Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/5ogY25tgXLltAcEDTVtDVLQFTWE.roa
File: 5ogY25tgXLltAcEDTVtDVLQFTWE.roa (raw, json)
Hash identifier: xspbRHVakxK65zN5ka+fKqSwwRE1KKbzqUmjxGckAuw=
Subject key identifier: E6:88:18:DB:9B:60:5C:B9:6D:01:C1:03:4D:5B:43:54:B4:05:4D:61
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 08C2
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/5ogY25tgXLltAcEDTVtDVLQFTWE.roa
Signing time: Sun 07 Feb 2021 12:47:42 +0000
ROA not before: Sun 07 Feb 2021 12:47:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 103.123.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Feb 7 12:47:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E68818DB9B605CB96D01C1034D5B4354B4054D61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:5f:5c:49:ab:38:d2:5c:0b:07:00:54:b1:
d1:1c:4d:42:57:60:f1:d8:a2:d0:59:c0:89:b7:c7:
c6:49:9c:6f:98:41:50:39:c1:67:f8:53:51:3e:85:
89:80:ef:1b:91:12:05:0f:f6:a3:84:3c:f9:99:a6:
fc:75:1d:ae:5f:14:6d:5c:8c:4b:cd:83:63:f1:25:
87:a7:fc:34:d3:fe:bd:d2:e6:81:a4:5a:20:10:c6:
1e:18:e7:fc:53:3d:32:55:99:e1:cc:26:7e:69:c5:
35:1e:15:f0:1c:a4:cd:24:08:45:79:25:2b:9f:92:
c7:7c:aa:22:50:d8:c9:94:bf:f0:1e:e7:ba:af:1a:
34:20:97:18:bf:a8:f1:0f:0e:05:1f:28:14:c8:9f:
21:85:c7:72:4d:ac:5f:40:e8:9a:46:07:29:ec:58:
12:ba:7a:9c:2d:36:58:a2:1d:f7:5d:55:58:2e:5d:
aa:fc:2e:2e:4c:94:51:48:b9:38:02:57:6d:b4:5d:
fa:a4:6b:9b:ba:b5:e9:93:53:a6:47:6d:d9:7d:d6:
84:f7:2b:73:fa:60:63:f2:51:02:3a:0a:db:32:56:
5b:85:0a:49:87:90:91:32:04:8d:ef:84:0a:e1:70:
1f:df:8b:b2:fa:10:65:04:99:bd:a1:9f:d9:13:a8:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:88:18:DB:9B:60:5C:B9:6D:01:C1:03:4D:5B:43:54:B4:05:4D:61
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/5ogY25tgXLltAcEDTVtDVLQFTWE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:dd:fc:e1:48:2e:d0:9a:66:de:85:32:b7:b2:56:39:44:1b:
3a:bc:53:82:41:b8:55:e4:6a:1b:cc:72:14:c6:a9:00:61:43:
17:15:b3:83:b0:ec:56:37:f7:bf:3c:b5:2f:2f:95:8f:86:a7:
9a:a0:1f:0e:60:c3:64:5a:ff:c7:21:30:6c:44:da:d7:56:c5:
28:89:10:f3:8a:55:24:af:c0:17:85:5b:1e:6a:dc:96:9a:a6:
fe:a7:72:7f:7c:7a:ce:44:a3:32:44:6f:24:d7:65:0c:9b:6c:
ac:37:28:af:c6:55:50:6c:4b:d9:cf:43:9b:9f:6b:5c:c0:7b:
57:c5:d0:54:a0:af:d1:c8:10:4c:4a:ec:bc:68:c7:49:3b:c5:
df:41:22:7c:61:c7:14:62:69:f3:3e:ac:3a:78:60:94:29:9a:
1c:82:57:3d:55:3b:7e:1f:14:ab:45:1d:fa:e1:8e:75:61:02:
c3:c4:dd:ab:bb:cf:39:e0:55:8a:05:e6:0e:28:89:b0:66:13:
f7:73:70:93:1c:c8:56:69:1f:b0:81:3e:ea:52:f8:f9:16:ce:
9b:a1:fb:df:3c:71:58:39:76:e5:d3:d4:dc:50:cc:41:a6:3e:
4a:ca:fd:20:ea:42:eb:30:10:b1:46:06:a8:a1:3a:34:d7:ce:
07:16:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org