Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/hoBe0uJD9pv_saDEzh7EPnFFwQU.roa
File: hoBe0uJD9pv_saDEzh7EPnFFwQU.roa (raw, json)
Hash identifier: bGQSCLQrT2B6SyDNY9MSxVbA9a4LQf0JJ3q5dvxYXb0=
Subject key identifier: 86:80:5E:D2:E2:43:F6:9B:FF:B1:A0:C4:CE:1E:C4:3E:71:45:C1:05
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 08BC
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/hoBe0uJD9pv_saDEzh7EPnFFwQU.roa
Signing time: Sun 07 Feb 2021 11:54:22 +0000
ROA not before: Sun 07 Feb 2021 11:54:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131588
IP address blocks: 103.229.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Feb 7 11:54:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=86805ED2E243F69BFFB1A0C4CE1EC43E7145C105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:46:0c:01:c7:ad:b1:ea:cd:6f:1c:18:31:
6b:64:bf:80:fb:2e:97:3a:3f:05:6f:4b:cf:e3:78:
dd:b5:8d:2d:33:99:3c:3a:ba:47:58:69:11:3a:98:
83:00:c2:c4:ec:7f:4b:8d:fb:b8:6c:b1:d5:aa:ce:
f4:99:a2:4e:23:e4:1c:37:76:ad:de:f0:69:92:f8:
e7:66:7f:c1:b3:a2:69:37:a9:d7:4c:51:9b:2b:ad:
75:d3:5f:04:35:27:01:08:33:f8:16:c9:38:bf:df:
be:3c:b7:59:b0:a7:88:64:d1:48:9e:e2:20:2d:cc:
a7:82:cb:11:e3:32:20:70:ad:97:c6:93:01:c8:c2:
52:94:73:fe:60:f7:cd:c5:d8:a8:3a:38:39:47:03:
09:d6:23:b3:62:01:84:06:e9:fc:68:5b:97:77:c4:
a0:ea:50:ee:4c:d4:1d:b6:d5:62:75:a6:90:eb:cd:
f6:07:43:ef:bb:69:5c:2f:51:51:b7:7d:93:ae:70:
83:3c:61:53:1d:1d:7a:6a:d4:15:e9:84:f8:f9:27:
d5:f9:cf:d4:e8:f7:12:88:bb:da:5a:d5:ee:47:71:
8b:49:26:9b:ff:8f:a0:05:06:b0:9c:70:6a:ec:45:
82:3a:94:a1:1e:c2:18:94:96:91:2a:ab:08:25:ec:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:5E:D2:E2:43:F6:9B:FF:B1:A0:C4:CE:1E:C4:3E:71:45:C1:05
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/hoBe0uJD9pv_saDEzh7EPnFFwQU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:38:4d:25:88:df:52:fd:d8:14:77:c7:9f:df:b4:1e:15:5d:
50:c6:5f:55:cc:6e:4c:18:2b:3d:c8:dd:6a:3c:77:a8:f6:e6:
59:b0:bf:b4:2b:35:17:54:e7:c5:1f:4e:db:05:28:64:92:65:
ad:e8:54:94:d8:18:ac:99:df:1e:42:43:99:59:68:47:e4:47:
21:8a:0c:78:91:ad:f4:71:2e:e5:8c:20:41:76:38:f8:79:cf:
9c:ef:17:eb:67:52:86:18:fb:37:fd:b8:d2:a8:b7:64:1e:73:
88:af:a9:cc:e9:ab:57:62:8b:66:b6:61:ff:7d:62:54:b4:c0:
52:e8:ae:ac:7b:57:9e:07:26:e5:97:a6:1c:2f:79:0c:ce:6e:
0c:af:f7:df:79:83:62:4e:00:f7:fc:ce:9c:cf:3c:9a:77:5a:
7c:67:e1:9a:d4:6e:d7:af:66:94:cf:84:02:e9:0f:ad:b9:6b:
b2:89:e7:b6:06:ed:d5:94:d7:0d:e6:e5:e7:34:dd:2c:85:8d:
f9:7a:83:c3:9b:1c:a6:95:7c:17:27:91:45:93:13:cf:29:2d:
9c:e1:44:f6:2f:1b:d7:9b:ef:1a:5e:0c:68:26:2a:34:ea:55:
12:97:ff:8c:31:fa:31:84:af:fb:80:2a:36:61:48:f8:ea:a1:
bf:d4:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org