Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/Oxc-HYX-pOCM3O0J6Q-6TFe0eBQ.roa
File: Oxc-HYX-pOCM3O0J6Q-6TFe0eBQ.roa (raw, json)
Hash identifier: WLRAR0zndU/x88g/N070gMLr3cVqDvC5uNuijd50Yr4=
Subject key identifier: 3B:17:3E:1D:85:FE:A4:E0:8C:DC:ED:09:E9:0F:BA:4C:57:B4:78:14
Certificate issuer: /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial: 022D
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/Oxc-HYX-pOCM3O0J6Q-6TFe0eBQ.roa
Signing time: Wed 29 Sep 2021 02:40:59 +0000
ROA not before: Wed 29 Sep 2021 02:40:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131674
IP address blocks: 103.152.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Validity
Not Before: Sep 29 02:40:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3B173E1D85FEA4E08CDCED09E90FBA4C57B47814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:aa:73:01:63:f7:19:2c:86:ff:28:4d:7b:f8:
10:e1:b7:ba:36:1f:44:61:2a:92:84:d1:c8:d4:d0:
d5:69:1f:8d:07:2e:ab:18:5f:a8:a2:a0:75:bd:ba:
4f:84:0e:d9:c1:b3:77:0a:b2:a4:cc:63:60:af:f3:
a7:07:ba:1e:b9:41:da:62:b2:33:c6:96:a1:cf:9b:
63:99:f9:df:f8:5c:73:ee:92:eb:e2:e3:80:c8:f8:
b3:9c:70:25:97:78:95:a6:4a:53:f6:11:f7:72:72:
5c:94:98:db:aa:08:89:3b:f1:b5:92:13:a6:7d:c6:
b9:bf:db:3e:e8:84:ba:9f:e6:16:91:64:ff:f4:26:
ef:4f:c2:22:46:9f:2b:93:dc:9d:fb:82:17:19:ac:
53:6d:5d:01:fe:eb:c2:2d:48:11:97:98:29:84:d6:
2f:bb:c0:7f:5c:89:fd:88:d0:e0:58:6b:6f:9a:57:
4f:00:31:0e:8d:a1:f5:8e:ba:ff:8a:6f:60:00:3f:
81:b5:6e:29:da:8b:08:c7:df:bd:23:98:b7:63:39:
f9:c9:e6:81:06:5c:f9:db:6d:81:f0:6a:9a:6f:43:
5e:2b:ab:ed:01:48:27:8b:06:37:3c:57:01:92:ee:
f4:8b:6d:cc:5a:cb:92:97:32:f0:42:31:2b:14:38:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:3E:1D:85:FE:A4:E0:8C:DC:ED:09:E9:0F:BA:4C:57:B4:78:14
X509v3 Authority Key Identifier:
keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/Oxc-HYX-pOCM3O0J6Q-6TFe0eBQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:f2:d4:84:4b:97:43:39:ee:d1:90:8a:b9:ca:62:39:03:27:
f4:25:65:e3:23:44:45:cb:9d:c6:6c:07:fe:ff:ab:2f:29:0d:
65:0f:7d:3c:5b:e9:c3:8f:25:91:ea:ef:b4:7c:e1:69:63:de:
bb:3f:11:f0:ea:44:32:c6:0a:bb:22:3a:52:2d:6c:0b:f3:bf:
b6:20:d7:46:07:12:44:dc:82:93:76:1b:06:22:9b:cc:8f:90:
68:7e:60:c5:21:18:03:f2:41:aa:97:fe:75:92:1f:04:cb:b5:
a5:1d:ac:a4:23:28:3f:90:d0:67:da:4f:ce:72:1a:92:d8:33:
47:47:52:bb:60:9e:23:e0:60:b2:3b:15:77:e6:ad:00:b9:ce:
c8:48:5e:66:35:86:c1:53:4e:0c:1d:10:e2:56:39:33:b6:70:
46:57:fe:a6:54:9d:64:39:7d:e8:0f:6f:24:5e:19:f7:69:38:
e5:34:eb:1d:75:04:0a:32:c7:d8:22:7e:52:e9:b7:a2:55:e7:
bc:dd:30:3f:41:41:b8:fc:aa:12:c1:8f:9c:e0:c8:43:5c:55:
33:ca:24:0c:a1:09:ba:05:41:a9:5b:27:68:24:b5:bb:51:ad:
a5:1b:89:39:40:20:5c:1c:4c:c9:a6:96:6a:62:05:c9:ea:a5:
42:67:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org