Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/M3HywIhS96plcSR8P7OTzrO45cQ.roa
File: M3HywIhS96plcSR8P7OTzrO45cQ.roa (raw, json)
Hash identifier: TL9lnGyXtwTjOAQbYMJ3kMcHS4LbV7we8ZaFLkZ5oCE=
Subject key identifier: 33:71:F2:C0:88:52:F7:AA:65:71:24:7C:3F:B3:93:CE:B3:B8:E5:C4
Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial: 14
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/M3HywIhS96plcSR8P7OTzrO45cQ.roa
Signing time: Mon 23 Aug 2021 16:17:19 +0000
ROA not before: Mon 23 Aug 2021 16:17:19 +0000
ROA not after: Thu 21 Jul 2022 02:43:53 +0000
asID: 20473
IP address blocks: 103.169.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Validity
Not Before: Aug 23 16:17:19 2021 GMT
Not After : Jul 21 02:43:53 2022 GMT
Subject: CN=3371F2C08852F7AA6571247C3FB393CEB3B8E5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:1c:6d:32:20:71:a2:d3:2e:22:6a:67:09:
f6:dc:68:0b:05:b0:cc:0c:73:16:1e:29:f6:fd:0d:
8b:42:04:d1:24:d8:4a:7b:1f:15:ab:2d:c5:4c:02:
6f:77:75:07:1f:d3:b5:2f:94:66:06:b0:dd:a8:c3:
89:8c:96:b0:02:a7:c0:98:29:f2:c0:1d:28:f8:65:
0d:07:7a:86:53:b2:d3:3b:06:7f:d0:13:77:c5:b4:
90:60:58:d7:63:82:0c:74:bb:f8:37:c3:56:b0:92:
a2:37:f9:1d:fb:1f:2e:27:ad:b1:06:23:55:ed:1a:
f5:c3:4e:c7:66:ac:33:f2:bd:e9:0f:71:77:ab:c3:
e3:4b:37:90:8c:3b:29:94:c8:e5:1f:90:a1:67:87:
b9:fd:b3:29:bb:5f:a8:8f:5f:f6:16:48:ab:72:9f:
81:98:4f:ae:df:37:be:ea:27:6f:2d:a0:d8:cb:e9:
5b:34:1f:88:52:92:f5:80:28:bf:06:9a:06:21:f3:
4b:5e:1d:66:28:55:11:ba:b0:72:95:ec:16:23:5c:
c5:15:0c:dc:27:44:02:c6:72:7f:70:bf:32:56:38:
93:1d:bb:25:61:e0:d0:b8:fa:ed:a9:a7:6f:59:a6:
3c:d0:6c:12:6e:7f:0a:a1:52:5f:c7:f2:29:d3:e3:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:F2:C0:88:52:F7:AA:65:71:24:7C:3F:B3:93:CE:B3:B8:E5:C4
X509v3 Authority Key Identifier:
keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/M3HywIhS96plcSR8P7OTzrO45cQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:10:13:35:8d:a2:aa:17:96:c2:47:ae:a0:d1:90:8c:28:47:
c0:fa:9e:82:62:ae:8a:75:6f:b7:51:ac:07:29:d3:19:a7:29:
e4:87:51:b2:99:83:77:a2:d6:81:31:7b:1d:cd:0d:04:2d:f6:
c9:8c:c1:7e:bc:83:d6:45:29:0c:1b:2a:a6:ec:9b:d5:cb:2f:
0b:66:fd:34:34:65:d4:a1:6f:fc:e9:be:ea:be:63:87:b8:0d:
c0:13:9d:d6:74:b0:9f:27:5b:f7:27:58:e3:f0:97:0b:ab:eb:
91:00:aa:ea:db:c9:75:18:fe:27:ec:72:43:35:a8:e8:f2:e4:
d2:db:e8:aa:e4:59:7d:9d:7e:80:1a:0e:88:14:46:7a:21:9d:
b9:83:96:e2:b6:e0:02:85:91:42:13:3d:11:ff:3c:56:f7:7d:
2c:ca:7d:1c:c6:d0:22:af:e6:35:16:d5:63:1b:c6:48:b3:d9:
72:ba:2e:64:3f:2c:46:14:42:f6:3f:cc:c5:4f:ed:3f:98:9c:
dc:23:61:55:e2:e9:2b:17:ef:21:f3:8f:bc:32:79:bc:17:cd:
de:7d:ee:4d:26:f9:05:3c:74:f0:1d:da:17:bd:38:b8:16:c3:
3c:a6:f2:7d:b7:54:a6:38:bf:d2:fe:9d:d8:d7:97:1c:a1:81:
6d:ea:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org