Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa
File: FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa (raw, json)
Hash identifier: pyNuUT/koEzPLII0Qe8MB1rJCxi/DBV30/cKyuftQYs=
Subject key identifier: 16:51:07:1F:F7:24:3F:AC:56:76:94:6C:0B:3F:9B:0F:14:1A:38:BA
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 06D4
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa
Signing time: Wed 29 Sep 2021 02:37:57 +0000
ROA not before: Wed 29 Sep 2021 02:37:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131671
IP address blocks: 103.146.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Sep 29 02:37:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1651071FF7243FAC5676946C0B3F9B0F141A38BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:59:13:19:90:ac:a2:ea:22:6e:0f:94:4e:
59:9a:30:f9:1c:2e:f5:56:a5:81:c6:0c:bf:f0:67:
ba:76:88:fd:db:f3:e2:1d:e7:45:b1:d2:0c:98:e0:
77:ab:82:ff:cc:5a:e4:0a:be:b0:a0:07:b7:a1:c0:
c5:0f:46:e2:06:51:31:1a:8e:e9:b7:99:fe:49:ad:
41:78:99:ae:84:59:e0:c0:13:f8:4d:b5:69:d6:b8:
1b:1b:d8:d3:04:fb:d3:b9:3c:83:e3:2d:b3:87:ea:
8f:08:6c:c9:40:49:9f:f8:7c:ef:1c:43:f2:f7:a3:
bb:99:48:5d:00:fe:07:88:36:37:b2:ca:b7:80:ef:
48:72:6a:d6:f1:1f:6d:4c:c8:e3:e6:ee:a1:a4:37:
da:2e:bd:14:ab:42:d6:ad:2d:64:ed:5b:c3:6b:a1:
09:97:6e:e8:6b:ac:03:5d:ae:fd:a8:1a:33:7d:36:
3a:43:25:c6:02:20:ab:1d:25:b1:88:00:da:a1:f3:
44:01:84:02:48:54:e7:40:b4:17:12:5a:a5:3d:44:
b4:98:47:38:6a:4d:1c:da:c0:2a:f4:a9:62:f2:a2:
1f:0a:b7:4b:83:04:c1:d3:dc:49:5d:d9:ae:b9:53:
26:f9:a6:ee:8b:d2:6f:67:a5:c8:22:a7:56:18:e8:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:07:1F:F7:24:3F:AC:56:76:94:6C:0B:3F:9B:0F:14:1A:38:BA
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:5e:6b:9b:73:fe:f9:80:3f:9c:a1:ad:53:5b:84:01:86:d1:
47:13:df:1a:2b:1e:b0:e1:35:53:31:1d:f0:5d:c1:9a:85:fe:
bc:80:73:f6:a0:cd:87:88:bc:7e:8d:70:33:85:9f:de:f7:17:
75:ba:04:21:ed:1f:31:5c:8a:85:22:ae:83:d8:6f:38:f0:0f:
07:cc:de:a8:2d:0a:54:61:4f:c1:7e:42:20:2c:24:72:a1:2c:
a4:a5:15:3e:56:59:cc:1a:77:f4:7f:9b:37:48:60:9f:bb:82:
b2:62:ab:7a:a7:0f:ce:d3:ae:25:50:f3:06:1a:73:f2:be:38:
73:08:53:ad:65:0c:8a:3a:65:cb:77:04:a0:e5:0c:80:16:2a:
c6:d2:b6:d4:da:69:9d:99:e2:a8:13:ca:7d:14:77:13:2e:c8:
76:f4:52:c6:96:04:48:81:22:5b:c6:d3:39:55:5f:ec:1c:98:
3c:00:66:03:56:ba:18:d4:d6:c5:bf:bb:b4:61:52:10:ca:48:
09:ba:43:24:21:d7:d6:8b:9a:65:0e:7a:a5:a8:75:f6:c1:af:
fa:d6:35:12:fb:7b:4f:a5:84:b1:8c:cf:b8:18:39:34:45:3a:
f6:ba:55:89:e0:6e:74:0a:ff:c8:13:7a:6b:4c:8b:7a:0b:46:
fe:48:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org