Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/zDT6yQWliB6s61ivaslxW_JFP0w.roa
File: zDT6yQWliB6s61ivaslxW_JFP0w.roa (raw, json)
Hash identifier: AH4e5gVw5hv3VjleuzQKwWfjOE0/LTh+14yTsDTQw2w=
Subject key identifier: CC:34:FA:C9:05:A5:88:1E:AC:EB:58:AF:6A:C9:71:5B:F2:45:3F:4C
Certificate issuer: /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial: 022F
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/zDT6yQWliB6s61ivaslxW_JFP0w.roa
Signing time: Wed 29 Sep 2021 02:40:59 +0000
ROA not before: Wed 29 Sep 2021 02:40:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131677
IP address blocks: 103.152.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Validity
Not Before: Sep 29 02:40:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CC34FAC905A5881EACEB58AF6AC9715BF2453F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:53:7f:f8:d0:d1:7e:e5:00:90:7d:d4:a9:
9f:d5:b3:33:c0:55:7a:6f:f1:33:48:be:a4:67:fe:
fe:fd:61:cc:6b:db:fd:4d:33:15:fc:8e:3d:7a:2b:
97:23:9d:c1:8f:a3:3a:b5:48:c5:e2:81:dc:e5:70:
10:e1:38:23:b7:e4:0f:3f:ef:66:3d:aa:af:6b:89:
2e:29:f1:ca:17:be:83:6c:80:2b:33:4f:b4:d4:a3:
d6:1a:2f:9c:d1:5b:66:a2:89:75:25:84:fa:71:68:
56:44:86:bb:13:8b:69:fa:fe:0e:ce:d7:a8:62:9c:
9d:a1:82:57:f1:9b:96:2e:9b:d9:45:14:0d:e5:b6:
cc:c5:b5:4c:8f:b8:d1:91:06:bc:fe:38:42:d5:80:
6a:96:29:5d:d6:29:a4:08:c3:45:8d:d0:bf:03:01:
aa:be:cf:63:19:01:b3:32:1f:c7:e6:c4:e3:a0:dc:
b6:f0:a1:9b:22:1d:26:40:7a:e8:bf:6d:6f:90:3c:
8d:46:68:25:f8:99:ae:46:4e:19:50:8c:5d:b6:6c:
bb:24:43:01:49:7a:39:ff:1c:82:51:a4:37:d0:5a:
ff:3c:20:43:f0:0a:21:0d:98:9a:5b:97:38:00:91:
af:b4:52:86:a1:46:8d:d0:ff:03:ee:8b:ae:b6:0c:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:FA:C9:05:A5:88:1E:AC:EB:58:AF:6A:C9:71:5B:F2:45:3F:4C
X509v3 Authority Key Identifier:
keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/zDT6yQWliB6s61ivaslxW_JFP0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:e6:b5:aa:c4:f9:42:f4:1a:9f:7e:41:ce:ed:27:3a:5e:75:
97:cb:76:88:a1:21:0a:77:05:fe:fe:e0:81:a4:e2:cf:7d:e8:
c4:04:e8:1f:b3:4b:ff:31:42:ad:79:e6:45:36:8c:5f:65:7c:
e8:78:2f:3c:00:8b:a8:ba:2b:aa:af:16:be:67:e8:a1:e9:f0:
51:d9:c3:04:a8:e0:db:0a:3a:ec:76:09:96:d3:86:02:af:35:
7d:c4:be:f5:82:ff:60:90:8f:3b:12:4c:32:b3:24:9b:19:c7:
9a:d8:72:89:ce:9b:73:69:9b:db:74:71:08:ab:d4:7a:40:49:
16:5f:80:c8:ad:62:b6:82:80:71:33:c8:bf:ac:7e:47:98:39:
87:c6:d9:c7:67:58:0a:15:68:56:1d:33:a3:93:cd:bd:80:1d:
4c:b5:d1:44:b7:40:22:c1:69:66:54:ea:f4:73:1b:25:88:8e:
21:14:12:a0:8c:f2:57:25:4b:c0:21:b8:c1:c5:8c:af:5e:f2:
7b:04:22:0c:e8:5d:24:d0:ac:bd:93:3a:47:a6:00:30:9a:85:
fb:cd:f6:e8:42:78:67:3e:78:4d:ec:e4:95:49:fd:32:ec:e8:
e5:b1:ec:b8:f7:8a:9c:b1:1f:55:44:39:77:19:aa:ee:01:30:
5d:46:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org