Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/1wJb1D5V3PA73PCP-sUhWsBrlEs.roa
File: 1wJb1D5V3PA73PCP-sUhWsBrlEs.roa (raw, json)
Hash identifier: htQSAeQdR8cyhLv0QojLc5LUwzsOHAwzNXWgOyYZfCo=
Subject key identifier: D7:02:5B:D4:3E:55:DC:F0:3B:DC:F0:8F:FA:C5:21:5A:C0:6B:94:4B
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 095C
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/1wJb1D5V3PA73PCP-sUhWsBrlEs.roa
Signing time: Wed 29 Sep 2021 02:38:29 +0000
ROA not before: Wed 29 Sep 2021 02:38:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131588
IP address blocks: 103.229.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396 (0x95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 29 02:38:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D7025BD43E55DCF03BDCF08FFAC5215AC06B944B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:e0:ba:6b:06:25:bd:cb:e1:b3:c4:1a:e0:
f3:9f:46:98:fd:1d:e0:49:cc:9b:0c:f6:18:dc:99:
6d:c2:38:42:a0:9a:a6:49:df:bb:17:31:90:23:08:
9a:7f:6a:5a:df:dc:d6:e8:85:17:7a:80:b8:f3:99:
43:75:4b:d6:5a:b1:1f:26:af:a8:71:58:8f:7f:7f:
90:6e:62:72:60:d0:d8:be:2d:8b:69:e7:4b:e9:8f:
2c:75:09:8f:e1:97:09:78:0f:31:6c:06:2b:38:59:
6f:32:6a:bf:8b:e7:74:61:66:95:40:ff:39:76:f5:
c5:76:ca:36:27:e6:e7:b9:0b:68:62:29:6d:aa:d0:
b7:cf:7f:9c:38:d4:d7:39:80:31:e1:db:97:64:2c:
1a:bd:0f:91:7c:9f:e4:40:01:30:37:53:35:9b:4e:
11:d3:d6:8a:f1:7b:23:ea:63:d0:64:e0:72:d1:87:
48:85:58:80:4c:9b:57:50:78:b8:24:8a:53:0b:32:
e6:be:d7:95:28:64:f2:6c:ee:8a:78:47:9d:99:ad:
03:4e:71:11:e5:0b:1a:b7:89:77:f0:f8:0b:4a:1b:
ad:ce:c0:b7:5f:57:aa:2c:cd:b8:a5:c9:3c:52:4c:
d0:90:ed:f7:8b:87:11:d8:8f:f6:69:be:db:04:37:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:5B:D4:3E:55:DC:F0:3B:DC:F0:8F:FA:C5:21:5A:C0:6B:94:4B
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/1wJb1D5V3PA73PCP-sUhWsBrlEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.132.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9a:03:19:46:a3:64:36:39:e4:14:5a:ec:5e:c7:21:5e:18:
cb:85:5d:dd:97:23:8d:8e:01:87:85:b1:93:7e:27:6a:37:f4:
92:d5:5a:20:b5:f8:cf:0d:c5:cc:51:60:93:70:e0:3a:2b:15:
7c:27:2c:98:31:eb:58:65:48:f2:a7:ca:95:bc:9c:8c:b5:85:
52:24:ab:7f:32:49:35:f5:7b:89:8d:30:6d:56:66:73:df:39:
19:7a:26:62:79:6d:31:b2:a8:19:cc:3d:88:5e:78:57:75:92:
d0:32:eb:c0:fd:75:3f:60:fd:11:d4:eb:2b:ce:2e:2b:3d:8a:
6b:d1:e9:13:25:e0:f9:f4:54:93:ca:7a:29:89:67:e7:9d:ff:
30:49:7f:9a:89:0a:7a:66:9a:44:21:2b:09:24:86:51:f5:74:
35:cb:c7:0e:2f:a3:68:da:ec:44:0b:ee:40:99:b4:3d:ea:6f:
db:0d:e5:84:58:72:27:59:d8:65:f8:af:17:7a:19:b7:5e:f4:
86:f4:00:f8:38:42:5d:fe:2f:a8:28:85:e8:bb:a2:49:ad:50:
aa:fe:99:a6:7a:94:e0:45:05:3c:51:76:1c:d3:39:bb:8c:7e:
c6:6a:9d:21:eb:0e:c2:b0:41:45:31:f0:ff:ff:81:70:94:9d:
53:e7:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org