Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKPC/LuqF4TZMksH5T9_26bNFtQPuskM.roa
File: LuqF4TZMksH5T9_26bNFtQPuskM.roa (raw, json)
Hash identifier: D9mz29yiVG4VVuCqlrspaJlGMyfWs0LZdMrvvSciP4c=
Subject key identifier: 2E:EA:85:E1:36:4C:92:C1:F9:4F:DF:F6:E9:B3:45:B5:03:EE:B2:43
Certificate issuer: /CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Certificate serial: 08FD
Authority key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/LuqF4TZMksH5T9_26bNFtQPuskM.roa
Signing time: Tue 29 Sep 2020 10:04:43 +0000
ROA not before: Tue 29 Sep 2020 10:04:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131645
IP address blocks: 103.141.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Validity
Not Before: Sep 29 10:04:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EEA85E1364C92C1F94FDFF6E9B345B503EEB243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:05:ac:39:1a:c1:2a:5b:8c:2b:6e:bb:4c:
a6:57:13:1a:72:84:15:34:66:45:92:f6:ff:7e:86:
a3:1b:c9:55:21:9f:6b:37:6d:be:cd:c4:fd:0a:ba:
88:9a:3e:67:65:a6:91:a0:4f:17:f8:4f:59:0f:5d:
9e:8a:23:67:ab:7c:65:2a:12:0b:f3:72:c0:9a:16:
50:64:04:f8:83:32:d0:08:ff:25:74:12:5f:1a:9c:
9c:94:79:e4:ad:26:35:78:11:f6:78:8f:b5:4c:a9:
10:3d:75:55:5b:37:2f:0e:e8:18:ec:6c:73:10:40:
22:63:de:c9:60:89:4e:bb:33:70:4e:bb:ef:60:47:
3c:c2:42:2c:20:e1:25:70:58:ca:90:18:f0:3b:80:
8c:c6:42:21:73:69:50:b0:b7:5b:60:07:c2:0b:33:
91:e3:19:e5:f2:83:69:71:22:ba:25:34:44:f2:0b:
1f:6c:95:d3:94:55:0e:cd:64:5c:9a:36:12:8d:cf:
cd:fa:c0:6b:7b:8b:f4:d1:d8:c6:53:53:4d:d3:5f:
e9:e8:8d:a2:3d:ad:0f:32:d0:c2:e8:98:01:a2:bb:
a2:66:54:86:38:dd:1e:eb:9f:3e:4b:d8:74:de:17:
01:31:e9:05:a7:15:12:a4:4d:bf:87:e8:2c:f7:db:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:85:E1:36:4C:92:C1:F9:4F:DF:F6:E9:B3:45:B5:03:EE:B2:43
X509v3 Authority Key Identifier:
keyid:CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/LuqF4TZMksH5T9_26bNFtQPuskM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b4:67:5a:60:ec:f7:bd:41:5e:68:ff:94:20:0f:76:67:82:
e7:f2:3a:1c:dd:92:f8:a5:c7:a9:c3:eb:0c:7c:50:87:c2:14:
fb:ef:fc:ad:98:c8:a9:a5:de:9d:61:10:f5:d0:3d:1a:11:38:
25:ae:a7:1e:cd:8b:e5:7b:64:59:95:19:06:89:fe:91:0d:f1:
e3:52:ed:72:12:6d:49:0b:d8:2b:7d:d0:7c:ed:5b:b1:a8:05:
91:51:62:f4:5c:4e:fa:c1:10:8f:1b:85:05:e9:ee:cb:4e:a5:
d4:0a:d7:10:68:ae:aa:5d:46:9b:15:c1:62:b7:ff:2c:b7:f8:
f9:70:88:e5:1c:dd:ef:fa:a0:cc:ea:a1:67:78:ea:72:65:35:
cd:77:48:23:1d:19:4f:c3:75:e5:cc:8f:73:84:0b:63:af:4a:
66:0b:52:08:00:24:18:7a:93:18:0a:d5:62:b8:14:2f:e2:c0:
50:da:cf:05:5d:f8:f7:6f:44:30:80:ac:33:0f:bc:38:ff:39:
0e:65:cb:90:82:b1:f6:92:6f:50:14:ec:2c:36:f5:0f:28:f9:
eb:08:c1:b5:db:d1:b0:81:46:bd:2b:51:14:23:b7:85:3b:c1:
e6:72:c4:70:e9:d2:bb:18:54:b1:73:67:de:6b:a0:3d:0c:a8:
8f:81:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org