Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/gH2R__P2hULcEsJd7y-17BHzsbM.roa
File: gH2R__P2hULcEsJd7y-17BHzsbM.roa (raw, json)
Hash identifier: CoPDGCCKDcgHmp4hTtCh1Pn93gOWPnbQ/OGahYtFCok=
Subject key identifier: 80:7D:91:FF:F3:F6:85:42:DC:12:C2:5D:EF:2F:B5:EC:11:F3:B1:B3
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0B3F
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gH2R__P2hULcEsJd7y-17BHzsbM.roa
Signing time: Thu 15 Dec 2022 02:56:53 +0000
ROA not before: Thu 15 Dec 2022 02:56:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 103.224.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Dec 15 02:56:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=807D91FFF3F68542DC12C25DEF2FB5EC11F3B1B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:ee:d7:e7:ed:59:72:bc:e0:23:46:59:fe:
3c:09:c2:84:9d:2d:4e:7a:bb:20:ce:30:c9:35:6b:
2e:ab:48:85:05:de:4e:9e:ec:3d:3a:30:30:d5:13:
47:d4:39:bc:93:43:42:f5:d1:1c:9b:0a:5e:30:b4:
52:81:60:72:f4:6e:17:ec:71:8c:7a:6d:52:cf:f5:
e1:a3:a2:a4:e1:17:a7:1a:e4:77:a7:f3:89:43:d0:
76:bb:d0:15:55:2a:7e:f6:42:5b:79:d5:cf:f3:40:
d2:96:3b:2e:39:ae:d5:2b:c6:2e:c6:66:3a:d5:5b:
96:87:2b:a5:44:1b:16:68:63:75:d9:0a:31:a8:46:
ff:35:a9:04:df:e4:a7:88:09:a0:36:ec:9b:fc:33:
7a:31:73:cb:b8:23:3e:a3:0c:f9:6c:db:18:2c:ac:
86:ee:11:cc:42:89:0a:9a:c6:69:ff:fe:63:0f:ff:
f0:50:ba:a2:0b:31:a1:0c:c8:2f:50:93:5f:47:5d:
15:55:21:ff:47:bd:37:01:58:ee:97:23:f5:da:ef:
7a:b7:7a:97:d1:5c:96:34:fb:36:46:1d:b3:7d:51:
ca:4b:d3:b2:33:fc:b3:62:95:da:9b:17:e1:ad:ee:
1a:65:81:f2:72:31:ff:65:05:3f:67:11:1e:7f:4d:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7D:91:FF:F3:F6:85:42:DC:12:C2:5D:EF:2F:B5:EC:11:F3:B1:B3
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gH2R__P2hULcEsJd7y-17BHzsbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.200.0/22
Signature Algorithm: sha256WithRSAEncryption
07:ea:35:c4:01:8b:2b:39:26:8b:18:95:1f:4d:4c:b8:d3:09:
8c:e6:62:36:f8:d5:42:09:92:98:78:96:4b:17:52:e4:68:f4:
b2:84:d0:64:ad:97:fb:6a:fc:20:11:2b:e5:26:33:3e:a1:c7:
c8:29:d6:09:c7:10:93:e3:a4:9d:79:91:bd:7a:51:11:9a:87:
99:53:75:c5:2a:43:14:ec:df:31:bd:3d:c9:8c:80:0c:0f:24:
81:93:9d:73:3e:e5:91:13:66:7a:5a:3a:89:d4:18:5d:56:4b:
13:44:f7:8f:b1:1a:76:06:15:c8:d4:7e:53:3f:08:50:16:0c:
3d:13:f7:1e:a6:e6:82:f0:b2:e3:10:19:51:d9:91:43:f6:c2:
2e:ab:37:db:22:8d:49:f3:49:30:fe:1d:0a:52:00:4b:15:0f:
05:fb:62:aa:85:e0:81:b1:c3:40:9a:3f:bd:0d:fb:0c:25:87:
53:41:c2:99:30:ef:ec:83:5c:63:59:cd:a4:40:d6:17:b4:ba:
78:8b:43:fb:cc:38:50:89:de:ac:55:88:c7:f6:a0:0e:ee:5a:
da:bc:28:5b:86:37:d4:02:3d:d2:c6:64:ac:95:9d:0c:01:c2:
e1:aa:b4:5e:52:27:fe:3a:38:cc:ee:25:9e:11:b2:53:0c:f9:
56:c2:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org