Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/jGPNSZ2S2o84Mu6elff2WRRTigk.roa
File: jGPNSZ2S2o84Mu6elff2WRRTigk.roa (raw, json)
Hash identifier: Pp3WHeAHNkBc2LzDmJWVx/BizlXRh6JUsSSGEcFPA78=
Subject key identifier: 8C:63:CD:49:9D:92:DA:8F:38:32:EE:9E:95:F7:F6:59:14:53:8A:09
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 0A52
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/jGPNSZ2S2o84Mu6elff2WRRTigk.roa
Signing time: Thu 15 Sep 2022 02:38:37 +0000
ROA not before: Thu 15 Sep 2022 02:38:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 396982
IP address blocks: 103.123.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2642 (0xa52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Sep 15 02:38:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C63CD499D92DA8F3832EE9E95F7F65914538A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:46:14:cd:02:90:1e:b9:9e:53:b5:c0:c9:
7f:48:4c:d0:19:fc:2e:43:4a:6a:49:c7:44:09:1c:
0f:3b:26:62:dc:eb:1e:75:81:af:1a:7f:b9:ce:b8:
e6:c8:7f:19:19:ac:b9:3b:f3:98:22:e3:ca:00:7f:
c5:04:cf:f1:95:2b:54:eb:85:1f:e9:f2:5b:63:34:
cd:26:9e:a3:8d:eb:62:0b:e3:0a:59:2b:79:c5:81:
11:ef:68:64:ec:ef:fb:4c:70:45:f1:b7:77:da:9e:
46:69:9f:59:cf:d1:e3:b8:1a:13:6e:74:43:23:5b:
78:0a:90:53:6e:c6:90:0c:e7:62:5f:e9:ef:6f:5c:
06:ce:92:73:87:2e:b2:0a:56:a9:e9:06:cb:be:47:
11:d3:6e:02:0c:5c:aa:2d:c2:9c:5d:7e:86:ef:bb:
b6:ed:49:ab:12:eb:a1:f6:81:78:70:22:02:ab:13:
65:01:98:42:95:10:03:fa:51:1e:4e:6d:86:99:fb:
f9:55:10:93:47:48:f9:15:28:2a:33:b4:e6:cb:48:
d1:ac:18:2c:0c:9c:e7:bc:82:3a:bb:ce:e0:32:86:
61:01:83:53:f9:cc:04:d4:3a:dd:52:6e:78:91:1e:
17:cb:3c:3c:73:d7:d2:d6:bc:7e:50:ea:d4:3b:0b:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:CD:49:9D:92:DA:8F:38:32:EE:9E:95:F7:F6:59:14:53:8A:09
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/jGPNSZ2S2o84Mu6elff2WRRTigk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c3:57:1d:92:4d:03:eb:b5:05:74:0b:24:7a:24:ff:56:b2:
24:8a:8d:90:19:ad:85:4e:dc:ba:e4:02:2c:0c:ef:f7:5f:2c:
02:3a:2c:22:3a:10:f3:45:af:43:8f:d9:f1:38:02:92:de:ed:
d2:fc:15:98:ae:4f:00:a5:22:85:7d:c0:b7:52:22:07:5f:d5:
08:4e:86:7b:2f:8d:1a:4d:d4:40:03:dd:38:6e:c9:04:7e:3e:
1f:34:33:ee:6c:fc:64:74:79:df:cc:b0:24:5d:dc:de:9d:69:
22:0c:b5:a8:d4:9e:90:e9:6e:f4:c5:6a:22:cc:73:f5:3a:08:
f0:9a:7a:13:45:cb:c6:5e:28:c1:47:b6:84:7d:ea:b4:aa:cd:
14:71:48:ed:71:8b:10:94:50:ed:71:16:9b:7a:9b:c7:21:8b:
13:a2:85:36:78:d0:28:a6:4b:7e:cb:d7:e5:67:6d:6c:e8:76:
03:00:4c:96:a9:0f:3c:e9:0c:08:e1:46:d3:6d:ee:5d:50:e7:
2d:6d:15:01:9d:eb:a8:01:cb:a5:2d:40:f4:a6:46:62:b6:cd:
4f:bc:61:5d:29:89:4c:c2:69:9c:03:68:14:b6:be:68:27:ae:
4b:3b:e0:e6:67:7f:ff:ac:af:83:a7:e8:d0:ee:f6:94:08:bb:
23:a3:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org