Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/PNp9M4heh4yIhnjK6nMA6aKcfK8.roa
File: PNp9M4heh4yIhnjK6nMA6aKcfK8.roa (raw, json)
Hash identifier: +QRNP9hZEj60m2wVe+PoqiYRW6Rats+yfXLef3pOtiY=
Subject key identifier: 3C:DA:7D:33:88:5E:87:8C:88:86:78:CA:EA:73:00:E9:A2:9C:7C:AF
Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Certificate serial: 03
Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/PNp9M4heh4yIhnjK6nMA6aKcfK8.roa
Signing time: Tue 08 Mar 2022 07:31:43 +0000
ROA not before: Tue 08 Mar 2022 07:31:43 +0000
ROA not after: Wed 08 Mar 2023 06:55:31 +0000
asID: 38047
IP address blocks: 103.183.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Validity
Not Before: Mar 8 07:31:43 2022 GMT
Not After : Mar 8 06:55:31 2023 GMT
Subject: CN=3CDA7D33885E878C888678CAEA7300E9A29C7CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:f1:98:38:95:89:d2:fb:ce:2f:e4:0a:e0:
fe:e7:e0:45:60:68:8f:0b:45:2f:28:f2:f7:b2:50:
35:2a:9f:e7:a2:c8:88:c8:ea:64:20:53:71:27:16:
df:26:8f:87:6d:82:cf:a9:1e:31:e6:8b:a4:02:bc:
19:e7:5e:4d:43:6d:14:d5:d0:1e:01:2c:cf:5d:56:
3c:8b:30:33:77:24:3c:86:7b:5e:b7:4d:33:c2:c5:
5f:81:e0:e2:6b:6f:1c:05:bf:12:d8:e9:36:77:36:
7c:cc:30:cf:79:dc:18:78:b0:5b:15:f1:07:62:9e:
2d:88:9d:d1:25:7a:d3:ae:c1:7f:0e:fa:1e:c9:c7:
07:0d:d4:a0:c2:8e:03:61:f7:72:6d:5c:2a:b3:20:
b7:46:c4:ce:af:31:1a:63:a0:d7:f1:e0:c3:53:18:
72:72:62:9d:f3:cd:3e:18:a2:f7:f9:b3:60:6c:c1:
9d:7b:c2:00:38:60:f2:2f:d5:18:79:a2:16:82:94:
f9:a9:2d:65:a1:b8:4b:f6:5a:73:1b:cd:2f:c4:d8:
22:4b:0c:f4:91:b5:f7:79:4a:c5:cc:75:1a:1b:aa:
63:36:e2:dc:df:81:74:5c:2b:05:e2:30:3a:b3:8d:
8e:2e:30:5a:71:a0:b1:3d:25:3e:af:ff:b5:2f:7c:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:7D:33:88:5E:87:8C:88:86:78:CA:EA:73:00:E9:A2:9C:7C:AF
X509v3 Authority Key Identifier:
keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/PNp9M4heh4yIhnjK6nMA6aKcfK8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.78.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d6:15:92:a4:05:3e:4e:45:9a:81:e8:1d:82:e5:15:ad:eb:
cf:ed:b7:51:29:6e:e4:4f:57:6c:35:fd:d8:ab:34:16:0a:c8:
a5:3e:9d:a5:80:dc:51:31:eb:32:43:de:2f:cc:f1:03:4c:17:
50:5f:1e:8d:13:aa:08:99:e5:dd:3d:fd:ee:9e:1e:10:84:c3:
47:00:c7:92:5a:23:70:a5:1e:5e:50:9a:ea:67:bf:02:27:94:
1e:0f:8b:75:db:8c:28:57:7b:39:b1:dc:1b:4a:37:6b:f8:94:
f3:b4:1b:c8:a9:ab:a6:4b:28:9f:0b:91:25:39:9d:e4:12:00:
95:50:f2:81:ff:14:6e:0b:a4:49:cb:89:18:74:d9:48:c4:57:
23:18:30:cf:fd:b7:3c:f6:9f:9f:c7:a7:1c:94:c2:d4:89:22:
62:0c:54:42:1b:06:bc:bc:02:37:e8:24:79:bc:23:91:52:13:
aa:fb:3a:89:46:c3:a7:03:72:09:28:dd:d6:75:bc:1f:3a:87:
a5:d2:25:0b:a9:0e:e8:45:bf:8a:a6:08:4c:bd:2f:7b:4c:86:
a4:fe:9d:33:3c:eb:3a:15:82:d8:a3:85:c0:45:fe:75:53:84:
fe:73:07:ac:74:e6:06:62:98:58:d2:2c:40:cc:47:c3:61:a7:
01:db:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:49 2023 by rpki-client on console-ams.rpki-client.org