Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKMT/mnT9Ms8IB3FZ-6M-43foPZx2YUQ.roa
File: mnT9Ms8IB3FZ-6M-43foPZx2YUQ.roa (raw, json)
Hash identifier: 3y2SKqJaflfMJvyQaUotMD4pvtAnVgh3J0YZ9TJHDTE=
Subject key identifier: 9A:74:FD:32:CF:08:07:71:59:FB:A3:3E:E3:77:E8:3D:9C:76:61:44
Certificate issuer: /CN=48540E13F8B2CAE86CD1F8C7252839A5078F16A5
Certificate serial: 08FC
Authority key identifier: 48:54:0E:13:F8:B2:CA:E8:6C:D1:F8:C7:25:28:39:A5:07:8F:16:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SFQOE_iyyuhs0fjHJSg5pQePFqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/mnT9Ms8IB3FZ-6M-43foPZx2YUQ.roa
Signing time: Tue 29 Sep 2020 10:04:41 +0000
ROA not before: Tue 29 Sep 2020 10:04:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131645
IP address blocks: 103.141.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48540E13F8B2CAE86CD1F8C7252839A5078F16A5
Validity
Not Before: Sep 29 10:04:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A74FD32CF08077159FBA33EE377E83D9C766144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:7d:2a:e5:a9:c4:da:14:41:ad:97:6a:db:
7c:12:94:4b:69:2f:d4:a3:43:62:d1:d3:9d:88:0a:
d9:a5:e9:42:be:79:db:60:e2:55:bd:19:47:48:b2:
47:40:7e:cb:5c:4e:8b:89:10:04:ff:b1:33:73:c8:
d9:66:82:0a:e4:f6:2e:b9:43:d1:ed:be:a3:43:8b:
d9:18:62:80:bd:24:34:0a:e2:0c:27:d6:7f:8c:de:
89:38:43:8d:35:12:87:af:ba:fa:61:d4:ec:2c:1e:
c7:85:19:b3:86:10:f5:a3:ed:b8:be:63:21:42:1e:
46:10:ed:f4:2f:43:68:63:ad:43:1b:96:17:56:db:
d3:02:b8:4c:1e:d5:56:5e:1e:8e:45:a2:11:10:85:
b2:a9:cd:ab:74:92:1d:db:2b:dc:5c:90:31:c7:ea:
c4:94:fb:f7:ee:54:fb:f6:50:6f:f9:0f:91:e9:60:
22:3c:ca:e0:b2:8d:7a:40:c4:30:07:a1:25:34:7f:
31:b6:51:32:e2:40:ab:9f:94:9b:a0:54:cc:9e:80:
de:95:07:a6:0a:1b:7d:af:0d:7b:bb:16:60:cf:73:
94:b7:b8:ee:b6:bc:dd:fd:38:36:17:7b:a1:de:ec:
41:6f:a0:08:ef:d6:58:a5:43:f1:88:25:7a:15:dc:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:FD:32:CF:08:07:71:59:FB:A3:3E:E3:77:E8:3D:9C:76:61:44
X509v3 Authority Key Identifier:
keyid:48:54:0E:13:F8:B2:CA:E8:6C:D1:F8:C7:25:28:39:A5:07:8F:16:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/SFQOE_iyyuhs0fjHJSg5pQePFqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SFQOE_iyyuhs0fjHJSg5pQePFqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/mnT9Ms8IB3FZ-6M-43foPZx2YUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:d4:17:44:dc:c8:c2:1d:0f:58:2a:07:7d:88:7b:06:6d:23:
83:c6:c5:69:62:be:87:38:1f:ff:ea:c2:70:0f:30:1c:9a:88:
f7:4b:ca:45:f1:5d:e5:c3:b4:ce:bf:ef:fe:ef:8d:c5:ff:e6:
8c:f6:2a:f3:f1:eb:96:f4:65:99:47:18:5f:4f:42:5c:70:f2:
05:dc:49:f1:4f:fd:d7:8b:9f:6a:14:f9:0d:d1:3f:db:57:40:
f4:74:a0:c2:64:46:dd:55:4c:80:5b:0c:23:d0:df:26:fe:d3:
0b:53:08:d6:09:ea:68:19:27:db:e3:08:1e:a0:8d:7e:dd:59:
fc:92:c4:17:2e:db:11:af:ef:2a:63:e9:dc:87:e1:ba:73:05:
a3:b5:e6:73:2b:b2:0c:fb:2f:05:45:b6:40:e0:2a:8d:d4:69:
54:33:90:28:98:33:83:16:84:08:1a:f4:bc:10:12:56:0b:74:
6d:29:c8:06:e5:bf:aa:36:25:07:c6:43:07:73:0b:df:58:ce:
2d:19:60:60:cd:60:4e:9d:9e:b4:75:ae:34:39:4c:82:93:8a:
c6:f8:d4:00:37:13:a7:31:7d:56:d5:87:7c:29:1e:6b:03:ef:
57:55:7c:b9:43:fa:45:c7:40:25:d7:c4:6a:3f:cb:27:10:ff:
81:dd:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org