Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xcSb19c21o57bYMhnr1jNJV-dk0.roa
File: xcSb19c21o57bYMhnr1jNJV-dk0.roa (raw, json)
Hash identifier: z4n9YpFFmP653Uuvr4x7Uay9FbKRLcUqcmGVUE9FcSg=
Subject key identifier: C5:C4:9B:D7:D7:36:D6:8E:7B:6D:83:21:9E:BD:63:34:95:7E:76:4D
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 0747
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xcSb19c21o57bYMhnr1jNJV-dk0.roa
Signing time: Mon 14 Mar 2022 09:01:44 +0000
ROA not before: Mon 14 Mar 2022 09:01:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Mar 14 09:01:44 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C5C49BD7D736D68E7B6D83219EBD6334957E764D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:ba:81:3d:f4:c4:96:68:66:47:aa:83:e6:
a3:e4:22:97:5a:de:1b:73:fd:a8:a8:c2:60:30:d5:
92:cc:31:de:e3:f8:6e:b6:eb:42:32:6b:58:9f:7f:
e5:bf:be:78:cb:c7:6e:29:f1:36:f9:6d:29:ba:64:
cb:40:c4:a7:ae:c7:96:6f:f8:dd:bf:7e:4c:8c:f6:
a0:4d:6a:94:17:79:84:2c:1a:10:7b:6c:1b:f7:01:
54:4f:35:d8:a0:86:2e:ae:7f:55:93:5e:71:56:66:
29:63:45:30:ed:43:00:34:7f:79:1b:20:0b:21:65:
ed:00:08:b4:97:ae:9e:9f:1b:dd:96:d2:b9:41:a9:
cf:37:fc:5b:c9:55:9c:84:54:29:8f:6d:37:b0:9f:
1e:2e:fe:c9:19:ed:6c:c0:c2:5e:1e:af:9d:03:ab:
fc:f7:3b:73:f3:11:3c:bc:e8:e0:3c:19:c4:19:32:
f5:cb:59:97:93:be:a9:db:1a:16:10:84:e7:15:1a:
f0:e9:e3:9b:92:74:9d:22:59:bf:03:e7:a6:21:b2:
e3:2a:a3:82:f8:ac:0e:35:e4:ed:65:7e:e9:9a:82:
8e:00:89:0e:29:9d:b3:ce:35:6c:d2:69:63:77:64:
50:9d:d0:e6:88:25:ae:d9:6c:e7:da:e9:51:4e:a4:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:9B:D7:D7:36:D6:8E:7B:6D:83:21:9E:BD:63:34:95:7E:76:4D
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xcSb19c21o57bYMhnr1jNJV-dk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5a:74:10:20:65:2b:74:5c:9d:7e:1b:51:aa:6f:04:08:43:
d8:e4:57:55:84:f2:0f:31:87:44:73:37:6c:1c:90:df:11:2e:
62:dc:09:b0:de:b4:83:00:51:8b:c2:66:bd:19:0a:1b:5c:9c:
6f:6d:cd:84:e8:8d:37:f9:19:93:2f:79:2a:2b:24:2a:bb:0c:
8d:e5:9f:84:ae:56:29:8c:fd:0a:30:44:4a:7c:8c:d1:aa:cc:
dd:29:56:2f:0d:cf:f0:00:e5:9e:bc:43:8c:6f:27:95:af:dd:
f9:a8:fc:ba:82:da:bb:68:f4:e9:ac:81:f2:c9:89:34:37:e2:
4e:1a:98:ba:07:a4:6d:ea:5e:dd:45:33:d3:5a:bc:44:a5:cb:
c8:6a:76:28:49:91:3b:e1:97:c8:53:ac:e9:c5:64:49:f1:20:
b8:68:6d:64:67:86:f5:c9:97:ca:89:c5:75:76:d2:22:61:cc:
83:f1:ce:67:f8:8f:3e:b1:21:85:02:de:d8:33:08:b1:ef:1c:
80:bf:82:81:da:c8:12:79:3e:5b:40:21:32:ea:36:80:84:d8:
44:2e:51:bd:6d:36:dd:c0:64:3e:70:ee:82:93:5c:54:9f:26:
a1:fc:bb:39:35:03:4d:0b:c7:38:4d:43:f0:b0:b1:36:64:c8:
48:d9:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org