Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/LqqD-eopt7yCXBW8p7UUBHImmw4.roa
File: LqqD-eopt7yCXBW8p7UUBHImmw4.roa (raw, json)
Hash identifier: i99Kan5/URjWSBp8epcE4Bxl8OeRmUAy0pInFlJ0Fdc=
Subject key identifier: 2E:AA:83:F9:EA:29:B7:BC:82:5C:15:BC:A7:B5:14:04:72:26:9B:0E
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 077A
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/LqqD-eopt7yCXBW8p7UUBHImmw4.roa
Signing time: Tue 29 Sep 2020 10:04:24 +0000
ROA not before: Tue 29 Sep 2020 10:04:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 26415
IP address blocks: 103.116.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Sep 29 10:04:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EAA83F9EA29B7BC825C15BCA7B5140472269B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:56:d8:f0:42:b1:1b:b3:1c:40:7e:42:dc:
50:dd:6c:20:e7:fd:ef:e2:08:e0:3e:05:68:c7:fc:
ea:f9:79:14:c2:99:09:7d:18:2b:b4:b2:dd:56:16:
e1:aa:ab:de:ec:e8:43:45:d4:09:7c:33:1b:0d:8e:
63:0e:d5:4b:76:9e:e9:0f:13:4e:db:11:ea:04:c7:
c7:9f:74:04:76:d8:4b:0f:64:94:bf:2f:43:bf:8f:
9a:42:de:66:b1:1f:a1:75:ab:14:cd:60:85:e3:af:
01:14:93:e4:ac:32:67:1f:e1:ce:04:44:64:7f:fc:
23:ba:25:4e:4c:ad:14:b0:ca:74:b9:9a:dd:b0:35:
03:65:70:a9:a1:4e:94:a3:47:01:a9:d3:9f:2f:ad:
d8:0b:63:28:4b:6e:34:c4:7d:c7:96:8d:a1:39:44:
a1:3b:40:ab:43:1f:26:77:f1:af:50:e2:74:f1:e4:
bf:59:9c:0f:8e:5d:97:62:a9:08:41:ec:a2:36:88:
13:d9:69:52:94:53:4d:e4:da:f4:5d:81:d9:49:09:
b7:3e:aa:df:d1:ee:76:23:67:69:3a:aa:e2:b0:d8:
5b:14:20:df:db:13:d7:3b:b5:44:7f:01:64:34:60:
1e:05:e8:db:59:fb:39:55:88:f4:20:b8:3d:7e:60:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:83:F9:EA:29:B7:BC:82:5C:15:BC:A7:B5:14:04:72:26:9B:0E
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/LqqD-eopt7yCXBW8p7UUBHImmw4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.98.0/24
Signature Algorithm: sha256WithRSAEncryption
20:05:d1:b7:61:3e:9e:a6:88:e2:31:c1:dd:d1:f0:09:ae:e1:
ee:8c:aa:72:4b:99:00:7d:ed:10:8c:5e:a7:17:47:18:59:f8:
79:5c:ae:f8:eb:d3:1a:4b:bd:61:7c:4c:b0:37:d9:55:72:48:
28:1a:3c:6c:b6:46:9d:15:0b:00:3c:ac:9a:0c:8e:3d:df:6e:
65:43:3b:1f:07:3e:08:2a:d5:5d:14:9f:1e:7c:90:f9:8c:de:
53:43:71:37:b5:36:18:cd:ca:30:1d:f6:f3:68:30:4d:04:da:
7a:7e:76:b3:d2:d5:88:aa:de:bb:7c:dc:7c:52:a6:59:e6:8b:
79:0c:d2:f1:7d:c3:6f:97:7e:5b:7b:92:84:53:24:a5:51:bb:
6b:a6:19:a9:26:9b:48:61:c4:0b:fc:67:4f:d3:5a:e8:10:77:
0a:28:c4:6e:e7:f1:02:04:d0:f5:3c:5d:da:73:00:fe:91:e9:
2d:5c:f0:31:7a:ad:6d:54:6e:e4:96:31:39:8a:64:99:4b:38:
8c:fe:72:c1:5a:08:41:09:b6:81:18:0b:9d:4b:da:03:79:89:
d8:01:95:1c:d8:56:49:99:a3:83:f9:1e:28:3b:2d:ae:be:20:
c2:b3:c7:89:50:81:ab:09:0f:25:7f:5c:7c:be:60:95:6f:a9:
dd:0c:20:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org