Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/y4PZVSeuQ3kga8aD0OOw7GnNekk.roa
File: y4PZVSeuQ3kga8aD0OOw7GnNekk.roa (raw, json)
Hash identifier: j05eEmr3mELhxl1xN/gbUWBkloeHZXmayVZczJYqyeA=
Subject key identifier: CB:83:D9:55:27:AE:43:79:20:6B:C6:83:D0:E3:B0:EC:69:CD:7A:49
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/y4PZVSeuQ3kga8aD0OOw7GnNekk.roa
Signing time: Thu 15 Sep 2022 02:39:26 +0000
ROA not before: Thu 15 Sep 2022 02:39:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 103.5.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CB83D95527AE4379206BC683D0E3B0EC69CD7A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ac:e0:17:6a:0d:c8:63:08:4f:3c:52:62:f8:
2f:05:16:29:b4:c1:8f:ce:1c:25:58:b8:4d:8b:27:
69:61:07:33:e1:70:8e:3e:55:8f:4d:f6:2f:e9:13:
65:23:00:1b:8e:65:e1:2c:17:8e:b6:dc:61:38:62:
98:b3:95:30:d2:81:2f:83:64:cc:9f:76:17:35:d9:
8d:e9:b4:15:26:f4:f0:8e:1d:ab:94:01:f0:37:f1:
54:41:23:91:66:7a:04:49:3f:34:86:b1:6a:34:ce:
ac:d3:31:4c:37:73:f5:41:c2:9d:f2:61:5d:d0:26:
1f:c0:97:a2:25:4c:7f:e8:d5:45:75:0f:f1:33:89:
51:4e:b0:39:44:12:8a:fd:42:35:b4:34:8e:6f:87:
5d:fb:95:cd:34:9d:55:a0:05:58:03:2f:0f:1c:24:
29:1f:e7:82:1d:a6:d3:f6:6e:bd:da:f0:c2:85:7e:
e3:21:d9:f5:d4:54:3c:ef:95:cb:04:5f:74:6e:42:
37:0c:c7:6f:55:2c:22:f8:ae:c4:45:6e:27:c3:13:
76:6d:4f:b8:39:cc:64:8e:8b:e5:51:30:05:57:7a:
8b:24:81:77:29:46:d5:d9:60:d3:40:1e:c5:ce:39:
1d:6e:2f:ec:a6:2a:1d:b4:c4:73:26:39:95:b2:b0:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:D9:55:27:AE:43:79:20:6B:C6:83:D0:E3:B0:EC:69:CD:7A:49
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/y4PZVSeuQ3kga8aD0OOw7GnNekk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b7:e4:c1:de:f9:ad:7e:b8:55:42:ec:fc:fb:45:b0:e3:43:
d5:24:84:a8:3e:78:a6:20:dc:ef:27:3c:0c:81:e6:9c:b1:b8:
e8:b8:77:49:14:f7:64:6d:6e:e4:6a:c5:b9:dd:8c:05:8e:58:
35:25:11:8a:8d:76:14:ad:b3:5e:56:b4:f9:fc:b8:09:b8:4c:
de:3e:af:ab:e5:74:8d:66:73:d1:7e:59:80:65:a9:86:f6:79:
02:c4:ae:d3:72:72:bc:6d:a1:cc:25:23:92:bf:bc:c6:74:c0:
1b:c3:48:a0:29:79:9b:39:3e:80:fa:cd:fb:de:cc:9b:af:16:
57:55:a9:b3:9a:f4:7c:0e:ba:27:ab:4f:fc:d4:91:fc:2d:98:
e8:74:71:ba:01:56:35:8b:52:12:46:81:d0:7e:41:58:8f:9c:
20:fd:91:28:3c:8e:69:d7:dd:9a:29:85:7b:e3:5c:94:8e:36:
b3:ce:36:5b:17:c0:e1:b5:3f:8d:28:ba:de:ea:b2:45:14:14:
6d:ff:62:4c:a7:db:eb:b2:aa:ee:69:73:65:00:e4:a9:9d:0e:
9d:0c:2e:14:18:14:c9:38:0c:79:7a:9d:0a:6a:4b:ce:80:01:
87:e2:b2:8d:fa:1e:85:df:c1:3c:50:83:13:9a:bd:8e:1e:8e:
df:1a:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org