Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/7M78BVZc3g9jqQXMWjrp_ZjmA34.roa
File: 7M78BVZc3g9jqQXMWjrp_ZjmA34.roa (raw, json)
Hash identifier: hdUk7sBnKh/7PSbLQPbpf3PhF3AyM0lG78Ia4gQlOM8=
Subject key identifier: EC:CE:FC:05:56:5C:DE:0F:63:A9:05:CC:5A:3A:E9:FD:98:E6:03:7E
Certificate issuer: /CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Certificate serial: 0A04
Authority key identifier: 8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/7M78BVZc3g9jqQXMWjrp_ZjmA34.roa
Signing time: Thu 15 Sep 2022 02:38:47 +0000
ROA not before: Thu 15 Sep 2022 02:38:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.103.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2564 (0xa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Validity
Not Before: Sep 15 02:38:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ECCEFC05565CDE0F63A905CC5A3AE9FD98E6037E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:42:27:5a:0e:28:f7:c3:6b:f4:f7:08:ff:
26:f1:50:fa:da:31:b5:4d:ba:93:5b:d8:a4:26:9b:
b5:45:9a:35:37:c9:8c:a2:41:6e:02:34:d9:65:b9:
83:00:1b:ae:bc:03:7f:f8:a9:58:57:dd:43:9e:ce:
2f:93:ec:5f:69:86:42:83:cf:b3:2c:5c:93:b1:61:
98:19:ce:b2:26:92:b7:36:04:0a:2c:ec:f1:0d:9f:
0e:08:b6:39:31:23:d2:dd:9c:0e:ac:4c:91:27:cc:
ad:49:08:a0:f1:85:16:05:28:49:80:11:b9:a9:28:
4f:4c:86:91:56:ea:69:76:9e:97:2e:28:cd:e6:95:
8b:db:5c:c3:3b:aa:cb:66:a5:d7:38:63:da:50:dd:
ee:d8:41:79:a6:4e:19:a9:b0:0a:39:74:e0:6e:61:
ef:b7:12:a8:22:aa:f2:26:30:42:cd:cf:c9:d7:11:
a2:d4:3d:8e:ae:2f:4f:d9:06:57:25:f8:c6:8b:7d:
c6:9c:71:f1:60:cc:ca:5f:5f:0d:0b:7b:97:6d:f8:
23:e6:df:f7:0d:7f:34:aa:d3:e8:be:65:1f:a6:25:
02:bf:73:09:4a:16:9e:6c:16:7a:6d:9b:33:dd:1d:
22:7c:9b:0a:1d:39:c6:43:9f:61:02:3e:8a:26:4e:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CE:FC:05:56:5C:DE:0F:63:A9:05:CC:5A:3A:E9:FD:98:E6:03:7E
X509v3 Authority Key Identifier:
keyid:8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/7M78BVZc3g9jqQXMWjrp_ZjmA34.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
18:23:17:89:ba:63:7a:c8:a7:fe:b3:8e:0d:7f:86:8c:b8:27:
49:b0:f3:84:32:f7:1e:e5:05:e8:90:7a:0a:ca:b0:8b:7c:ef:
4d:25:e0:30:1b:21:b8:fc:62:b0:74:f5:f4:38:22:f5:ab:1e:
ec:9e:09:b9:11:a4:fa:d0:78:d7:fe:5d:90:37:d4:8f:61:41:
70:e6:6d:41:d1:8a:10:c8:7c:69:3f:c3:ee:24:e4:d9:7a:68:
a4:5f:2a:71:2a:b8:0b:55:d4:32:b5:f6:49:43:ab:24:cf:b6:
25:5f:1f:69:d8:40:89:8e:22:8c:7c:0c:6d:7c:80:20:ad:34:
29:20:2e:5a:cb:3b:c3:c9:ef:eb:42:6c:15:7d:82:3a:34:a0:
15:86:aa:8a:3c:f8:84:c4:3b:2f:57:83:ff:b5:61:f7:b6:e8:
eb:cd:dd:c4:e5:07:47:1f:ca:77:7f:3e:af:4d:95:55:ec:44:
0f:b7:9e:ed:26:a6:be:97:4a:cb:1f:15:65:ee:00:9c:75:f7:
55:83:68:a4:0e:63:9a:ae:e5:44:36:92:40:84:c2:00:15:83:
1a:da:36:af:9a:13:5f:fa:6e:85:e2:b5:45:bb:29:30:44:5c:
eb:02:07:14:06:09:a6:6a:42:9c:91:96:62:d5:e4:d6:19:10:
fb:c1:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org