Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/8nsseLkLqzZbY9pdoeLKomrWhHI.roa
File: 8nsseLkLqzZbY9pdoeLKomrWhHI.roa (raw, json)
Hash identifier: vXJq7Ehh2eAPM+BDTlnI9czHOJ+VodNftorhhlXoumw=
Subject key identifier: F2:7B:2C:78:B9:0B:AB:36:5B:63:DA:5D:A1:E2:CA:A2:6A:D6:84:72
Certificate issuer: /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial: F0
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/8nsseLkLqzZbY9pdoeLKomrWhHI.roa
Signing time: Sat 12 Nov 2022 00:45:17 +0000
ROA not before: Sat 12 Nov 2022 00:45:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38042
IP address blocks: 103.177.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Validity
Not Before: Nov 12 00:45:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F27B2C78B90BAB365B63DA5DA1E2CAA26AD68472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:bc:44:c5:e7:dc:cb:5a:17:ea:05:5b:a2:
04:a4:e3:a0:87:44:25:b0:11:f7:65:f3:81:3a:2e:
b8:73:27:31:63:db:08:a5:32:74:57:5c:fc:c8:7a:
6c:4d:1a:f8:72:4a:18:21:31:8f:c8:31:4c:1f:9f:
5e:c9:b7:75:83:26:5f:f9:cf:ef:d2:67:94:35:9f:
3b:62:48:57:ff:32:8c:07:76:1f:a4:9b:01:f1:75:
cb:4f:21:fd:98:39:b3:c2:67:75:5b:43:56:0b:e9:
71:16:36:da:ea:d3:90:e4:29:c7:c3:fc:20:0c:31:
5a:a9:cb:98:e5:bd:38:95:ef:15:0f:1d:7a:e3:66:
a0:6c:b7:a4:e7:2c:a8:75:72:0a:f9:43:29:46:88:
11:4f:68:c8:57:c7:19:d9:99:ae:3c:d5:dd:fe:18:
c0:67:fa:a4:66:56:c5:a1:b2:19:82:f9:38:3b:0b:
1d:27:1d:2e:84:d6:40:ba:f6:f0:e9:db:6f:bb:d5:
87:2f:76:72:d9:ae:cc:7a:be:eb:db:25:f6:b0:45:
ba:c9:47:69:e4:ce:ef:b5:9a:92:ef:48:60:04:38:
61:27:c6:81:6b:a1:a8:8b:bd:76:ed:f6:91:ff:7f:
78:83:c9:e2:7c:bf:e2:91:7c:f4:93:6e:b8:13:43:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:2C:78:B9:0B:AB:36:5B:63:DA:5D:A1:E2:CA:A2:6A:D6:84:72
X509v3 Authority Key Identifier:
keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/8nsseLkLqzZbY9pdoeLKomrWhHI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.32.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:30:6b:90:82:8d:6d:02:92:01:24:34:b5:29:61:6c:38:ab:
be:63:3a:b1:d4:1e:b3:4f:9e:ab:a8:f2:be:f8:1b:39:24:47:
c3:c7:9a:23:ca:ad:43:1a:5a:31:73:4f:2c:e8:45:53:ab:47:
c1:0f:73:4e:ea:bb:1d:6d:3c:ed:f9:70:7d:14:ce:1c:b3:96:
ae:8a:ac:fe:e3:be:19:6a:87:72:65:37:6b:b6:f1:4b:6c:2d:
f8:b9:20:79:02:14:c8:61:cf:c0:98:dd:72:83:7a:ee:6f:aa:
8b:c7:f4:66:f2:05:e0:07:5e:54:65:00:82:d6:37:c3:f8:36:
a9:1c:4b:66:a9:8c:6a:3a:fd:62:95:f1:23:9a:8d:71:63:54:
43:f9:40:d9:9e:f5:e0:84:c6:53:3c:ab:ee:3a:03:3a:6c:cd:
a0:62:83:e4:6b:75:ad:e9:3c:e2:bd:3e:7e:f9:0d:38:cc:1c:
5f:9b:95:be:9e:ba:fc:e1:cf:04:68:09:47:16:55:76:a7:1a:
c3:c7:4a:fc:f0:c1:c4:36:55:f1:fb:c4:bc:4c:47:9d:a1:34:
60:d2:11:9d:99:80:9a:be:5e:97:60:cb:13:37:3c:87:33:38:
4e:b8:35:c2:0c:09:3d:2b:e0:7b:73:34:08:e0:1d:d7:41:1e:
77:0f:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org