Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/n1L5KjG3q-g2LAffCPR4V2T-9pA.roa
File: n1L5KjG3q-g2LAffCPR4V2T-9pA.roa (raw, json)
Hash identifier: FhYyeYY1c8FIo6jIVC8NfZ7nuxx5eYh5Z8o3b3VF0a0=
Subject key identifier: 9F:52:F9:2A:31:B7:AB:E8:36:2C:07:DF:08:F4:78:57:64:FE:F6:90
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 08BA
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/n1L5KjG3q-g2LAffCPR4V2T-9pA.roa
Signing time: Sun 07 Feb 2021 11:54:21 +0000
ROA not before: Sun 07 Feb 2021 11:54:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131588
IP address blocks: 103.229.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Feb 7 11:54:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9F52F92A31B7ABE8362C07DF08F4785764FEF690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:cc:c0:14:81:95:72:80:0a:41:70:e1:5f:
a4:66:38:ed:29:29:5f:08:7f:fd:dc:09:7b:f0:10:
c2:16:61:b4:38:57:45:b5:22:89:5c:26:28:49:c7:
5b:33:09:3d:b3:9c:2d:70:47:62:bb:f5:41:a7:a2:
bc:a1:08:62:85:fc:46:18:3a:d9:bc:c3:a1:f7:71:
43:25:4e:3e:d2:ac:ed:f1:79:df:95:83:39:ae:7d:
f4:7c:69:fd:f7:8f:df:0b:84:89:a8:24:f5:9a:7e:
8f:73:b8:28:b6:96:19:1f:24:74:2f:43:19:0a:39:
cf:db:ec:ed:44:a5:50:19:b6:9c:53:5d:3a:0a:ec:
38:ce:16:bd:bb:dd:c0:7a:6c:9b:49:38:90:b0:bb:
7b:02:2c:fa:cc:18:70:b0:0c:46:68:86:a9:13:55:
41:ab:0a:42:fb:e0:e8:86:6b:34:21:e1:17:66:18:
be:15:4d:51:1b:cd:eb:27:cb:5d:ea:b5:6a:6b:36:
f2:71:ed:ac:1f:10:3a:dd:23:4f:2a:56:0c:b7:26:
40:37:48:e3:dd:24:33:c0:db:93:45:a2:0b:07:69:
db:af:4a:ea:88:2d:0f:b7:55:9a:b6:18:38:f6:6b:
54:52:22:f0:d4:a9:bf:87:bf:98:91:1f:1f:fd:9b:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:F9:2A:31:B7:AB:E8:36:2C:07:DF:08:F4:78:57:64:FE:F6:90
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/n1L5KjG3q-g2LAffCPR4V2T-9pA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.134.0/24
Signature Algorithm: sha256WithRSAEncryption
82:eb:a4:69:91:a9:7f:9c:47:2f:da:2f:a2:42:dd:84:5d:81:
d0:2c:c3:f5:35:c0:01:f9:3b:d0:39:12:db:bb:c3:44:26:e6:
d8:42:3b:0e:32:52:96:12:08:f8:79:87:ad:39:9e:89:60:2c:
57:1f:c7:f7:fb:e7:b9:e1:31:7e:ed:90:17:e8:55:48:c9:e2:
13:85:0b:9f:b9:ee:b4:8d:cf:94:c4:f6:8b:56:ad:ee:9f:1b:
a7:c8:cb:fd:19:fe:ea:34:6e:f0:05:9d:fd:02:2d:f8:a8:70:
63:3e:71:05:da:d0:76:74:91:19:0d:4d:43:81:c9:97:84:3b:
39:2b:6f:af:16:89:c9:7a:3b:a0:1b:d7:d9:ab:29:03:42:ca:
2d:33:ba:f6:32:39:5a:57:28:6f:dd:d2:27:ee:c6:3f:ed:a7:
0c:34:bf:20:4a:5d:0a:f1:10:fa:47:e2:5a:16:ec:6d:bd:36:
c4:91:c9:51:14:18:9e:b0:6b:21:5a:ea:f6:b9:31:25:15:78:
07:49:8d:16:1b:1a:b7:9f:37:19:7a:13:67:9f:fe:c9:a3:23:
c2:b5:b0:85:85:20:12:55:ad:60:62:ff:6e:8d:44:fd:a4:97:
2e:6f:1a:27:89:4a:ea:1e:1c:33:ef:df:cd:03:60:a4:5e:c6:
d8:07:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org