Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/_pEzIDuuJStOECv1r6IH3y15b5g.roa
File: _pEzIDuuJStOECv1r6IH3y15b5g.roa (raw, json)
Hash identifier: eiaqw4NliCwsL2R9/ZdGQCoCme8gTdKN38PnUjSiJ0s=
Subject key identifier: FE:91:33:20:3B:AE:25:2B:4E:10:2B:F5:AF:A2:07:DF:2D:79:6F:98
Certificate issuer: /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Certificate serial: 085B
Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/_pEzIDuuJStOECv1r6IH3y15b5g.roa
Signing time: Sun 07 Feb 2021 13:15:42 +0000
ROA not before: Sun 07 Feb 2021 13:15:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.233.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Validity
Not Before: Feb 7 13:15:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FE9133203BAE252B4E102BF5AFA207DF2D796F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:3e:40:5f:99:2b:c7:d2:91:42:13:ec:f0:
53:1c:81:28:36:f8:26:cb:54:32:b6:f8:5d:22:b9:
7a:1d:18:d5:3a:77:9a:19:8a:c0:05:01:ea:0e:fd:
a8:78:bd:0d:f8:27:0c:e9:ce:96:82:51:91:92:d5:
90:71:71:14:de:51:6d:fe:93:b5:08:00:4d:c7:a3:
ac:b1:2a:c0:66:77:d1:87:a5:ae:25:42:74:7c:cb:
2c:bb:6c:7c:75:07:c0:37:21:9a:46:2c:88:1a:27:
49:e0:31:45:41:22:60:0e:d0:c2:16:4d:c6:fc:87:
0b:41:62:40:a7:02:e0:13:4e:b8:35:27:35:a8:68:
e1:a8:67:0d:2b:60:ca:8a:e9:44:c9:08:2b:0f:cb:
8a:0f:c1:50:8b:b8:8d:ec:a6:fa:a9:0d:b6:67:13:
c2:cb:24:e9:11:6f:c5:37:32:d5:8b:78:5b:bd:7a:
8f:c3:b1:41:ac:6a:cf:8c:64:56:4b:70:62:69:46:
b4:4c:47:b6:7f:43:7e:54:30:6b:cb:d0:af:b2:80:
47:95:47:eb:4f:53:37:44:89:94:77:93:99:cc:06:
ae:ef:53:a8:1b:13:45:6e:4e:dc:53:42:50:06:d3:
ca:75:cd:33:8e:a1:56:c1:a3:b5:bd:79:7f:bf:c8:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:33:20:3B:AE:25:2B:4E:10:2B:F5:AF:A2:07:DF:2D:79:6F:98
X509v3 Authority Key Identifier:
keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/_pEzIDuuJStOECv1r6IH3y15b5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f3:c6:51:de:17:c0:e9:9c:96:77:a1:5c:14:bc:33:0d:75:
9c:48:20:2a:47:8c:eb:74:d1:33:27:b6:eb:9b:38:09:77:9d:
91:ec:8c:b9:29:17:b9:98:9e:c1:5a:7f:a4:90:e2:24:a1:bf:
e8:60:68:06:09:0e:39:51:1b:50:9f:bb:d7:b0:81:90:d7:24:
0d:de:58:aa:49:ab:9b:3d:71:32:e5:7a:60:16:d3:df:d6:7e:
42:bb:e6:0e:c5:1d:1a:28:a4:ae:7e:30:86:75:40:1e:23:f3:
ad:aa:c1:28:da:a7:33:34:0b:09:e8:12:20:25:ac:de:03:9c:
80:ad:16:72:55:f8:36:78:a6:94:81:e2:2c:c8:41:44:94:8c:
5c:2d:0c:25:68:55:d8:34:43:e5:08:86:14:d2:17:3c:ec:6b:
fd:da:2e:11:6a:94:98:07:5e:53:3b:63:b7:57:b1:1f:68:c8:
9b:de:85:fa:8d:15:9b:da:dd:c3:9a:c3:f5:00:c8:6e:a2:6b:
5c:03:d4:8b:cb:1f:f4:16:f3:33:29:21:1e:b2:07:e3:5f:84:
7c:f2:e0:b9:ba:e7:85:ff:91:a0:28:01:eb:cc:35:e8:56:03:
ef:7e:8a:8a:85:bc:93:6d:b8:ba:f3:18:60:76:ab:72:f9:46:
ea:6d:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org