Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/-z4QSMyddf1mGMEc9IQYCVuec2U.roa
File: -z4QSMyddf1mGMEc9IQYCVuec2U.roa (raw, json)
Hash identifier: QSb9LsWGeyejenMX5zTxjEd2ika5ZeR4TYWXKP8aRBw=
Subject key identifier: FB:3E:10:48:CC:9D:75:FD:66:18:C1:1C:F4:84:18:09:5B:9E:73:65
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0A0B
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/-z4QSMyddf1mGMEc9IQYCVuec2U.roa
Signing time: Thu 15 Sep 2022 02:50:01 +0000
ROA not before: Thu 15 Sep 2022 02:50:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131629
IP address blocks: 103.119.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 15 02:50:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB3E1048CC9D75FD6618C11CF48418095B9E7365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:d4:f7:59:5a:36:c1:11:4a:46:ab:9c:d5:
33:57:40:e9:3d:c9:e1:52:c3:66:20:4c:e2:81:bc:
c5:4a:83:e1:c9:30:3a:a7:e8:64:55:7d:e6:76:d4:
2b:ef:23:ac:c3:cb:91:9a:bf:fe:d8:19:f3:6a:e9:
a9:54:fa:a9:56:7e:a4:79:31:0f:7e:da:de:24:9d:
7a:84:05:7e:f6:71:9d:25:00:ae:91:e3:6f:90:a2:
34:83:c2:dc:40:3d:c4:e8:1e:54:a6:47:c9:85:61:
fb:7b:52:7c:a9:83:1b:a8:4b:8d:1c:c5:ce:6a:82:
77:af:54:4a:c6:10:19:f5:5d:3f:5d:12:e3:e4:68:
68:ed:de:1f:d4:94:a8:78:55:4b:ff:22:b9:e4:b4:
62:eb:90:33:85:a9:6d:48:02:9e:b2:29:18:5a:7e:
2d:bc:b5:3a:ae:1a:03:4f:a9:3e:d8:1b:6d:da:a3:
ab:63:b6:03:5b:c9:1f:c1:92:ab:78:cf:6e:7d:d7:
92:67:3e:4d:c0:fb:77:75:ad:20:08:76:6e:a3:5e:
f6:67:e0:a9:0b:aa:98:f9:fe:17:08:3c:a9:04:54:
0d:2a:c6:9c:73:a7:26:23:53:a9:fe:0f:13:48:df:
52:ae:21:18:2b:36:49:11:23:30:26:c7:72:06:b5:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:10:48:CC:9D:75:FD:66:18:C1:1C:F4:84:18:09:5B:9E:73:65
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/-z4QSMyddf1mGMEc9IQYCVuec2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d5:d3:8f:56:fa:54:29:a0:df:19:b6:22:c0:d7:0b:52:7d:
85:7d:20:2d:da:af:c9:74:b8:ef:e7:dc:dd:c8:32:d2:b4:0b:
7e:ec:85:4c:f4:2f:59:59:84:66:c7:c8:c8:ca:30:d1:8a:9c:
59:ec:0b:dc:72:de:55:11:0e:4b:91:79:fc:22:81:6d:97:c0:
e2:c2:7d:75:d0:89:ed:7b:cc:b5:a8:96:65:59:1e:01:05:5f:
73:b2:0d:56:9d:02:de:a6:03:38:8b:56:03:6d:81:98:4f:37:
cd:f2:2f:e7:e2:55:7f:e7:68:34:82:18:7c:29:78:f4:96:51:
c2:03:36:7a:d2:97:a5:1c:d6:ff:d8:8d:65:1b:91:0f:c9:31:
51:96:cb:6d:7c:0f:ab:c9:eb:b0:80:98:83:b8:ff:76:fd:7f:
e8:f3:af:7f:b5:b1:8f:56:19:38:9b:7d:d1:b8:3d:f7:b2:55:
dd:05:4f:bb:8e:28:0b:00:69:9c:59:ff:4b:29:86:35:c2:b0:
ee:8a:b0:f3:53:9e:6d:64:81:20:67:80:83:6d:30:01:73:b6:
68:42:d6:63:d5:5c:f8:38:da:75:4d:48:c2:95:34:5c:c8:02:
6f:94:ca:64:ac:8d:bd:26:89:e4:a9:5b:25:23:b0:eb:25:45:
59:a5:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org