Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/_V4T_vBWBXE92yTDWVyyTWPM_NY.roa
File: _V4T_vBWBXE92yTDWVyyTWPM_NY.roa (raw, json)
Hash identifier: 204wjmskSgLFKHMxuzjVm+Uv9iZlspSY9Ui9QYh8QlQ=
Subject key identifier: FD:5E:13:FE:F0:56:05:71:3D:DB:24:C3:59:5C:B2:4D:63:CC:FC:D6
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 086E
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/_V4T_vBWBXE92yTDWVyyTWPM_NY.roa
Signing time: Sun 07 Feb 2021 13:00:03 +0000
ROA not before: Sun 07 Feb 2021 13:00:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 135293
IP address blocks: 103.104.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Feb 7 13:00:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FD5E13FEF05605713DDB24C3595CB24D63CCFCD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:e5:a5:3f:52:8f:9b:ff:1b:40:70:8b:20:
e5:3e:ad:f2:34:b7:34:47:9c:2b:45:f2:12:27:52:
f9:f5:99:d7:1c:ae:13:de:2c:65:2e:40:2f:5d:07:
63:b5:8d:ee:9a:3a:5d:87:64:07:db:e8:91:8b:07:
a5:b9:73:78:c9:6d:57:66:2c:18:3d:c3:84:9a:57:
59:b4:5b:31:f1:bb:20:e4:a8:7d:f1:60:2c:a5:d7:
37:56:4e:25:75:68:77:d1:8a:f9:ab:71:2e:29:87:
ad:f5:81:33:e2:ec:c0:68:a4:20:aa:b9:51:83:27:
a8:57:6f:10:82:5f:85:19:ab:02:53:e1:38:52:d7:
c4:c1:a0:eb:5b:de:84:e7:49:38:09:3d:c1:91:fc:
79:e3:5f:42:e0:82:cd:78:a1:61:37:85:aa:5c:2c:
a1:c8:02:a1:46:ca:10:68:ec:9b:b9:0f:02:58:eb:
01:8a:ba:b5:55:6f:f7:fe:47:95:55:cd:59:33:f3:
83:ee:94:04:3a:cf:05:fc:e0:77:fe:af:ba:0a:25:
dd:2f:ce:50:28:63:64:94:e0:7a:97:1a:54:78:b6:
ce:96:e5:82:c4:92:15:d9:61:5c:e5:53:27:36:3f:
6c:ba:ca:3e:27:42:33:f2:f4:c4:93:65:41:2e:57:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:13:FE:F0:56:05:71:3D:DB:24:C3:59:5C:B2:4D:63:CC:FC:D6
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/_V4T_vBWBXE92yTDWVyyTWPM_NY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:ad:0c:46:58:45:03:ce:e0:73:a8:68:ad:64:12:7c:1f:a5:
a4:be:90:b2:e1:29:b0:72:fa:04:d0:68:37:26:f7:b4:c0:61:
3b:f6:0d:7d:69:cb:8f:be:64:53:70:26:cc:7c:fc:08:46:51:
13:47:59:87:5e:27:1c:0f:d6:4d:5e:31:69:82:42:e0:bb:a9:
2f:54:9a:67:6b:24:9f:6e:6f:43:cc:76:b5:94:a7:5f:4f:be:
79:49:c2:15:16:88:f7:2b:14:5d:ba:15:9d:3b:dd:83:a2:7d:
90:b6:21:02:ba:ff:96:d0:90:2c:43:ce:46:99:cd:39:4c:9b:
9f:83:c3:de:33:a9:05:75:09:93:f2:c5:94:77:10:26:90:77:
d2:d9:43:9a:cb:b9:bd:1f:0f:19:28:0d:3d:c1:15:7a:04:4b:
98:7f:7a:d4:a8:f4:8a:cc:ba:09:0f:be:7d:4f:5a:52:ad:ae:
e4:8e:4e:79:12:68:24:0d:6f:0b:3d:da:bb:90:b2:44:7e:fd:
35:d3:20:5a:2c:cc:19:65:95:56:82:69:f1:e5:0b:18:d0:44:
af:fd:52:04:c6:96:d4:2a:77:ac:8c:74:52:1a:8b:df:5a:76:
93:f1:ee:0e:03:a7:45:7e:78:6a:24:05:ac:d7:df:22:f0:70:
df:a0:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org