Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/18GdHaJ3h9am3MDZXYGIfyM1mfA.roa
File: 18GdHaJ3h9am3MDZXYGIfyM1mfA.roa (raw, json)
Hash identifier: teWr7D2ulclBhb+BmxJiC6ozm8xCuLs5PUSscJiBGcY=
Subject key identifier: D7:C1:9D:1D:A2:77:87:D6:A6:DC:C0:D9:5D:81:88:7F:23:35:99:F0
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 087C
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/18GdHaJ3h9am3MDZXYGIfyM1mfA.roa
Signing time: Sun 07 Feb 2021 12:57:58 +0000
ROA not before: Sun 07 Feb 2021 12:57:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131629
IP address blocks: 103.119.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Feb 7 12:57:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D7C19D1DA27787D6A6DCC0D95D81887F233599F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:e3:f2:0b:ba:11:25:6c:30:01:f9:15:95:
05:2f:7a:3f:54:c0:16:96:a2:34:56:85:85:6a:44:
b0:9f:3c:0e:f6:2b:96:2a:94:2d:ba:d2:39:77:0e:
bf:d3:0c:0e:2d:f7:e9:41:96:aa:e4:a9:be:eb:e0:
ba:9b:1d:8c:7d:0d:4d:d6:04:76:e0:1a:55:2d:7c:
cd:3e:57:75:74:8e:4c:a7:8b:9f:89:18:56:33:f8:
c3:a4:2c:11:61:db:d3:31:e6:f1:f3:05:9a:de:1d:
9d:79:06:1a:43:fe:0e:a4:f0:a3:f2:c6:3c:b8:8f:
75:05:8b:4b:df:24:dd:00:6b:23:f3:23:62:09:ae:
9c:34:c7:4a:d0:5a:12:81:a2:5c:57:45:0b:ee:dd:
7e:f6:f4:39:55:d4:76:76:54:19:37:88:64:99:19:
60:1c:95:84:87:16:50:a5:cd:0f:8e:f9:ba:20:c0:
65:f8:0c:b0:79:ae:c3:39:1a:46:40:44:e6:3b:a6:
70:20:d2:04:99:68:36:07:47:de:c7:ec:be:54:03:
c3:86:64:cc:d4:41:54:84:9c:29:f2:21:61:70:32:
43:68:68:6b:99:13:3f:22:fa:c9:ad:97:1e:3b:57:
a3:bd:75:65:e3:f6:0f:36:ae:8d:93:ab:3d:6f:78:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:9D:1D:A2:77:87:D6:A6:DC:C0:D9:5D:81:88:7F:23:35:99:F0
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/18GdHaJ3h9am3MDZXYGIfyM1mfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
93:60:67:ea:33:41:5d:c6:cc:de:e3:22:b3:6c:49:0f:46:96:
94:69:71:2f:0b:20:28:e6:4e:6c:98:d7:33:8e:c8:a1:3d:0d:
86:6e:ba:62:02:08:71:89:15:36:32:ca:80:96:14:30:f4:07:
e3:93:b4:ae:a0:78:a3:ae:67:16:ab:da:3f:ad:69:24:d2:13:
fc:a7:16:54:55:74:0e:3a:7b:c3:51:a4:84:66:6d:3e:e9:9c:
ac:0d:fe:d5:27:fc:92:bf:6e:4e:08:4b:3f:b8:84:74:f7:4a:
4f:73:ab:9e:aa:71:eb:e8:a7:dd:af:ee:9f:dc:ac:85:a2:6f:
be:b8:b8:79:87:75:bd:94:1b:c2:ac:f8:dc:ca:47:bd:90:9d:
f7:79:fc:bf:34:fb:12:e7:a4:dd:16:15:f3:53:4a:96:75:d9:
5d:b0:29:99:59:0c:b0:84:3e:e7:94:a4:24:b2:77:1e:5e:86:
7c:7d:b4:5f:1c:b3:24:0f:2b:7c:6d:38:71:51:d1:55:9a:70:
8f:ed:2e:7e:18:48:33:a5:b7:87:e9:2f:d2:e8:d8:e2:ac:85:
5a:71:43:22:f9:1b:90:5d:97:ce:d0:8f:73:ff:38:b6:90:77:
95:51:c8:f9:c2:19:49:b0:aa:7b:83:2b:10:7f:30:f2:a3:3c:
b0:85:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org