Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/oV-L7_gBpzkagcm8Jm8s0rNtiPo.roa
File: oV-L7_gBpzkagcm8Jm8s0rNtiPo.roa (raw, json)
Hash identifier: f9fSHQjmkdzUaSdwN1vRX5DS+gbrC0Jy6oZGnbvDXu0=
Subject key identifier: A1:5F:8B:EF:F8:01:A7:39:1A:81:C9:BC:26:6F:2C:D2:B3:6D:88:FA
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 08BE
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/oV-L7_gBpzkagcm8Jm8s0rNtiPo.roa
Signing time: Sun 07 Feb 2021 11:46:11 +0000
ROA not before: Sun 07 Feb 2021 11:46:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131619
IP address blocks: 103.116.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Feb 7 11:46:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A15F8BEFF801A7391A81C9BC266F2CD2B36D88FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:fc:35:57:37:35:35:c1:d8:7b:6b:da:ac:
c8:e6:01:bc:4b:a7:c9:21:87:3a:32:26:40:9d:dc:
9c:e1:13:f2:51:2e:86:c0:74:ac:48:34:d6:d8:cc:
a1:26:63:59:87:f9:15:74:ec:7c:81:ac:8b:3d:2e:
32:bf:4d:70:bf:6a:85:42:57:d7:41:8e:c7:5e:5f:
48:a7:bd:00:66:be:5b:43:18:ed:cd:6f:57:88:78:
5a:9e:30:2c:56:ab:86:35:90:5f:36:51:e6:a6:55:
18:5f:9c:43:c3:16:d8:cf:9f:e7:4a:40:c9:fa:ec:
4b:06:1a:db:cd:d9:3a:f9:dc:49:ed:69:9f:13:16:
da:b5:88:85:97:ee:3f:de:26:af:db:6a:1b:40:0b:
34:a0:21:4f:0f:89:eb:b5:f9:fb:96:67:1c:fb:d0:
20:cf:3a:10:bf:88:ff:91:92:9b:dc:b2:20:fd:e7:
b9:d2:ea:42:80:7b:32:43:6b:af:e5:0e:57:04:32:
be:c9:08:1b:83:12:09:1c:ae:3b:00:8e:fe:cd:90:
57:6d:3c:37:df:9c:11:84:36:65:e7:58:0f:95:79:
8b:99:d6:37:0b:40:13:be:4c:ac:58:46:ef:c1:2c:
b1:7d:a1:71:91:dd:34:24:43:62:a8:de:0d:e4:8f:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:8B:EF:F8:01:A7:39:1A:81:C9:BC:26:6F:2C:D2:B3:6D:88:FA
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/oV-L7_gBpzkagcm8Jm8s0rNtiPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.96.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ea:e7:e7:0e:20:bc:73:4a:21:44:6d:bb:c1:31:7e:48:54:
70:90:19:82:2d:95:9f:15:4d:86:be:46:97:9c:16:17:3e:2b:
94:67:80:bd:19:e5:7b:3e:1c:81:05:6b:2f:d7:a3:bd:01:ca:
22:a4:b8:5f:6f:9e:cd:6b:6f:ee:27:54:a0:9a:c4:fc:03:1f:
96:5e:9a:69:85:b1:39:9c:07:b8:6f:1a:85:53:f0:92:77:0e:
a1:6b:97:a5:e8:4e:46:70:ea:8e:f7:1f:08:88:fe:05:78:c1:
2d:8f:db:78:8c:6d:fb:4b:f7:de:ad:20:3b:f6:1a:15:f0:d2:
e5:9a:00:f5:61:af:72:ac:bb:bd:a1:6b:a1:84:c6:15:86:e1:
07:05:91:54:be:d6:03:38:97:86:08:55:7d:fe:26:c2:19:f6:
6e:e0:7e:0d:cb:ff:ba:46:07:8c:48:bc:7b:d5:9f:93:51:ce:
a6:e7:08:03:3f:8a:6f:82:66:8e:39:28:6f:4d:3d:64:41:9a:
62:75:7b:32:2f:ad:9b:f2:0f:42:f1:94:ed:c3:4b:a6:41:58:
29:dc:2d:70:dc:c5:b0:2e:6e:6c:c0:4f:6f:fb:b1:3c:0b:13:
84:70:38:c3:02:28:bc:f4:5f:c6:36:47:13:35:fd:29:45:dc:
3e:d7:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:56 2023 by rpki-client on console-ams.rpki-client.org