Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/vzl7kCCyxo5n8yv9aJYYkiv-pYU.roa
File: vzl7kCCyxo5n8yv9aJYYkiv-pYU.roa (raw, json)
Hash identifier: 13X7/d8sKaeOGwsUQ6dCmNqGKMj0f7I0uOrg/rYTyak=
Subject key identifier: BF:39:7B:90:20:B2:C6:8E:67:F3:2B:FD:68:96:18:92:2B:FE:A5:85
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 100A
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/vzl7kCCyxo5n8yv9aJYYkiv-pYU.roa
Signing time: Thu 15 Sep 2022 02:46:47 +0000
ROA not before: Thu 15 Sep 2022 02:46:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131616
IP address blocks: 103.124.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4106 (0x100a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Sep 15 02:46:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF397B9020B2C68E67F32BFD689618922BFEA585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:a9:ba:ec:ab:39:b3:21:4e:fa:4e:20:8b:
65:5d:51:97:a0:1f:0a:7c:20:7b:86:15:5a:5b:d5:
23:05:97:01:62:bd:01:f7:5e:56:2f:cc:42:44:dc:
96:1e:9d:91:70:cf:5c:93:6a:8c:c7:ad:35:1d:e6:
60:a4:d9:9c:da:39:70:67:81:ea:55:95:98:9e:36:
73:74:83:d4:e8:3e:63:40:1b:3c:65:98:86:6b:a0:
07:a3:3e:02:c0:26:75:9a:9a:45:57:8b:c2:66:fd:
b5:f1:6c:d4:7b:11:6c:7b:6f:1d:0b:9c:c8:ab:07:
63:79:ea:48:e0:b2:ac:af:d1:b0:cb:49:3f:de:6b:
b8:88:d1:f7:44:cd:ea:70:2f:6f:95:aa:ab:bf:d9:
23:8e:04:21:47:bb:e2:e7:b8:c4:5c:5f:ea:0a:f0:
6a:ca:d2:dc:1a:4f:32:9f:34:c4:22:02:65:f8:dc:
24:7d:cf:8d:18:38:81:cb:1d:71:af:68:5d:67:ba:
14:00:71:c4:fe:4e:5a:56:56:fe:25:2d:6e:5d:96:
05:1f:d4:8c:23:58:65:aa:64:52:5c:34:54:9c:48:
4a:9a:4c:1d:93:54:65:ef:9f:e1:5f:bd:0a:ed:55:
1f:e5:6d:6b:7c:88:a1:cc:00:70:27:7f:c3:44:e1:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:7B:90:20:B2:C6:8E:67:F3:2B:FD:68:96:18:92:2B:FE:A5:85
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/vzl7kCCyxo5n8yv9aJYYkiv-pYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:09:c6:ff:88:a5:0e:ff:99:db:02:f8:da:74:88:1e:9a:c7:
97:38:b0:3c:15:3d:8a:bc:22:8a:4c:2b:4e:c9:cf:c6:53:09:
05:9c:6e:fe:2d:fe:09:46:ed:bd:e6:c4:26:72:b7:df:08:1b:
85:c6:0a:32:da:1d:8f:1d:f4:60:64:8f:77:d9:ab:9e:3e:9c:
69:c5:ce:46:16:6b:2f:08:e3:4f:1a:f8:b6:59:ca:79:09:ab:
88:0e:7e:52:25:1d:ad:52:ae:c5:0c:99:7d:ff:2d:5a:83:17:
66:86:a3:cd:21:5b:df:42:87:60:79:b8:fa:fa:01:a3:4a:9f:
19:95:17:8e:e3:a6:06:79:70:48:ab:79:a1:33:63:bb:b8:18:
b1:51:d5:76:30:76:e8:3d:a8:69:84:60:71:79:c8:08:42:ca:
7e:02:9d:7a:03:f9:d3:84:23:f3:81:54:e5:53:f2:c3:5c:5a:
cb:0c:ae:da:a8:d9:ba:85:f0:9d:b7:11:1b:09:37:0a:10:f8:
b5:c6:2a:40:f7:8b:32:d0:3d:93:be:70:68:70:1b:6f:1c:19:
21:df:7b:16:3b:58:03:aa:1c:08:92:1e:dc:76:f7:39:63:b6:
8a:f1:46:25:13:7d:d7:b0:0e:76:2d:cf:06:07:bb:bf:15:d2:
1c:bd:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org