Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/17FtpzARYbfK8ZDzsk-1Z9k07HU.roa
File: 17FtpzARYbfK8ZDzsk-1Z9k07HU.roa (raw, json)
Hash identifier: H44afbiLqsOS19y09tRLcOBiU7lsXdefZNvhGbfAcfQ=
Subject key identifier: D7:B1:6D:A7:30:11:61:B7:CA:F1:90:F3:B2:4F:B5:67:D9:34:EC:75
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0740
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/17FtpzARYbfK8ZDzsk-1Z9k07HU.roa
Signing time: Tue 29 Sep 2020 09:59:52 +0000
ROA not before: Tue 29 Sep 2020 09:59:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 133747
IP address blocks: 103.119.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 29 09:59:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D7B16DA7301161B7CAF190F3B24FB567D934EC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:8f:73:f6:b6:e7:41:6a:26:3e:23:58:82:
c6:1c:a0:42:93:67:4e:94:99:70:39:9c:76:91:e6:
d4:0d:58:fd:53:4c:98:9b:98:a7:d7:6e:f4:27:36:
3d:c9:8a:3c:16:c4:c8:a8:30:5b:c0:91:b9:40:af:
f5:df:83:19:09:a1:10:87:82:9c:2a:87:6c:97:32:
9e:5a:fb:6f:1d:ad:1e:42:1e:01:e1:95:9e:94:a5:
de:12:e8:59:d5:c0:80:de:ae:38:4f:96:6b:cc:eb:
c7:61:9f:8d:6b:b5:01:c9:89:7c:24:17:56:17:fa:
94:67:5a:6c:c6:44:bb:1a:39:be:1b:96:06:05:ac:
ce:6b:fd:ac:8c:6c:07:b0:07:18:da:9f:b0:81:88:
3c:e6:1f:4c:1f:fa:f6:d0:67:10:b9:e2:aa:03:25:
7e:87:fa:e1:d3:87:b5:67:9b:dd:44:58:54:a4:43:
cf:a4:e0:f1:f7:76:a0:c8:c4:ed:a1:39:2f:bf:f0:
98:9a:79:25:b5:84:ff:46:f0:57:a2:23:78:b3:dc:
77:0a:ba:71:85:d4:2c:60:57:c4:02:08:5d:70:3c:
a2:e9:73:c2:a2:6a:dd:8f:7b:76:5b:3b:6c:79:1e:
b1:65:0c:2b:50:02:dc:91:5f:d7:60:93:fd:0f:ae:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:6D:A7:30:11:61:B7:CA:F1:90:F3:B2:4F:B5:67:D9:34:EC:75
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/17FtpzARYbfK8ZDzsk-1Z9k07HU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a9:64:d1:a8:ce:b6:31:1d:85:74:5c:a0:64:a8:97:bb:67:
0a:57:85:f5:e8:01:9a:ae:4e:82:fc:56:91:d8:87:77:5a:ee:
90:00:e0:80:3c:a0:b9:b8:6b:0e:91:12:b7:c9:74:b1:90:79:
31:af:c4:eb:1f:03:2e:52:71:83:c0:bb:ba:7e:8a:b1:86:36:
ba:3b:16:39:46:bc:f7:ce:26:6c:bc:da:27:04:81:a9:71:44:
c1:7a:9f:1c:e9:bc:dd:10:38:a6:41:25:d6:e0:ce:9b:6e:57:
86:85:72:26:a7:8f:f8:d2:3e:e8:98:9f:76:3a:90:74:ca:f3:
ad:a4:3a:1d:8b:15:58:35:90:17:8a:ca:f2:8f:4e:27:3a:37:
45:1b:1b:d0:b1:e1:8c:95:52:b7:a5:c5:d8:3d:bd:f6:c4:68:
e5:d2:b3:33:c4:87:e7:d8:90:4f:7a:db:33:10:35:5b:c1:ba:
7d:42:2b:2d:5c:c1:9a:04:45:b9:b6:0c:50:20:59:b2:a8:08:
23:a3:84:db:db:ea:fd:1e:7a:9f:19:0e:5d:d9:c5:4e:ae:8e:
cc:d6:42:23:28:2b:75:bc:5a:83:e3:08:c3:28:fd:87:bb:b5:
e4:c3:3e:f2:a4:81:23:7d:c8:b7:72:aa:51:15:50:e8:15:f3:
e4:a1:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org