Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/YACs2wbIOK_xqwHMIPNVBMUtx5Q.roa
File: YACs2wbIOK_xqwHMIPNVBMUtx5Q.roa (raw, json)
Hash identifier: Pf8yd/U2ciMJHDxK6yLqIwEvP0gyX1mQDW7so+Ihq9E=
Subject key identifier: 60:00:AC:DB:06:C8:38:AF:F1:AB:01:CC:20:F3:55:04:C5:2D:C7:94
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 037B
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/YACs2wbIOK_xqwHMIPNVBMUtx5Q.roa
Signing time: Wed 29 Sep 2021 02:54:04 +0000
ROA not before: Wed 29 Sep 2021 02:54:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9678
IP address blocks: 103.98.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 29 02:54:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6000ACDB06C838AFF1AB01CC20F35504C52DC794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:f6:e0:d2:7f:4b:93:fb:c4:b9:fa:36:a5:
63:f4:44:e8:bc:ec:38:24:de:ff:f3:83:ba:fe:c3:
4b:5b:67:77:dd:40:02:21:5e:a0:57:bb:f7:11:12:
8c:82:ee:4b:4c:37:cf:ec:46:bd:10:89:a1:0f:10:
c0:d8:c4:aa:15:06:4a:a8:42:83:a4:59:50:e6:58:
e5:30:c4:34:04:b7:2e:9a:c1:bb:4f:52:6e:a2:f5:
b0:de:82:44:8f:75:93:9d:15:c5:94:b4:4c:59:93:
87:21:e6:92:86:16:c2:32:44:49:94:58:b1:81:88:
fa:03:41:aa:54:36:aa:f6:65:4c:12:a0:7b:25:2d:
02:eb:88:d6:4e:3d:46:14:aa:8e:6c:e3:b9:43:d1:
88:2d:05:47:85:54:b7:c7:6f:29:4f:8a:eb:37:62:
4a:27:8f:09:81:13:08:ec:99:44:f6:c6:30:c6:93:
b5:8f:20:7d:2b:82:3b:20:94:29:b7:87:bd:9e:41:
c5:92:6f:cc:5a:57:c2:b6:9d:98:c0:fb:26:29:18:
0c:6c:1d:3b:73:5d:94:71:d2:d1:ff:5b:6a:d4:d7:
65:b6:92:73:cf:ef:05:2f:04:51:a1:3a:7f:19:eb:
93:31:b1:d9:44:00:48:b4:23:5b:6f:19:c9:69:55:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:AC:DB:06:C8:38:AF:F1:AB:01:CC:20:F3:55:04:C5:2D:C7:94
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/YACs2wbIOK_xqwHMIPNVBMUtx5Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
51:68:9c:18:61:d1:96:5e:1a:83:1e:64:a3:e3:9e:2a:7b:ab:
a0:6b:f2:cc:ba:b2:e9:26:51:7b:e1:17:a0:32:ad:4b:e9:b9:
58:5b:e9:95:0e:fb:82:66:c0:a4:a1:d9:90:7d:c5:de:e5:21:
ed:b0:fd:c1:9a:39:ee:4d:d7:6f:c1:4e:4a:63:35:ec:bf:ee:
65:f1:80:31:9e:5f:51:04:a0:12:2e:dd:ee:41:43:5f:bd:5a:
87:ec:03:e6:74:3a:6c:ed:e9:a0:ba:87:67:78:58:31:06:dd:
7a:72:98:14:ce:17:5d:c9:ab:c0:b3:06:76:d1:ee:46:9d:70:
8b:7e:df:99:ec:25:e4:ed:2c:dc:ba:c6:dd:33:b9:c2:54:a6:
10:08:dd:53:23:6f:49:da:08:54:fa:ea:03:79:16:7f:10:49:
1e:43:17:5e:ee:4c:2b:4f:65:57:57:66:00:85:59:c6:07:08:
47:79:9d:38:e0:e7:0b:68:1a:91:6b:1d:b7:c5:dd:65:64:b9:
50:26:c0:d4:69:ad:e0:ea:a6:87:3b:61:ed:40:0e:ed:6b:ef:
0f:c9:1e:99:0d:87:0c:51:14:41:e1:1c:94:51:6f:a0:77:a5:
69:e3:10:80:09:89:e5:14:e3:90:dc:b4:c8:11:70:a7:40:6b:
1b:8f:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org