Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/GZ60tp0WH9Z_6mUn5MX-Gfb1Ef0.roa
File: GZ60tp0WH9Z_6mUn5MX-Gfb1Ef0.roa (raw, json)
Hash identifier: 76PNEPLLF9noKv4dOY3QFVDUhfrGKn+zAvMFNrK8EcY=
Subject key identifier: 19:9E:B4:B6:9D:16:1F:D6:7F:EA:65:27:E4:C5:FE:19:F6:F5:11:FD
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 08C5
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/GZ60tp0WH9Z_6mUn5MX-Gfb1Ef0.roa
Signing time: Sun 07 Feb 2021 12:58:28 +0000
ROA not before: Sun 07 Feb 2021 12:58:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 103.122.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Feb 7 12:58:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=199EB4B69D161FD67FEA6527E4C5FE19F6F511FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:75:1d:79:52:ba:62:82:e0:60:2d:01:f2:
d8:0e:ff:c4:ca:e8:a7:42:c9:f8:27:8b:63:62:55:
cc:b2:3b:d3:b3:b3:76:51:d1:a4:a5:1e:3a:f4:25:
bc:6b:46:19:5e:41:01:25:66:c1:a9:4c:35:08:05:
4a:c9:5a:e0:89:5d:b0:fb:b5:8f:3f:81:8e:ee:1a:
cf:13:b7:9e:d3:62:a9:e6:66:12:ec:08:4d:69:f7:
da:6d:41:81:c5:8a:2f:d0:ec:5c:7a:44:1f:5b:39:
8a:a0:30:72:40:5d:38:ca:3a:c3:10:77:b0:54:45:
a6:c7:fc:45:c1:56:56:bb:04:b2:cd:77:2f:5e:ea:
bd:62:a0:22:08:df:57:b7:dc:60:8f:5f:6d:24:58:
65:a4:35:79:0b:70:90:10:64:a3:e8:3d:ca:c2:53:
45:63:ca:6d:0a:cc:ad:c1:b8:ff:d6:0a:08:c4:a7:
7e:f3:1e:32:43:d1:d1:8d:bd:72:e7:6f:02:a5:a3:
81:57:fc:e7:40:df:43:ec:48:53:e4:37:dd:71:b2:
b4:ec:fa:97:1d:4c:ba:94:79:22:98:61:31:6b:4d:
e0:36:f9:ca:f5:41:79:c8:24:30:5b:28:b2:a2:c3:
47:a1:ae:91:01:35:d0:97:bf:a6:93:ff:7c:cb:7e:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:B4:B6:9D:16:1F:D6:7F:EA:65:27:E4:C5:FE:19:F6:F5:11:FD
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/GZ60tp0WH9Z_6mUn5MX-Gfb1Ef0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ae:2f:4f:36:57:30:79:71:6b:ae:65:c3:0a:4a:3a:4a:94:
91:13:39:4e:10:69:aa:f8:98:93:ee:74:5f:92:10:0b:6e:be:
95:9f:a9:57:b6:c5:75:92:0a:b3:4a:86:85:9b:5e:a6:35:65:
f0:a4:ae:5b:ee:9f:52:86:46:2b:b6:ee:df:fd:fc:b2:d1:0b:
ca:e6:17:70:7a:10:8a:f3:72:e7:72:65:22:98:b1:96:40:fd:
da:65:37:23:43:8e:0b:27:65:24:81:33:56:d9:d8:a5:61:6d:
77:b1:01:3b:e6:83:8f:5e:fb:d0:c1:79:05:86:7f:9d:12:8c:
3b:95:21:83:0f:d1:ed:e8:04:a9:93:2a:36:f5:47:4d:4e:c4:
5b:0a:80:bc:07:1c:34:a2:c8:a3:32:66:b0:93:48:2a:9b:f9:
55:cb:03:5d:58:a6:92:40:b3:84:b0:af:d2:de:31:d5:25:81:
15:a3:e8:61:22:c4:c4:e6:45:25:35:26:79:1c:7d:3e:90:cf:
5c:aa:76:cb:74:b0:c1:e0:29:60:89:0d:d6:f7:73:fb:f6:4d:
04:f5:f1:21:f5:5c:f7:4e:77:b0:63:5c:29:53:4f:30:23:6d:
18:d9:00:19:ab:9d:c3:7d:9a:5c:f8:21:79:ce:f4:ca:d4:9e:
b7:79:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:02 2023 by rpki-client on console-fra.rpki-client.org