Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/qNNkScMPWamfBB6huPj4CSVW_nw.roa
File: qNNkScMPWamfBB6huPj4CSVW_nw.roa (raw, json)
Hash identifier: 0tPjMvcC+yrf3aPhMitm0tK80Dw06dSDqmLbcVU56Vg=
Subject key identifier: A8:D3:64:49:C3:0F:59:A9:9F:04:1E:A1:B8:F8:F8:09:25:56:FE:7C
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0730
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/qNNkScMPWamfBB6huPj4CSVW_nw.roa
Signing time: Tue 29 Sep 2020 09:59:16 +0000
ROA not before: Tue 29 Sep 2020 09:59:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 41095
IP address blocks: 103.104.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 29 09:59:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A8D36449C30F59A99F041EA1B8F8F8092556FE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:72:13:99:1c:27:3b:0a:07:40:ba:d9:d1:
e7:a0:54:32:fb:ad:cf:d6:ff:ef:42:e5:fd:29:e7:
8e:46:3d:c1:2c:84:75:c5:af:0f:59:30:0f:5e:60:
5f:a2:76:a2:fd:d0:5d:bf:1f:09:fc:9b:e8:60:d1:
82:89:0b:24:a9:a0:9a:00:0f:e0:e9:9e:e2:97:b7:
d8:ec:b7:be:dd:b6:c8:5a:49:66:93:64:19:2b:6c:
f6:ef:4b:c5:73:86:c9:c1:76:69:40:0a:cc:0b:84:
ce:75:2f:25:5b:3d:a0:a7:9d:4d:9d:66:fc:22:e7:
3f:83:e2:cb:ea:9d:ec:6c:56:1a:29:cf:21:13:69:
d0:29:55:d2:b9:d7:af:fc:c6:43:c7:bb:7e:d5:ce:
56:6e:14:44:17:e3:b8:be:2b:69:e2:3a:b1:e4:2e:
b0:33:4f:b7:05:c2:e5:a5:49:99:d7:c4:19:b7:59:
5d:fc:3e:d0:57:0d:af:bf:57:ad:72:6a:d1:32:0c:
7c:ef:0a:04:93:c8:87:b6:67:7b:63:99:ee:57:1f:
cb:65:70:d6:9d:1f:17:d3:92:36:f7:8d:05:f8:c6:
7b:4e:b3:6f:03:67:ca:dc:84:6a:da:b9:35:7a:52:
3d:12:43:0f:8b:be:0b:10:f8:d4:5b:42:e3:2f:79:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:64:49:C3:0F:59:A9:9F:04:1E:A1:B8:F8:F8:09:25:56:FE:7C
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/qNNkScMPWamfBB6huPj4CSVW_nw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.149.0/24
Signature Algorithm: sha256WithRSAEncryption
23:08:2e:f3:65:9c:58:0f:db:b0:3f:7d:49:d1:74:fa:e6:98:
bb:91:e7:96:b5:ce:2c:b3:d7:fc:03:46:04:45:fe:e6:3c:a9:
ed:ee:41:78:b6:37:96:d5:03:00:1e:23:80:8e:51:54:f3:e0:
34:da:71:4c:09:80:ad:f1:88:f0:0a:c7:00:e0:62:68:9c:0a:
2b:76:1e:f4:36:d9:b9:96:88:67:db:df:9d:95:f1:51:e9:c0:
57:9e:bc:21:77:e3:32:d2:83:eb:02:ed:1d:88:82:76:5c:d4:
89:d3:55:99:5c:ee:b5:c1:dc:84:88:3e:37:3e:81:bd:c3:17:
0f:78:a7:9d:df:06:94:a4:96:16:32:d8:f7:c5:48:db:58:24:
d6:8c:24:bf:e5:40:db:64:a3:e5:09:e3:ab:b5:4d:3f:88:44:
85:87:62:d2:bd:d5:10:22:27:06:19:f2:7b:b5:b2:ae:9d:04:
f2:4c:40:ac:f9:3d:d3:44:35:12:bf:b2:77:c1:21:b6:06:99:
22:28:18:b3:07:88:ff:ef:f5:5a:40:86:46:a3:ff:2f:4b:05:
07:5a:88:0b:a0:55:65:a9:74:27:23:47:f4:a4:70:bf:6a:71:
f3:69:48:bc:b3:80:7c:54:8c:af:f7:da:a2:60:a7:ec:ec:76:
87:74:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org