Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/N-1FY372BJU3AzMdkWTUY_m3Pr8.roa
File: N-1FY372BJU3AzMdkWTUY_m3Pr8.roa (raw, json)
Hash identifier: OBF4bG77SaiJSrnmrYfG5ueOoUhBVxMGVzSvBLm+8CA=
Subject key identifier: 37:ED:45:63:7E:F6:04:95:37:03:33:1D:91:64:D4:63:F9:B7:3E:BF
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 037C
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/N-1FY372BJU3AzMdkWTUY_m3Pr8.roa
Signing time: Wed 29 Sep 2021 02:54:04 +0000
ROA not before: Wed 29 Sep 2021 02:54:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9678
IP address blocks: 103.98.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 29 02:54:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=37ED45637EF604953703331D9164D463F9B73EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:a7:7e:df:79:8b:84:7c:52:ef:50:f4:42:
5b:ea:ff:15:50:e7:27:7e:fb:7d:71:9c:3b:ce:3e:
1e:32:0e:74:94:c9:99:08:f8:88:3c:a7:be:d9:aa:
d1:58:06:02:a5:ad:f1:42:a2:28:93:3c:15:e1:58:
2e:8a:f7:fb:0d:f4:db:e4:fc:83:fe:3d:81:2e:75:
ab:57:1f:49:92:0f:8f:01:48:41:4c:38:dd:48:f1:
67:e9:77:bd:e0:23:07:3c:bd:cb:2d:f1:15:65:55:
6f:b8:35:69:8a:ce:2e:87:63:5e:02:21:af:c9:ed:
3e:c9:59:d7:b3:49:ec:97:0a:57:84:d7:6c:5a:02:
a3:69:73:4f:36:d1:aa:4c:88:31:3b:e4:bc:12:9b:
b4:92:96:c9:a6:0e:4d:d5:b9:f4:e1:3b:dc:8c:02:
ab:6d:46:5f:b6:12:a2:39:ac:8d:5e:9f:c9:c0:32:
0e:f5:fc:c4:c1:e0:4a:89:f6:80:c7:e4:d5:9f:11:
06:2a:ad:72:65:6f:c5:3a:04:a4:b3:a1:e5:dd:ca:
94:69:be:bf:7b:b4:e3:9d:53:ac:48:71:34:cd:aa:
bd:77:7b:a1:68:e0:bf:27:8a:c4:38:e0:db:97:47:
df:61:66:90:fa:0d:51:86:a2:ac:34:f5:6f:cf:32:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:45:63:7E:F6:04:95:37:03:33:1D:91:64:D4:63:F9:B7:3E:BF
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/N-1FY372BJU3AzMdkWTUY_m3Pr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:12:e0:7c:d9:e2:35:c1:d7:64:01:97:3a:58:4d:ac:51:ef:
a3:8f:55:99:dc:f6:44:9c:89:c5:da:f5:bf:68:54:44:35:c6:
03:82:8b:17:79:8f:bd:a0:fd:08:cb:11:7c:70:9a:72:00:95:
8f:3b:2d:ac:46:e4:b2:21:a6:73:6b:67:f9:69:8f:1e:4a:71:
f1:a8:a4:64:e6:97:ec:a4:a3:d6:e6:e3:fe:8b:34:62:8b:e1:
44:fb:14:69:30:66:19:2d:0d:8b:8f:10:a9:e4:51:b8:00:43:
c6:a5:dc:43:13:b2:9b:bd:90:a4:80:e5:85:e7:53:eb:df:e9:
fa:be:fa:f9:c7:fc:fb:67:86:25:44:aa:a3:ae:63:7f:a8:2d:
b2:9b:24:e6:74:c5:3a:37:8c:31:08:df:e1:51:3c:1d:51:90:
29:21:53:3c:3a:3e:23:98:5d:8d:aa:b5:71:90:b1:a4:2b:2f:
62:f3:3e:a5:8b:3d:a8:98:ed:69:a3:c6:81:fd:fc:f0:35:78:
7c:f0:58:1e:31:e5:a9:73:5c:3a:70:0d:98:7f:6b:de:03:0c:
30:55:17:83:7c:87:9d:ce:fc:d9:9d:5a:0c:a0:05:9f:39:d1:
30:b2:3d:03:c4:e4:b5:f7:61:31:85:45:f7:5f:5f:c0:cf:79:
97:3a:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org