Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/RP7fje7kKkb1YFktwPxrsw-O2pc.roa
File: RP7fje7kKkb1YFktwPxrsw-O2pc.roa (raw, json)
Hash identifier: mqYtudhelNV+og8GJt6WApZHrQTnAwvmxbyC8kyWFaw=
Subject key identifier: 44:FE:DF:8D:EE:E4:2A:46:F5:60:59:2D:C0:FC:6B:B3:0F:8E:DA:97
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 0DB6
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/RP7fje7kKkb1YFktwPxrsw-O2pc.roa
Signing time: Sun 07 Feb 2021 13:04:55 +0000
ROA not before: Sun 07 Feb 2021 13:04:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 48024
IP address blocks: 103.127.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Feb 7 13:04:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=44FEDF8DEEE42A46F560592DC0FC6BB30F8EDA97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:ec:28:6c:10:64:2b:c9:4f:e2:4d:5f:76:
7a:bc:90:88:79:b1:bd:0b:04:4b:72:5a:27:c7:75:
03:c5:5b:16:a7:53:e3:58:ba:06:fa:f1:7d:5d:c1:
04:8b:d4:b2:fa:e8:c1:40:a3:27:dc:14:8b:98:44:
87:99:a0:66:ba:b9:4a:ef:30:68:88:77:a1:1e:26:
39:b8:e2:4f:6f:a6:6e:72:83:aa:ed:e7:70:df:32:
f8:a7:6f:2b:f4:89:d2:40:4d:57:4a:31:85:85:5b:
aa:cf:63:b6:0c:d6:fe:bf:06:26:37:68:fb:95:82:
9f:97:96:be:a6:9c:9b:3c:68:33:71:56:3e:b9:e3:
d7:cc:3b:ff:f9:8a:df:16:d3:7c:43:3b:30:11:ad:
b4:f5:c9:4c:3b:12:7a:1a:04:c3:98:a2:a0:76:ba:
b5:b1:94:04:5f:2d:b0:90:8e:b8:d6:45:07:bd:2a:
a4:d7:72:c3:99:a5:b1:02:94:85:9d:b0:cb:81:54:
45:ab:94:1a:3f:d1:f5:98:76:e9:95:23:48:78:9b:
85:c6:10:85:d7:96:94:77:55:d5:17:06:7b:f7:fb:
63:a6:29:19:5b:32:94:6d:70:0d:16:95:bb:39:c4:
4a:30:23:bc:33:f8:c4:5c:28:9f:55:f9:72:15:19:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:DF:8D:EE:E4:2A:46:F5:60:59:2D:C0:FC:6B:B3:0F:8E:DA:97
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/RP7fje7kKkb1YFktwPxrsw-O2pc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:f9:30:24:76:48:28:22:a0:d5:79:a3:64:dd:d1:a8:24:db:
3b:af:6f:db:2f:8c:bf:f2:10:cc:1f:3a:27:2b:c5:7b:15:99:
1c:82:a2:d4:27:90:be:0c:dd:b6:15:b7:7a:82:62:e7:bb:58:
20:8c:63:6c:50:00:4e:66:cf:d6:80:86:5f:99:fc:e6:55:6d:
8d:99:56:ec:19:e7:00:a7:0e:c5:c1:39:d2:aa:61:a9:96:96:
03:42:1a:31:a1:e4:e6:bd:63:58:08:7b:2e:cb:12:78:89:60:
78:c8:73:ac:9e:b7:79:bc:5e:bd:fd:12:91:22:b2:39:31:07:
bf:7f:57:44:ec:4a:e4:0d:62:f1:59:28:cf:36:c8:5d:d8:0d:
fe:d2:0d:38:87:2d:d6:1a:41:66:c2:ec:24:bd:7d:06:39:7c:
f9:09:66:84:79:d2:24:f9:40:2c:f8:2f:18:fd:28:3d:70:ad:
1a:6f:56:b2:fc:3e:f2:be:d6:d4:74:ce:f6:5c:af:d2:26:be:
0a:7c:04:13:32:5d:42:cb:b8:6f:d1:91:a7:b6:0d:ed:95:71:
99:45:0b:04:cd:8f:a3:bd:60:b9:d4:6e:9a:75:3d:ac:c8:27:
26:95:1b:41:fe:04:d8:e0:41:1f:67:c2:12:a2:63:f6:e4:9b:
c9:27:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org