Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/-iI78Aa41bDgL_J7QJkWyhIdrMw.roa
File: -iI78Aa41bDgL_J7QJkWyhIdrMw.roa (raw, json)
Hash identifier: nYJxTh3vlOK/S4ze1zNF6qQZXxhRQV8euzMEESy5tQI=
Subject key identifier: FA:22:3B:F0:06:B8:D5:B0:E0:2F:F2:7B:40:99:16:CA:12:1D:AC:CC
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0872
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/-iI78Aa41bDgL_J7QJkWyhIdrMw.roa
Signing time: Sun 07 Feb 2021 13:00:06 +0000
ROA not before: Sun 07 Feb 2021 13:00:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 103.104.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Feb 7 13:00:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FA223BF006B8D5B0E02FF27B409916CA121DACCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:51:0e:95:73:48:de:74:26:03:f0:32:ea:
2c:9d:c4:b3:39:4c:9c:dc:75:e3:d0:47:6c:79:4c:
c6:50:9c:02:63:b2:96:b4:8e:be:3c:c8:a8:44:71:
2d:f4:be:16:ac:4c:65:1c:ff:00:72:ba:91:6e:21:
99:b6:d0:05:73:7e:a2:ca:c5:11:5e:87:00:eb:09:
4b:eb:7e:fd:a3:a7:ed:83:67:b4:af:50:b9:59:08:
ed:a3:6b:5a:16:86:29:aa:22:85:72:2c:3d:5e:d2:
1a:44:24:a1:d3:c6:b8:1b:1b:4d:9c:35:bf:79:12:
37:0a:4e:c8:0a:f4:34:5e:39:38:85:83:5d:2f:61:
ee:23:8e:6e:5e:29:db:a7:88:c1:8e:cd:1d:ab:cd:
cd:13:23:80:09:0d:e9:9e:42:d5:2c:37:5d:c0:d8:
78:2e:54:89:39:65:71:98:46:ea:a8:b9:5a:49:c3:
1a:f3:f1:10:9b:d1:67:8e:17:1e:ba:3a:8c:31:30:
d1:ab:68:5e:44:b4:a0:b7:7b:70:3f:6a:9e:5f:69:
1e:fc:8b:56:72:76:bb:3a:a6:48:23:9a:54:fc:aa:
88:d5:26:59:5d:45:8a:91:5d:54:ea:04:f4:5a:27:
cc:c3:83:9c:ba:dd:b9:1b:85:82:7f:52:2c:46:c6:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:3B:F0:06:B8:D5:B0:E0:2F:F2:7B:40:99:16:CA:12:1D:AC:CC
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/-iI78Aa41bDgL_J7QJkWyhIdrMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3a:ef:a6:72:6d:a0:c4:c4:08:89:18:66:2d:89:47:a2:0b:
1e:13:85:f5:e6:10:93:76:b3:4a:57:bb:02:fd:48:cc:5e:70:
f3:c3:60:87:8b:10:81:a6:bd:41:33:fd:1f:f5:ec:6d:c2:ae:
e6:1c:e1:89:4e:0a:1b:21:33:e3:25:1b:30:35:e8:b7:1b:23:
92:5c:8b:38:30:c4:78:01:29:6e:5c:9b:b2:c3:0d:b2:4f:d8:
45:5c:46:54:53:ab:73:b8:dc:84:55:2b:7b:2e:09:3a:78:30:
a9:82:56:00:07:1e:33:78:ed:99:54:56:90:12:9d:56:51:b4:
9a:ac:99:e5:21:09:32:6a:a4:ed:54:b8:a3:76:c9:90:67:40:
c2:67:ff:90:74:76:f2:12:6d:3f:a1:3a:f6:f5:22:b4:ed:7d:
44:96:98:6a:f2:ef:de:05:22:35:f3:13:6a:c1:87:2e:6e:7e:
d5:92:ea:2d:a3:2d:9b:be:78:10:03:68:7f:f5:86:84:2d:4a:
29:af:f7:07:75:38:61:fd:65:c4:86:20:ce:13:79:c8:b0:b4:
e6:6d:e5:2f:e7:7c:37:36:08:8c:2d:cf:ee:e5:68:47:47:02:
3d:1a:11:b8:4d:41:41:10:45:a6:ef:70:09:f9:21:7e:ab:74:
ff:f6:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org