Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/CZPFEDz6GiM5K77zZIepgdvzqW0.roa
File: CZPFEDz6GiM5K77zZIepgdvzqW0.roa (raw, json)
Hash identifier: sEqPyshsxOBIQyoGo+H1eWOp4E2YSVK+HdxMjwO1L3A=
Subject key identifier: 09:93:C5:10:3C:FA:1A:23:39:2B:BE:F3:64:87:A9:81:DB:F3:A9:6D
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0A57
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/CZPFEDz6GiM5K77zZIepgdvzqW0.roa
Signing time: Thu 15 Sep 2022 02:40:43 +0000
ROA not before: Thu 15 Sep 2022 02:40:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131619
IP address blocks: 103.116.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Sep 15 02:40:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0993C5103CFA1A23392BBEF36487A981DBF3A96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:18:2c:4c:39:43:70:de:25:fa:2d:02:15:
11:07:16:83:20:b3:8e:f5:66:7c:a5:5a:26:6a:1a:
62:8e:74:a7:07:30:83:17:3b:6e:fd:3b:25:a5:b9:
2f:d0:03:32:c5:7b:a3:d5:e1:a0:74:72:a1:08:52:
d8:d6:1b:ea:ec:b6:cc:30:cc:ea:87:20:bd:ed:c1:
5d:45:8b:74:b3:d5:7e:2a:32:d0:34:c5:4c:5e:7a:
b6:c4:80:b3:48:27:fd:f2:dc:9f:cd:78:a2:27:49:
30:c2:81:0e:86:d7:fe:51:06:36:ea:9d:0b:31:fe:
9e:65:cf:03:1a:95:59:ab:ae:6b:78:3a:2e:47:50:
d7:1d:7b:bd:f8:fc:d1:6a:b1:f7:2e:0c:0e:2d:91:
3d:6c:51:7f:48:00:8a:56:47:51:04:a2:09:bd:32:
4a:00:19:f4:5c:f3:85:2c:42:a8:76:5e:60:44:90:
f3:dc:59:d3:cf:bd:71:37:f0:aa:ef:b2:51:b7:96:
a6:7f:b7:0e:2a:e5:99:3f:74:61:f0:4e:a8:d1:c7:
46:c1:9d:63:db:d2:b2:94:6d:27:df:a8:39:7b:74:
96:cd:f4:28:f7:71:05:d2:a1:a2:45:e6:73:43:a0:
0f:5d:5f:41:6b:c0:41:a3:6e:c7:74:11:eb:77:83:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:C5:10:3C:FA:1A:23:39:2B:BE:F3:64:87:A9:81:DB:F3:A9:6D
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/CZPFEDz6GiM5K77zZIepgdvzqW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.97.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:57:c3:7d:2e:22:18:49:2e:4f:1c:10:24:d1:cc:09:7d:f1:
28:4f:71:3e:b5:c0:e7:cd:49:3a:2e:d6:17:79:bd:20:1e:66:
21:94:eb:c8:5d:37:02:0e:2b:2a:fb:81:f2:f2:fd:68:b4:fd:
a9:56:61:a5:30:d8:b7:b5:98:4e:61:5c:0b:23:ce:c1:95:dc:
29:8b:66:56:bd:a6:84:e9:4e:f4:85:4f:b0:da:e6:9c:1f:01:
f9:d7:c9:5e:2f:ba:67:53:08:30:9c:73:ae:78:98:f3:4f:2d:
64:32:f4:29:6f:9e:34:63:54:4b:dd:e5:51:9f:17:e2:fb:72:
a5:5a:21:14:28:8a:a0:72:a1:90:e6:f5:ae:05:6e:6a:29:48:
ea:ff:f9:e8:c9:6d:63:7a:13:9f:c2:c6:54:55:be:47:1d:ba:
35:86:25:ce:41:12:e2:e8:e9:be:76:d2:84:5b:02:b4:ae:5b:
42:b3:15:cc:a9:aa:c7:da:53:67:61:a0:6c:e8:d0:fa:d3:5f:
0b:8b:ea:86:ae:25:c9:00:86:56:b1:4f:c6:79:7d:18:29:25:
25:16:fb:bb:64:9b:cf:75:e3:8a:52:f1:66:42:f0:84:d8:24:
46:40:dc:0b:7f:ad:f4:62:3b:76:00:c0:af:97:3a:e7:78:05:
98:b6:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org