Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-eZYvp3iImqd1f9sunCr7arYPQI.roa
File: -eZYvp3iImqd1f9sunCr7arYPQI.roa (raw, json)
Hash identifier: S3qhIizZlvx4roDLe/Ehy8y8sTmTe5GGkEgVCPSahOo=
Subject key identifier: F9:E6:58:BE:9D:E2:22:6A:9D:D5:FF:6C:BA:70:AB:ED:AA:D8:3D:02
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 08F6
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-eZYvp3iImqd1f9sunCr7arYPQI.roa
Signing time: Sun 07 Feb 2021 12:40:41 +0000
ROA not before: Sun 07 Feb 2021 12:40:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 103.234.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 7 12:40:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F9E658BE9DE2226A9DD5FF6CBA70ABEDAAD83D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:54:0a:2e:12:75:50:9f:f3:f9:89:74:c2:
83:3b:a7:4f:63:4a:c2:d4:86:37:1f:09:d6:02:c7:
5d:ba:24:fe:3c:fd:42:92:7c:95:25:e0:a6:ee:65:
22:9f:0c:1d:de:c4:8d:c2:0b:3b:ef:f3:02:1a:a9:
53:e6:75:22:70:e4:52:10:23:9d:4c:a7:1d:cb:06:
16:f4:b9:3b:0d:93:83:f8:18:f1:05:8a:24:fc:6c:
f5:9d:aa:31:af:80:7c:e9:15:1f:34:0b:61:7c:e8:
cc:8c:b3:07:51:9e:36:2c:b2:b6:5f:86:e1:cd:6d:
90:0b:1f:a8:8e:97:f2:4a:28:c7:0a:8c:4d:ad:56:
e0:92:c1:d8:dd:6a:c0:40:1f:f6:0b:80:b6:86:7d:
8f:83:43:ea:e3:cd:58:2e:fb:21:19:16:ba:15:61:
73:0f:f6:ec:96:59:c2:f5:e9:27:84:aa:cc:b6:e9:
7b:52:12:7c:f1:eb:30:2f:83:ee:67:f4:9f:19:aa:
d9:0b:b7:d4:b3:42:35:c6:b5:1f:5e:ac:ac:f0:7e:
d9:41:07:07:c7:24:da:70:58:47:4e:6e:d1:2e:1f:
cf:3f:bf:bd:ca:64:2c:d6:54:15:34:7a:63:7e:fe:
45:4a:a3:8a:2c:d7:5e:f8:f5:43:f0:97:b1:5b:ac:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E6:58:BE:9D:E2:22:6A:9D:D5:FF:6C:BA:70:AB:ED:AA:D8:3D:02
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-eZYvp3iImqd1f9sunCr7arYPQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.76.0/22
Signature Algorithm: sha256WithRSAEncryption
20:96:a6:e8:83:e0:35:5d:ac:fb:e8:bf:6b:b2:60:c9:cb:8b:
c3:ae:c0:c5:bb:c3:fa:a0:43:6e:47:a0:6a:73:8f:8c:0d:2a:
a7:0c:0f:04:72:cf:a0:2c:91:a1:7f:b8:0d:93:fa:ad:19:69:
5a:5f:6a:5d:d6:99:13:39:7b:7f:fe:fd:9c:eb:97:46:1a:8a:
62:b0:d5:70:db:b3:62:3d:cd:99:53:55:89:0d:77:93:43:eb:
b7:bc:5a:83:43:6d:d6:9e:1e:ee:29:86:97:e2:03:19:e2:fc:
a1:e4:72:7f:f3:f8:c9:10:01:90:80:56:c6:a6:f6:39:c6:ce:
cb:bb:59:3a:c2:0b:20:1f:13:89:4a:dd:aa:38:5e:5d:f5:a9:
49:de:b5:ad:23:e0:a9:de:4f:2d:91:a3:8d:59:af:ec:15:1e:
3d:cc:3c:86:63:35:8f:a4:09:7c:9f:f1:9f:4c:c4:59:56:c3:
92:ac:ba:a3:88:89:d4:29:c5:13:24:6f:76:06:4f:c2:18:9b:
45:fc:71:a2:56:00:c8:30:6c:46:8d:f9:37:a3:1d:e8:f7:30:
f3:03:04:09:ba:27:b8:6a:f6:a0:bd:06:c6:5f:6b:29:17:7a:
cf:8a:4c:91:30:a5:a0:45:33:f7:ad:4e:70:20:4c:ea:eb:ad:
b2:52:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org