Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/vgvw_r3Fjy694gNA_YY-7mRgvS4.roa
File: vgvw_r3Fjy694gNA_YY-7mRgvS4.roa (raw, json)
Hash identifier: a33cI2Xj47Z2iej82zzX6eqag+vFz5w9djL1KMoCt0Y=
Subject key identifier: BE:0B:F0:FE:BD:C5:8F:2E:BD:E2:03:40:FD:86:3E:EE:64:60:BD:2E
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 02B7
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/vgvw_r3Fjy694gNA_YY-7mRgvS4.roa
Signing time: Thu 07 Jan 2021 03:37:08 +0000
ROA not before: Thu 07 Jan 2021 03:37:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9678
IP address blocks: 103.98.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Jan 7 03:37:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE0BF0FEBDC58F2EBDE20340FD863EEE6460BD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:c4:69:2c:ec:a9:c5:36:30:5b:df:ef:0b:
36:c9:32:93:fa:30:57:5c:3f:fd:33:39:6b:75:68:
b8:ba:ec:f3:6b:01:2a:d1:5c:01:97:e6:5d:f9:1c:
82:47:18:fd:ef:bd:a1:19:55:57:d7:91:89:b6:f7:
b3:22:fc:76:b1:40:11:4b:1c:c0:68:a3:e5:7b:35:
e7:39:8c:6a:8f:bc:48:db:0c:50:dd:64:b3:a5:2e:
98:ad:8c:0f:ee:5e:f8:a9:d0:7f:75:bd:42:5e:6c:
e9:8a:6d:49:16:7a:34:10:ec:89:cb:d3:28:bd:58:
f2:6a:17:cc:af:2d:68:a5:ae:24:ed:68:1e:42:56:
c6:bc:e9:60:0c:79:cc:67:4e:7c:c1:f8:8b:7f:8e:
66:cc:d7:2f:8f:cf:21:9d:04:97:0c:13:9a:20:03:
8f:fe:c1:35:8a:14:7d:ae:93:72:d2:aa:1f:fe:5b:
32:9b:a8:d6:86:20:4a:ce:46:6b:47:a7:ee:83:82:
fe:23:64:78:c9:c3:66:78:ec:67:43:b4:cf:fc:e4:
d6:0c:79:21:68:55:db:d1:c2:7b:01:ed:d3:5e:b2:
ec:9c:71:fe:d9:37:c2:be:2d:bf:b0:a0:aa:b3:78:
91:6e:9f:de:f2:ae:d0:74:04:f6:1a:cd:96:69:f9:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:F0:FE:BD:C5:8F:2E:BD:E2:03:40:FD:86:3E:EE:64:60:BD:2E
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/vgvw_r3Fjy694gNA_YY-7mRgvS4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:94:2b:fa:7b:15:ee:35:2f:a2:79:07:f1:a8:12:38:25:7f:
88:a2:59:88:80:7f:28:f3:e1:77:46:9a:63:60:ee:e5:e4:83:
e2:43:11:db:4d:1a:f5:17:c7:e5:7a:68:c6:32:0c:20:50:a4:
92:f8:e3:ab:91:1c:bf:8b:e2:fd:49:fb:c8:4c:0d:4a:8f:5d:
9f:d0:e9:66:23:0a:19:41:9f:79:62:bf:46:b3:ac:37:16:dd:
87:c3:13:96:0f:4d:56:a1:d8:91:ce:0d:e7:d7:f4:9b:1f:07:
7e:b8:ea:7d:f5:76:cf:9b:28:60:5b:e4:3b:e9:fe:46:d2:8f:
0d:ba:c4:c1:15:77:fb:6b:a4:c6:78:0e:f7:a2:74:da:9c:47:
4c:1c:1f:42:5f:a2:24:7e:7a:28:d9:7f:f2:83:e9:94:1e:33:
68:71:1d:63:56:ef:43:d1:e0:1a:58:54:eb:fd:5d:3e:c2:e2:
f8:f2:8b:c4:7a:7d:b5:1f:f6:34:40:c2:0f:20:49:84:1d:0e:
81:b6:2b:87:80:00:53:65:21:02:f0:55:d9:d2:94:32:85:b9:
a4:e0:41:93:f3:e0:5e:d1:85:32:38:70:b2:e8:2a:12:d7:10:
f1:2c:87:d1:5c:c4:09:ac:d7:72:4b:61:ed:45:42:0a:73:74:
b7:d8:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:56 2023 by rpki-client on console-ams.rpki-client.org