Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/8qCV5bz3AaajNFISzBz79QGLKac.roa
File: 8qCV5bz3AaajNFISzBz79QGLKac.roa (raw, json)
Hash identifier: UEw/oHAy92D8wEwte4jQmLLZ8XFwC5XmJszPmLHw7rM=
Subject key identifier: F2:A0:95:E5:BC:F7:01:A6:A3:34:52:12:CC:1C:FB:F5:01:8B:29:A7
Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial: 0AD2
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/8qCV5bz3AaajNFISzBz79QGLKac.roa
Signing time: Sun 07 Feb 2021 12:40:53 +0000
ROA not before: Sun 07 Feb 2021 12:40:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 103.137.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Validity
Not Before: Feb 7 12:40:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F2A095E5BCF701A6A3345212CC1CFBF5018B29A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:72:a8:f7:7f:3e:0c:28:87:a8:b8:2c:34:
d8:fd:4a:f5:1c:78:93:67:7b:a4:72:25:9f:a6:8d:
dd:a9:fd:16:3e:c0:1b:fd:78:50:9b:40:3a:76:2c:
59:22:5c:6f:cd:ad:e5:a5:0a:7c:1b:02:67:72:0a:
d8:85:99:93:b8:48:6f:6d:96:d2:dc:9d:44:2b:ec:
b2:a8:5d:1e:c5:f6:65:3b:a7:9e:ed:c9:16:ef:5a:
4b:44:a0:8e:33:7f:7a:ad:94:11:35:97:de:d5:1c:
b8:b3:13:68:d8:09:94:fb:6a:c9:4d:19:e0:59:f0:
46:74:08:7b:18:aa:aa:1e:9a:4a:65:ac:c0:6c:35:
b6:a0:d8:0d:6a:1e:b9:49:76:ce:b8:34:56:4e:5a:
83:8c:21:13:08:5a:f3:37:e0:6a:66:d7:58:28:14:
e7:6b:50:e9:fd:38:c5:d0:ad:00:84:bf:d0:2c:62:
5a:df:eb:22:d1:90:b6:6f:a1:69:12:a5:68:77:29:
1f:54:b2:a0:29:ed:08:10:1f:0c:19:ff:38:96:26:
d7:40:f6:cd:ef:63:fd:c1:81:c6:8f:e9:69:0b:5c:
92:9d:72:cf:18:dc:ca:9a:f0:00:ad:9e:30:ff:16:
a9:b5:a4:e9:c8:8c:12:9c:d3:37:d8:b1:48:be:39:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:95:E5:BC:F7:01:A6:A3:34:52:12:CC:1C:FB:F5:01:8B:29:A7
X509v3 Authority Key Identifier:
keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/8qCV5bz3AaajNFISzBz79QGLKac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:f8:53:e9:14:1b:87:86:98:b6:18:27:48:0b:02:43:52:93:
91:ef:29:6b:79:28:a7:05:77:fb:16:08:95:43:41:e4:1a:b0:
1a:43:21:fc:03:7c:59:29:98:53:85:cc:3d:59:69:ba:08:eb:
40:ee:87:ee:f5:5f:cc:34:4d:48:39:7e:b3:d2:ff:90:22:57:
77:c6:0f:31:2c:6e:07:26:b8:4c:67:56:c9:6a:41:6c:bc:cf:
8e:8f:98:b0:65:63:22:01:fa:f2:52:88:0f:af:55:4e:6c:a8:
aa:88:8d:fe:9a:61:4e:70:8b:93:0b:b6:ce:e2:04:b9:ef:e2:
8b:31:93:6e:c7:6a:41:b1:99:40:a3:22:ca:1e:c1:ac:19:63:
1a:8c:ea:c2:15:ad:47:a3:f4:39:1d:49:28:81:b5:14:b5:0f:
74:02:3c:c3:89:04:73:e3:93:8e:dc:83:4a:95:1a:07:32:4d:
cc:03:d8:bb:c4:b5:67:db:6f:81:d7:59:39:d4:a7:19:ac:ff:
81:ca:d0:d1:e9:d5:e5:06:27:24:f7:95:1f:ef:f1:5e:7a:86:
4c:01:ba:32:c3:e9:e6:64:4b:4b:0c:9d:d2:80:17:09:4e:7c:
fd:21:48:61:25:16:e5:53:1a:72:9a:84:d1:5c:5d:86:f2:55:
08:30:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org