Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/fgekY_HfjpgVzED8Io18t1oXLG8.roa
File: fgekY_HfjpgVzED8Io18t1oXLG8.roa (raw, json)
Hash identifier: 2V91WBeFQgAYKBbDWDmZiqfDvoQVlgbs54u1+STtleg=
Subject key identifier: 7E:07:A4:63:F1:DF:8E:98:15:CC:40:FC:22:8D:7C:B7:5A:17:2C:6F
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0860
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/fgekY_HfjpgVzED8Io18t1oXLG8.roa
Signing time: Mon 25 Jan 2021 03:55:10 +0000
ROA not before: Mon 25 Jan 2021 03:55:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 135293
IP address blocks: 103.104.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Jan 25 03:55:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E07A463F1DF8E9815CC40FC228D7CB75A172C6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:99:5c:26:eb:31:7a:1d:1d:a8:30:36:b6:
48:67:fa:53:48:c2:6a:a2:9f:15:cb:e7:85:50:4e:
93:57:b6:52:6e:07:de:f5:42:67:57:99:61:7e:0a:
68:9b:8b:d3:28:10:9a:dd:c4:7a:82:6c:9e:7c:cf:
68:59:c4:1e:82:ff:4b:d9:83:fa:e7:d0:e6:08:df:
d7:19:0d:9a:11:39:c8:9f:74:42:45:0a:2f:60:40:
e8:48:8a:b3:6c:1f:5a:d5:42:03:eb:76:c1:a7:74:
3f:d3:77:b5:ee:96:df:34:0f:5d:26:6b:fd:af:30:
d1:75:bd:0d:c8:b3:18:47:56:5a:2a:6a:e7:1f:21:
54:bb:a0:3a:44:7e:f3:0c:98:18:c8:77:90:e5:d3:
3f:4c:dd:48:84:4d:00:0d:e5:c0:63:af:f9:df:14:
e0:23:17:27:ae:eb:d0:90:2f:ae:9f:44:76:df:d8:
ad:c4:ce:45:e0:ee:fb:9d:e5:e1:47:90:fc:25:68:
af:f2:a3:19:a3:a6:bc:35:66:c7:2c:26:6a:47:9f:
9a:98:bd:67:cb:c9:91:46:d1:49:27:2b:c7:04:7b:
79:59:ae:3f:7c:75:9d:df:59:d5:19:3e:d9:4f:7b:
62:f2:10:de:7f:9a:1e:74:a3:38:bc:24:e1:ec:33:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:A4:63:F1:DF:8E:98:15:CC:40:FC:22:8D:7C:B7:5A:17:2C:6F
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/fgekY_HfjpgVzED8Io18t1oXLG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b8:52:6e:ce:12:90:3d:19:17:22:1c:2d:f0:40:7b:ac:5d:
e0:48:e4:7d:4e:9a:59:59:6c:f8:e2:08:75:79:c3:d5:d6:ed:
2c:0e:cf:32:fa:6d:39:bc:1c:81:94:59:6d:29:79:17:77:73:
f7:7a:af:f6:4a:88:7e:f2:d9:3b:1e:73:c6:46:72:4b:81:2a:
06:66:a6:b9:34:59:6b:90:3f:94:db:29:aa:ce:ba:30:3b:00:
35:40:60:1c:8a:c4:dd:bc:75:06:0e:6a:96:66:38:86:28:85:
24:5a:d6:7d:c6:88:00:71:cb:75:d9:de:14:14:b3:73:4c:58:
4e:fa:62:6f:49:7f:0d:17:62:2d:09:2f:ab:50:9e:d4:28:cd:
ec:c8:ed:50:ea:3f:7f:d9:6e:aa:db:8e:67:b4:c1:a4:d0:b0:
bc:94:7a:ba:46:15:b1:5f:9b:cb:a5:ba:63:e1:11:3b:34:51:
2e:90:4d:66:38:83:0e:e3:84:af:a0:5e:1d:37:cd:7f:65:d0:
a6:a8:c4:ea:3f:80:5a:f2:24:15:94:d2:aa:8c:9c:35:90:8e:
0d:b5:d4:48:e4:0c:09:4a:7f:ae:02:e5:cd:01:61:4a:2a:ec:
d6:a8:2d:ab:f6:61:30:13:50:87:65:46:5a:d4:26:66:47:e7:
bb:13:9b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org