Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKPC/91QecVez2g_MaXd2zq4OHWTIUYM.roa
File: 91QecVez2g_MaXd2zq4OHWTIUYM.roa (raw, json)
Hash identifier: 7GOUER56HHkNcyFPoQTZccjhjK+0K0MqRIFr4DsRKNQ=
Subject key identifier: F7:54:1E:71:57:B3:DA:0F:CC:69:77:76:CE:AE:0E:1D:64:C8:51:83
Certificate issuer: /CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Certificate serial: 0A3E
Authority key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/91QecVez2g_MaXd2zq4OHWTIUYM.roa
Signing time: Sun 07 Feb 2021 11:56:00 +0000
ROA not before: Sun 07 Feb 2021 11:56:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131645
IP address blocks: 103.141.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622 (0xa3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Validity
Not Before: Feb 7 11:56:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F7541E7157B3DA0FCC697776CEAE0E1D64C85183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:d3:65:2e:ec:f9:8b:22:ed:e5:6d:7b:87:
ae:3b:dc:3b:2e:54:75:2d:ed:42:84:c8:cb:cf:12:
e4:22:d7:b4:08:e4:3a:3d:89:79:a5:52:7e:1a:8a:
e9:22:90:58:f6:fc:7e:68:38:3b:42:20:20:24:e8:
57:bc:e3:f0:77:a9:7b:e3:5d:d9:af:d4:6d:6b:84:
c8:a4:09:b4:cd:1a:d2:98:19:5d:cc:f9:fe:70:c6:
f4:dd:8a:d4:d7:98:be:9d:f7:12:73:3c:6f:cb:78:
49:2b:17:c3:4b:7f:e8:a1:1d:d5:dd:a0:53:84:73:
34:3d:46:1d:fa:60:63:7e:e9:75:b2:5f:d4:c6:33:
b9:18:98:2e:03:f2:ba:43:2f:c5:c4:ae:30:7d:f0:
12:5d:50:8b:f0:50:a6:c9:68:e7:f1:56:45:f7:cf:
41:07:b9:d9:84:bc:23:e5:86:63:d8:ab:63:3f:dd:
e0:57:25:e5:de:1e:ea:a6:ff:69:94:f1:07:1c:c8:
4b:7a:7f:4b:b5:09:22:e2:c6:7c:5a:00:09:7b:86:
b0:58:d0:84:73:b6:67:36:20:52:ec:f1:b1:aa:f7:
8f:60:5b:50:ad:86:e4:aa:09:42:10:72:e7:75:6b:
9b:6a:ce:d1:11:a8:84:3f:1f:b8:11:fc:3b:d8:b4:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:1E:71:57:B3:DA:0F:CC:69:77:76:CE:AE:0E:1D:64:C8:51:83
X509v3 Authority Key Identifier:
keyid:CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/91QecVez2g_MaXd2zq4OHWTIUYM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:22:08:d9:77:a5:de:28:72:34:8a:61:c4:0e:02:c0:6f:08:
a4:90:b2:66:6c:6e:a6:92:04:92:ea:b8:3b:d6:6f:35:c1:0e:
01:46:95:e6:4f:b1:99:8e:77:29:7c:21:cf:13:94:3d:13:e5:
2f:ae:d0:a5:f4:cb:4e:80:87:62:8e:79:42:01:05:cc:39:07:
cf:ec:15:2b:60:1f:5f:62:a1:b2:88:20:9a:eb:89:67:35:2d:
72:b6:da:91:cc:22:31:6d:d9:eb:fe:08:0d:74:4c:06:c9:cb:
b6:5e:82:a5:65:d1:b5:c2:94:c3:66:c9:eb:a9:52:67:30:b8:
f1:ed:0d:9a:c9:a4:f2:4d:a7:ae:a7:3e:9c:b8:ec:d7:82:bb:
51:28:84:fd:11:a7:9a:53:ef:b6:5e:c8:67:79:bb:71:af:bc:
ab:31:34:8b:4c:3b:7c:c6:23:7f:77:ee:98:6b:0f:ec:50:b9:
cb:83:c7:12:f9:1b:57:6e:79:fd:ce:18:fc:13:ec:d4:8d:43:
7f:9d:23:b8:23:66:33:bc:57:12:f1:d2:22:d1:a3:17:c7:95:
0e:9b:7f:f1:27:32:d6:3b:77:0d:4a:dd:10:fb:5f:10:3f:ed:
a0:5a:6b:ac:1c:f3:49:b1:18:fd:2a:fe:36:8b:5b:eb:1e:41:
06:da:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org