Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/uymwoHlMPT0vaBtn_w0ZvCCAEhs.roa
File: uymwoHlMPT0vaBtn_w0ZvCCAEhs.roa (raw, json)
Hash identifier: uUwaXI3QULpn2vAVQu7gcnLwdtVNMpDQSbX4FX4/Gpc=
Subject key identifier: BB:29:B0:A0:79:4C:3D:3D:2F:68:1B:67:FF:0D:19:BC:20:80:12:1B
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0A47
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/uymwoHlMPT0vaBtn_w0ZvCCAEhs.roa
Signing time: Thu 15 Sep 2022 02:38:48 +0000
ROA not before: Thu 15 Sep 2022 02:38:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131588
IP address blocks: 103.229.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 15 02:38:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BB29B0A0794C3D3D2F681B67FF0D19BC2080121B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:ed:02:d1:e2:9c:82:8d:ea:7b:06:c0:49:
81:e2:6e:92:34:00:eb:58:63:ef:c9:d0:cf:3d:3a:
97:12:82:2c:01:9e:5f:dd:d6:3a:d2:9a:a4:a1:1f:
12:12:43:8c:55:02:75:bf:6f:81:18:f5:ff:5d:34:
c8:26:c3:88:0f:cc:23:99:72:c6:b9:61:8f:52:be:
dc:94:45:21:84:15:0c:c7:51:5c:63:05:e7:02:f4:
c7:71:3c:6f:e8:17:1f:12:33:35:54:49:49:a2:98:
82:cf:e1:bf:0b:2a:04:a7:b8:5d:b2:21:5b:4a:a1:
c2:57:13:60:2a:49:af:52:30:b5:fb:c3:ba:b4:d2:
56:38:46:a6:c9:a7:a1:47:2b:20:a7:c3:37:4e:9a:
e8:0f:67:dd:de:b9:47:ea:62:1d:c6:4f:4d:af:b3:
f2:10:7a:64:36:9a:b8:cb:98:51:76:d8:e4:28:06:
35:5c:31:74:4b:bf:e8:25:bc:df:24:ce:d8:b0:59:
fe:b2:50:cf:b9:69:9d:2f:31:8a:4d:1d:ad:b3:61:
ec:13:e6:3e:68:1d:de:d5:b7:ad:c8:32:9e:ec:72:
7d:e6:be:ba:d2:ba:2d:27:62:03:9a:af:8a:a4:11:
cd:32:b8:5d:3d:7b:7a:b4:0a:72:20:ee:a4:60:e5:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:B0:A0:79:4C:3D:3D:2F:68:1B:67:FF:0D:19:BC:20:80:12:1B
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/uymwoHlMPT0vaBtn_w0ZvCCAEhs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e8:75:6a:53:15:a4:55:4c:d0:1e:db:ce:02:22:4b:7b:4e:
ca:c2:3e:9e:74:2e:89:e4:bf:f3:be:a6:3e:e9:05:c9:4b:6c:
8a:4d:fd:2e:50:dc:a7:f0:da:e7:ee:51:17:3b:33:a7:35:18:
da:28:34:3b:e1:0d:7f:e0:d6:8c:96:79:bc:98:76:6b:df:e4:
1a:8c:3f:6a:98:18:04:12:1e:11:30:be:76:6f:39:fc:00:bb:
7c:e6:95:b8:e0:de:16:46:31:6c:16:2f:04:4e:7a:6e:9e:38:
5f:84:d6:d2:56:f1:86:ee:31:0e:8e:d4:20:83:cf:8f:a4:60:
9b:4a:1a:11:e6:87:39:da:f5:47:e2:e4:ca:42:84:6d:39:b9:
cc:e7:9c:a7:e3:96:57:c7:1e:a3:2b:d1:64:84:33:8f:50:f2:
af:2a:54:b6:5c:a2:0f:55:a7:b9:b3:2c:1d:51:68:40:ed:8e:
0a:7e:5d:49:3a:a4:d4:64:dc:b5:44:9a:08:8e:f7:56:15:15:
f6:66:22:2f:1a:e0:6a:d8:20:25:35:57:a8:80:0c:f4:8d:d1:
6a:85:94:f4:cb:e6:92:2e:bc:e7:6d:69:62:68:58:0b:4b:2a:
54:4d:86:97:e5:be:2a:5a:4a:fc:f6:a8:8c:0b:3a:8f:a8:2b:
6f:e0:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org