Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa
File: gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa (raw, json)
Hash identifier: xTU0ok8Mxj0UIH/LvpraMR/D9JVmvoc5GIjRAmhvxz4=
Subject key identifier: 80:5A:23:BA:84:10:D1:77:78:58:35:C8:29:48:13:7D:FF:E9:C2:D2
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0A0B
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa
Signing time: Thu 15 Sep 2022 02:50:00 +0000
ROA not before: Thu 15 Sep 2022 02:50:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 16509
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 15 02:50:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=805A23BA8410D177785835C82948137DFFE9C2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:0e:a8:a7:c2:67:6b:0f:b5:39:a8:20:ba:
24:1c:ec:d5:89:02:60:27:d8:6c:a8:a3:65:34:9a:
a0:83:46:78:3a:e1:ea:23:70:92:69:e4:dc:2c:b5:
31:2a:13:79:17:a6:69:d9:d1:e3:44:dd:7f:46:8d:
99:08:0f:cb:54:b1:52:81:ec:a1:17:c9:00:16:43:
5f:6d:c7:33:8a:7a:df:c2:f9:37:da:b8:a0:6c:3b:
a6:55:c1:c2:89:d7:95:2b:72:75:6f:b7:6a:55:05:
11:79:17:c9:3c:ed:78:1c:6f:55:00:7a:db:34:d6:
92:74:21:36:88:80:28:94:bc:64:83:3f:9b:c0:ec:
e1:cb:97:5e:73:dd:6d:70:b1:f1:00:cc:47:25:52:
f4:0c:92:57:45:ca:c4:73:f1:de:6b:55:a0:37:2f:
35:3c:05:6a:e1:1f:87:57:ad:ff:60:f0:a1:81:e8:
d4:61:eb:3b:9a:0b:6e:b8:02:8e:56:5d:ad:37:45:
bd:32:80:4b:1e:4a:75:2f:86:74:c8:99:d0:c1:34:
03:68:ca:22:9e:91:a6:32:44:b1:b7:49:9d:da:e6:
d2:8f:09:78:e1:4d:3f:a4:46:04:c2:9f:aa:b2:f7:
94:f4:cd:9f:bc:75:40:e5:ca:f2:22:8f:7b:28:e3:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:23:BA:84:10:D1:77:78:58:35:C8:29:48:13:7D:FF:E9:C2:D2
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:83:fa:fb:89:b4:71:09:fc:87:c5:7f:0b:3e:88:d4:b8:d6:
d5:d1:20:f3:f4:aa:9d:dc:a0:4c:2a:25:a5:eb:ac:82:a3:dd:
a1:0e:6b:21:14:9f:7a:a7:83:02:65:e8:38:47:55:c8:81:75:
e2:c1:ed:f0:09:90:1c:26:f7:da:02:37:8b:8a:ba:2e:b4:f0:
e0:85:c0:51:53:42:13:cb:de:40:4a:91:4f:42:22:71:e9:bd:
b4:42:d8:fa:1c:39:64:fa:16:fa:31:6d:60:c5:b7:30:94:16:
e4:46:c5:1e:7f:0f:f2:1d:e2:b8:8e:60:d7:27:c5:7d:51:2a:
22:9b:43:52:1c:05:7a:73:09:2c:99:3b:d4:0a:56:0a:ea:02:
b0:2e:cc:02:e5:00:f3:6b:f3:63:c3:32:4b:e1:73:79:ed:7c:
6f:f4:3d:0f:96:fe:43:53:70:50:1b:35:9e:73:53:b8:d7:ec:
c6:9e:19:3f:b5:c7:09:6c:98:30:2f:b9:ea:9b:45:d6:8e:0c:
a9:16:fc:4d:25:f6:e0:e0:7c:2c:a5:57:13:4d:8d:de:d8:1b:
3a:08:81:d7:78:e4:07:4c:f5:3a:d5:7d:31:5a:a3:79:89:2d:
be:4f:51:a9:c4:10:fc:0c:3f:c7:48:d2:21:cb:b2:44:f0:99:
fe:c2:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org