Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/KZd9V4lY-9Ne4DKI751y2DZlDsw.roa
File: KZd9V4lY-9Ne4DKI751y2DZlDsw.roa (raw, json)
Hash identifier: Mx9qfxaE3uX9PZfrGTk8Ni/x/cI95VROO5lhv7r6TDo=
Subject key identifier: 29:97:7D:57:89:58:FB:D3:5E:E0:32:88:EF:9D:72:D8:36:65:0E:CC
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 08C0
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/KZd9V4lY-9Ne4DKI751y2DZlDsw.roa
Signing time: Sun 07 Feb 2021 12:40:27 +0000
ROA not before: Sun 07 Feb 2021 12:40:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131662
IP address blocks: 103.123.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Feb 7 12:40:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=29977D578958FBD35EE03288EF9D72D836650ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:32:96:7a:b5:18:cc:a2:c4:cd:ed:21:f1:
cc:26:bb:ed:91:c4:8a:3f:8b:39:0d:53:57:1c:91:
80:8d:22:a7:b4:d5:d0:c1:39:72:26:fb:e7:05:1b:
cf:88:69:98:61:8a:d1:72:f4:89:3d:ad:25:f3:2e:
38:2e:60:38:ed:50:6f:1a:91:45:54:f5:c2:5c:98:
42:e3:56:ed:77:43:28:a3:d5:3e:3c:5b:9d:91:d5:
b7:5c:e6:18:46:55:f0:e0:b1:87:9b:04:56:ea:5d:
ad:1b:36:cd:27:e7:fa:dd:9a:e9:7a:2a:58:df:3d:
f8:26:7d:0f:1a:01:7c:38:4f:56:53:66:32:30:bc:
3d:64:7f:d2:4b:70:37:d0:80:5b:0d:ff:0f:19:ef:
2b:cc:83:e7:13:bd:6d:46:0c:d5:e6:fe:15:eb:bb:
ce:8e:b6:28:5c:f3:83:b0:3b:16:66:7e:00:bc:62:
31:42:c3:b4:b9:04:ed:d6:5f:fc:42:c1:9c:47:93:
27:d7:bb:22:a0:52:30:b9:52:6d:63:36:c3:9e:65:
bf:e3:ae:73:a3:5a:e7:b5:e2:aa:77:21:ea:2a:1a:
44:94:85:ee:6c:bc:bb:ce:d4:04:4d:03:42:e2:d6:
f1:c9:aa:f1:c6:ce:16:93:ba:f3:54:61:db:86:21:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:97:7D:57:89:58:FB:D3:5E:E0:32:88:EF:9D:72:D8:36:65:0E:CC
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/KZd9V4lY-9Ne4DKI751y2DZlDsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
Signature Algorithm: sha256WithRSAEncryption
64:e8:20:cf:c2:0b:59:67:c4:6c:b4:71:44:9f:77:6f:2f:cd:
f0:8e:65:3c:95:3b:21:b7:6d:32:60:82:68:aa:df:e8:5a:64:
3c:ee:57:65:ac:f3:9e:b8:7e:06:45:d1:13:81:12:3d:7c:2c:
5d:45:b3:b9:e8:9f:bb:2e:9c:db:ec:3e:9a:9c:b7:16:9d:51:
13:3e:49:ca:ae:07:57:b3:e7:d7:eb:c8:68:f6:1e:21:eb:46:
55:b7:75:fc:ac:ce:eb:53:d2:be:2b:93:0e:4b:f9:de:0d:79:
f0:ab:9f:db:3d:04:78:2d:50:1f:b5:64:76:4c:75:53:ae:54:
0e:c8:42:71:89:67:0f:8e:08:0c:19:df:6f:1d:f7:d7:80:a4:
35:48:7d:f2:e4:40:0a:42:8d:55:7a:b7:1e:c0:3f:09:19:45:
5f:ce:1a:00:c2:c7:05:f8:ea:ee:6b:89:20:e8:18:19:a0:1e:
5f:49:92:4d:8d:a8:e1:2b:d1:f6:26:55:e5:11:72:f7:69:99:
5f:9a:14:33:e3:cd:52:69:96:c5:94:d3:6f:b5:1c:7c:53:3d:
a7:7b:15:bb:7e:06:28:df:5e:d2:a2:98:49:26:7a:41:75:8b:
78:aa:fc:5d:8e:e4:24:11:58:3c:50:2d:54:09:45:51:c4:c5:
fd:6a:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org