Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/RgPl5W23PjoMRIZTynO8SCSu6tE.roa
File: RgPl5W23PjoMRIZTynO8SCSu6tE.roa (raw, json)
Hash identifier: pcj8h6nXV5M05BuLhX0upswr1z0k3ayXdjaqG+Tj/C0=
Subject key identifier: 46:03:E5:E5:6D:B7:3E:3A:0C:44:86:53:CA:73:BC:48:24:AE:EA:D1
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 091F
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/RgPl5W23PjoMRIZTynO8SCSu6tE.roa
Signing time: Wed 29 Sep 2021 02:52:27 +0000
ROA not before: Wed 29 Sep 2021 02:52:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 16509
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 29 02:52:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4603E5E56DB73E3A0C448653CA73BC4824AEEAD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:30:a5:52:a4:ec:66:61:60:c7:7b:70:d4:
46:46:1c:3d:c1:13:6a:5b:52:13:9a:6d:66:8f:96:
f5:56:48:44:c9:7f:1e:21:ee:a6:2d:ad:78:0d:7a:
94:79:d0:4d:b0:cc:0d:03:02:68:01:fe:37:a3:5c:
18:b8:62:06:fc:5b:dc:64:77:a2:a6:72:92:40:b5:
53:e9:d8:4d:d3:41:d8:ba:56:e3:4b:6d:84:5b:dd:
aa:d3:2d:9b:ea:40:f5:16:b0:6b:08:ba:ae:30:80:
6d:03:aa:86:ee:c4:8a:86:ad:ff:53:6e:c9:1c:f1:
b4:57:cc:d3:c2:c8:47:fb:fc:45:df:4f:46:5f:6c:
b6:b1:ef:8c:9d:86:58:ab:30:ac:c4:05:1c:9c:dc:
9e:01:c0:ef:64:3f:d4:9d:69:38:41:71:54:2d:1c:
ed:d2:01:bf:c9:8a:da:5b:f5:90:cc:e0:46:6c:ab:
c5:be:a4:59:62:90:79:08:74:79:55:b4:76:52:2d:
86:a0:53:e0:7a:4c:9a:aa:26:31:71:3b:fd:31:a9:
12:cd:2a:9b:ea:22:41:b9:56:a8:82:5a:3b:88:d1:
e0:5b:3c:39:49:d8:c6:a4:53:38:1d:ce:af:cd:2b:
78:04:3d:5e:be:9e:fb:64:27:dc:62:76:7b:4d:8f:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:E5:E5:6D:B7:3E:3A:0C:44:86:53:CA:73:BC:48:24:AE:EA:D1
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/RgPl5W23PjoMRIZTynO8SCSu6tE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cf:a4:d1:e5:5b:db:58:25:8d:58:87:01:5e:cf:73:bb:92:
0b:27:db:8c:b0:ab:0d:0f:d6:12:f4:65:d3:a1:90:6d:a2:21:
84:d7:b0:75:ed:10:ec:a2:56:91:f2:9f:36:6b:62:1d:dd:1e:
d7:96:85:fd:e4:da:0f:3c:2c:d0:95:fe:5a:7b:72:4f:f7:5a:
e4:47:3f:1e:75:e4:bd:2d:c2:ac:39:3c:3a:4c:2b:a3:25:c4:
c0:96:cb:23:7b:55:11:60:ba:5a:60:35:f5:01:18:59:7c:00:
fc:53:06:aa:90:b2:b3:31:6b:90:3a:21:3a:a5:9a:5f:df:d1:
20:94:d3:4c:9a:e4:6c:4b:11:8d:7e:1f:c7:94:90:40:5c:bf:
b4:ee:90:75:bc:80:c9:ad:63:33:c2:42:0a:1b:ec:8c:5e:5f:
d4:2a:73:20:da:53:37:c0:e6:e7:b5:a9:d8:c3:6d:0b:5a:50:
56:db:08:c8:33:c9:21:83:6f:08:c3:04:5e:2b:c5:93:dc:77:
44:92:e4:fa:56:23:58:1b:0b:09:bb:71:b9:38:92:e6:98:2d:
75:b0:20:3e:aa:ab:e4:7c:c7:91:52:51:fb:7b:a1:aa:10:8b:
a7:c6:81:d2:cc:6a:74:d5:73:33:02:c4:30:eb:b6:af:ac:dc:
36:c6:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org