Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/GCbLxx0FfReK1iwy2ySrekzIC6I.roa
File: GCbLxx0FfReK1iwy2ySrekzIC6I.roa (raw, json)
Hash identifier: EH76KtKnlptvY2pUzrL9B0sBYK8vpcHaVzP9/IREkdY=
Subject key identifier: 18:26:CB:C7:1D:05:7D:17:8A:D6:2C:32:DB:24:AB:7A:4C:C8:0B:A2
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0776
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/GCbLxx0FfReK1iwy2ySrekzIC6I.roa
Signing time: Tue 29 Sep 2020 10:03:34 +0000
ROA not before: Tue 29 Sep 2020 10:03:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131588
IP address blocks: 103.229.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 29 10:03:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1826CBC71D057D178AD62C32DB24AB7A4CC80BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:0b:cb:36:1f:cd:d2:dd:04:ff:37:b1:2a:
1c:1d:2c:b0:a5:99:b9:79:e6:c2:60:77:d2:92:23:
31:7a:8c:13:5e:66:37:f7:66:10:24:07:3f:09:bf:
ef:52:70:50:b0:98:b3:31:50:4c:17:09:d0:1f:be:
21:9b:7e:6a:2f:f6:79:95:7a:05:59:fd:14:9f:5e:
94:a5:fd:17:59:d0:8b:4f:9f:2a:79:1f:e6:d9:0f:
6a:f0:26:2f:6d:bc:58:a1:27:81:4a:df:29:82:bb:
06:0d:1b:c4:f2:fd:da:7a:6d:40:86:de:1c:97:b4:
7c:cc:47:3d:bd:d0:e5:c7:e8:6b:28:6f:e6:be:6f:
fc:24:c5:eb:80:49:ec:89:13:59:e9:a8:04:80:3a:
96:ef:be:85:f2:b9:1b:60:2f:4d:eb:30:87:08:c4:
dc:55:aa:65:bb:c8:b0:5d:be:2a:ea:3e:cd:0a:1c:
b9:89:27:90:38:53:8b:83:cc:c2:fc:bf:63:cb:16:
48:a6:be:75:33:7e:eb:ca:5c:62:c3:60:bb:cd:c2:
bd:42:1e:38:c8:c8:0c:7d:3d:26:13:8d:86:ae:ef:
70:7f:f4:06:b7:2d:83:36:aa:69:55:37:39:97:62:
d1:e9:4c:eb:7c:bc:2f:f0:35:aa:7a:6e:2f:43:e0:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:CB:C7:1D:05:7D:17:8A:D6:2C:32:DB:24:AB:7A:4C:C8:0B:A2
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/GCbLxx0FfReK1iwy2ySrekzIC6I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8c:36:fc:fd:3f:e7:f4:b1:77:20:8b:8f:d9:88:e6:da:5c:
e7:8e:7c:ac:67:fd:c1:0b:9e:b5:e1:3c:3a:13:1d:02:e5:cc:
7e:06:92:5a:d7:4f:68:f3:61:54:43:14:a0:40:10:38:77:f6:
0b:71:fb:03:a8:03:f7:05:e9:9d:eb:08:9b:68:ba:1d:ba:0b:
c1:72:17:19:80:5a:95:97:32:ae:ba:35:26:b6:47:4b:ee:f0:
5a:6c:df:f4:59:40:68:e4:ac:f8:fe:ed:f3:2f:86:40:b9:bc:
be:a1:4a:dc:bf:31:ec:7b:29:cc:da:09:3c:63:4c:36:7c:a8:
94:e8:28:31:44:d1:cb:65:6b:94:e0:a2:50:82:4c:50:5e:93:
93:61:be:3a:b7:74:db:ba:aa:7b:5e:1a:78:bf:f8:a5:45:4c:
74:ff:fc:1c:5c:50:98:05:59:eb:3c:f2:1b:34:2e:f4:b4:0f:
64:c5:8d:69:48:a7:1c:2a:7b:49:f0:a1:fc:71:25:3e:e4:d3:
7a:30:f5:57:0e:57:5b:a1:92:f0:d6:8c:93:ca:10:e9:99:02:
f8:9a:ac:e2:3c:22:9c:74:53:e6:7b:17:64:f5:1f:52:8f:b7:
7f:6c:24:47:41:6d:3d:bd:a1:9d:4d:b3:43:a1:15:ff:b5:24:
bf:a7:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org