Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/7XClYeYKSTZP1D3ygwLSuF8mGeA.roa
File: 7XClYeYKSTZP1D3ygwLSuF8mGeA.roa (raw, json)
Hash identifier: GSOd5K3vD4LIkGE93oh5R5E2jrhedU8qcy+O9BzMNqg=
Subject key identifier: ED:70:A5:61:E6:0A:49:36:4F:D4:3D:F2:83:02:D2:B8:5F:26:19:E0
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 0E54
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/7XClYeYKSTZP1D3ygwLSuF8mGeA.roa
Signing time: Wed 29 Sep 2021 02:38:30 +0000
ROA not before: Wed 29 Sep 2021 02:38:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 48024
IP address blocks: 103.127.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3668 (0xe54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Sep 29 02:38:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=ED70A561E60A49364FD43DF28302D2B85F2619E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:d1:95:30:79:06:ff:7d:48:63:ab:14:00:
7e:a8:45:11:99:14:c8:51:8f:0e:4f:10:a2:93:1a:
a9:cc:ee:b6:a3:11:e6:5f:9c:83:ac:f3:85:05:68:
7a:f7:0e:54:50:23:77:05:c9:e2:ba:e1:da:07:2e:
ab:46:9f:7a:bf:34:cd:b7:21:2e:8a:88:1b:a5:2c:
b1:80:9c:a9:2e:65:2d:e5:44:e2:90:f4:45:81:cb:
74:05:42:92:74:63:f3:58:19:47:88:57:5e:71:ed:
28:bc:e2:9d:ff:89:06:1b:b3:b8:d8:48:7c:37:63:
06:18:6f:a1:81:63:2d:ab:6b:ad:fc:cf:b5:d2:94:
b2:28:e2:1a:d1:38:0f:99:35:09:90:b9:1a:b1:e9:
1d:b9:cf:fc:b3:3f:ca:73:f6:3d:3e:41:fa:c5:06:
2a:b2:e2:13:dc:37:b8:a4:76:8f:05:ae:9d:09:ac:
01:23:f5:84:c0:7f:51:ed:5b:68:70:4b:4f:95:a1:
11:c2:1f:e8:4f:48:64:72:7b:f5:40:38:af:71:63:
8f:ab:de:f4:3e:05:90:f7:23:cd:ca:fa:74:51:c3:
8e:09:a6:3a:dc:28:f1:e9:3e:cc:87:35:39:79:3c:
68:76:fa:89:b7:11:67:5b:a1:db:bd:77:29:65:df:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:A5:61:E6:0A:49:36:4F:D4:3D:F2:83:02:D2:B8:5F:26:19:E0
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/7XClYeYKSTZP1D3ygwLSuF8mGeA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.240.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f0:ab:cf:aa:08:bd:11:a9:74:05:3c:74:4d:77:08:05:f8:
97:0c:23:2b:9d:67:4e:d1:83:98:d9:13:1a:bf:7e:5a:05:f3:
60:6e:dc:64:81:2b:d0:cd:ee:91:6c:ec:09:23:ba:dd:dc:ea:
7b:c3:ac:08:74:b4:93:97:34:8a:75:20:f3:80:8d:33:62:0a:
07:f0:75:ff:12:73:0e:bc:03:b4:88:74:5b:2c:53:e9:5f:d8:
4f:57:fd:9e:1c:dd:f2:9c:94:28:ec:6a:f9:f4:ee:30:6a:6a:
71:fb:12:9c:80:7b:b3:30:63:c3:2e:2f:35:36:7b:4c:3a:a8:
23:fd:ff:0d:61:ce:5d:42:5d:cf:c2:89:24:34:96:c7:a5:2f:
b2:9d:ab:c0:1e:44:e0:e7:41:0d:b9:27:7c:05:c5:a3:65:5d:
15:b9:88:5b:da:e1:8c:cf:bc:fd:c3:71:65:8a:4a:1c:ce:37:
e7:f8:5b:59:4a:02:0e:04:23:f8:6e:62:f1:ed:63:5a:c5:67:
63:a2:dd:9d:1c:c5:ef:e0:f8:2d:69:fe:7b:1e:c2:b9:b0:2c:
99:79:2d:02:c3:d6:d5:14:1c:75:c8:ca:ec:4a:2c:53:6c:8d:
3b:78:56:3d:89:78:62:2e:bd:d9:9e:fd:8e:bf:cc:af:fb:d7:
15:d4:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org