Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/vhJpzFoF_zzitOKT_sJR1dkEI8I.roa
File: vhJpzFoF_zzitOKT_sJR1dkEI8I.roa (raw, json)
Hash identifier: OPMEzPspKeDO5pvGPx9KrbAFqwQZZn9OZm4FEh1H3yQ=
Subject key identifier: BE:12:69:CC:5A:05:FF:3C:E2:B4:E2:93:FE:C2:51:D5:D9:04:23:C2
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 0630
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/vhJpzFoF_zzitOKT_sJR1dkEI8I.roa
Signing time: Sun 07 Feb 2021 12:48:03 +0000
ROA not before: Sun 07 Feb 2021 12:48:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Feb 7 12:48:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE1269CC5A05FF3CE2B4E293FEC251D5D90423C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:f4:6a:7b:f3:03:1a:dc:02:72:70:18:87:
85:bb:f0:6d:48:80:d7:70:c3:99:2b:48:c8:11:c5:
2a:84:d9:50:8d:df:e6:60:d9:de:b8:b8:b3:26:45:
fd:e0:bf:69:fa:b2:b4:91:5a:7c:92:36:a1:01:6d:
91:c9:d3:a3:fd:50:16:5c:dc:ef:51:02:c2:68:0b:
7b:4e:dd:e5:02:fa:b4:1f:44:96:a1:48:6b:ff:8c:
95:8f:06:f7:bf:66:b4:91:04:de:d9:cc:0b:70:c3:
dd:b7:42:34:48:08:6b:4a:94:02:f7:e7:c2:f2:25:
69:46:e4:a2:d6:06:b0:ac:b2:0b:55:9c:07:2f:86:
24:38:44:9a:51:0d:ca:f3:d8:4b:89:ab:f2:53:25:
79:c9:dd:be:ec:19:77:c1:3b:d9:16:58:ae:00:ac:
e2:04:1c:67:f5:6f:59:3d:3b:8e:00:ae:e5:97:65:
25:42:31:d8:a9:75:81:ef:2b:6a:74:88:48:43:62:
1c:a7:b1:05:15:ba:e7:74:57:9f:c1:b9:c6:ab:c6:
ce:96:ad:1a:ca:09:29:d5:47:ea:b9:1a:c3:0e:ff:
4d:5a:05:7a:3a:ae:a6:e4:29:ad:8b:2f:84:ea:c0:
f2:d8:64:db:e6:49:1e:81:d7:e8:9d:e0:43:cd:2a:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:69:CC:5A:05:FF:3C:E2:B4:E2:93:FE:C2:51:D5:D9:04:23:C2
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/vhJpzFoF_zzitOKT_sJR1dkEI8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:80:9a:46:b4:6b:d3:d7:eb:c2:0e:9d:5f:e3:94:88:3e:9a:
a3:cb:2f:ba:40:23:70:ac:69:ae:34:83:bc:a2:3f:f5:1d:12:
cd:82:67:99:6a:6c:32:16:ba:f2:e4:12:6c:74:8e:5b:78:cd:
4a:d0:88:27:17:36:76:72:ef:20:20:ba:44:f3:2b:db:ad:e2:
87:2a:68:7f:97:a2:67:ad:9a:f3:1c:10:6e:bd:44:57:8c:8c:
34:4a:b8:a6:8c:0c:6a:26:39:c8:85:d8:46:be:ce:c3:72:64:
59:58:73:53:cd:9d:c3:2a:4f:1d:cc:85:51:38:6c:2f:7e:f4:
a6:45:c1:e4:1e:90:84:32:e9:dd:f8:8c:e5:07:ad:05:44:f4:
a9:29:99:bd:8a:bf:7a:e4:b4:27:8d:38:5f:1b:0e:90:e9:a6:
ae:dc:88:0d:d1:4c:f5:a7:af:bd:2c:5a:d8:2c:e4:ca:c1:5c:
3d:3e:c8:69:39:29:2a:8c:c1:44:0f:e4:b0:f0:4b:48:c1:05:
75:95:2e:6b:d9:e7:07:f4:38:a8:d1:5e:d4:bd:4a:73:c0:00:
7c:69:32:69:23:48:ff:6c:a6:96:93:20:7b:a9:4e:3a:e2:6a:
77:90:7b:1f:c5:a4:83:ab:de:c2:7e:44:3b:1a:90:ab:a2:39:
7d:b3:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org