:b8:c9:26:
f2:2d:a6:53:e3:86:cc:67:61:be:73:7a:db:ba:ff:
b6:d3:26:1a:49:93:d9:a7:77:41:5e:c0:fa:67:2c:
fd:4a:0e:07:b2:b8:84:5b:07:04:a6:7f:35:f2:32:
25:f7:ed:33:68:c3:a5:42:00:4b:b2:33:b3:2c:b5:
04:ba:af:83:c6:1b:7d:19:d0:84:4a:44:4e:29:2b:
10:2b:23:49:25:65:7f:35:28:83:58:cc:c6:04:ca:
94:a5:e6:0b:32:6a:77:8c:be:d0:6b:85:f5:91:39:
a8:bf:3e:97:d9:51:fd:d9:76:0d:8d:dc:76:c1:50:
82:f9:16:fa:57:94:59:b7:15:b4:a3:9c:3a:e5:13:
e1:75:af:d8:6e:e2:64:dc:5a:46:04:38:84:47:6e:
2e:16:a7:90:82:67:dd:37:4f:b0:8f:c8:a6:74:97:
cc:2b:6b:a4:02:cb:2c:5c:2a:64:42:e4:41:99:d3:
fb:71:2b:db:9c:60:b9:51:58:9a:2f:05:82:fb:62:
d1:ce:e3:93:72:4e:2f:fa:30:01:4e:23:8c:07:fc:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:C2:31:B3:ED:AC:5A:7B:57:2F:D6:0D:B4:21:93:29:22:67:72
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/cnPCMbPtrFp7Vy_WDbQhkykiZ3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
57:07:01:37:45:e5:1c:1c:61:e7:1e:be:3b:1d:b3:21:48:c7:
3b:5b:12:77:df:32:a4:2b:55:10:8a:2e:1f:7d:d8:95:55:16:
e5:32:49:3e:cf:e3:63:f4:c4:f7:55:a7:c0:27:b0:7c:11:32:
57:05:73:99:9b:95:c8:eb:47:89:56:cc:9e:de:df:d7:49:8a:
c6:13:e1:99:71:76:f3:7b:65:49:14:a5:62:20:d8:07:a5:13:
cf:2b:eb:69:82:f6:09:88:db:d6:4d:e3:9a:4c:4f:59:7f:28:
bc:18:f2:64:04:86:20:e0:b8:d9:0c:4b:1a:e7:cc:18:bc:d9:
b7:5e:2d:1f:25:5d:3f:c6:29:f3:43:8c:e2:ef:e3:80:67:cc:
ef:08:00:c3:56:45:89:ee:08:bf:66:64:0f:29:7b:12:18:e4:
91:28:fa:96:81:2f:ed:d4:31:45:0c:59:1b:ad:8c:db:2a:72:
52:95:46:a6:e5:e6:a1:98:a8:e9:c3:60:44:e1:64:e1:7c:c1:
e5:95:fe:63:22:27:71:12:c9:e2:2c:94:6a:b8:15:a8:61:ce:
b9:6f:ba:7b:62:3b:b1:49:ef:56:9d:66:bd:9f:61:c0:ef:15:
ba:b7:e5:b5:ef:08:a4:33:2e:d0:18:9f:65:00:ab:4b:a4:eb:
fc:82:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org