Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/qGrG3Y_Z8zLZSis3JlSoaslnte8.roa
File: qGrG3Y_Z8zLZSis3JlSoaslnte8.roa (raw, json)
Hash identifier: kfYy3NPLjfvcNK2IpMUfMpxV0i1I3CloQYOypVKO6Ko=
Subject key identifier: A8:6A:C6:DD:8F:D9:F3:32:D9:4A:2B:37:26:54:A8:6A:C9:67:B5:EF
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 0F43
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/qGrG3Y_Z8zLZSis3JlSoaslnte8.roa
Signing time: Thu 15 Sep 2022 02:38:51 +0000
ROA not before: Thu 15 Sep 2022 02:38:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 48024
IP address blocks: 103.127.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3907 (0xf43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Sep 15 02:38:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A86AC6DD8FD9F332D94A2B372654A86AC967B5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:cd:31:06:94:37:44:fe:19:cc:a2:13:6f:
b1:16:81:1c:8f:20:d4:ec:8c:95:78:82:a7:12:38:
ab:e3:c5:34:29:3e:04:4a:46:27:d2:69:d3:dd:65:
aa:ca:88:cd:1e:b9:06:02:09:c1:b6:d2:af:24:4a:
2d:71:cc:18:68:b7:49:4b:25:1a:12:96:2e:ca:09:
83:5c:fa:5c:5d:f3:34:06:c6:96:f5:5e:97:ca:7e:
ec:30:80:07:66:d1:bc:0c:ce:ad:80:2f:72:e3:10:
be:79:ae:21:21:b7:5f:71:20:c1:a6:80:0b:47:cc:
c9:60:a9:f6:37:7d:d7:69:36:77:19:89:f3:bc:88:
e8:27:95:26:a9:7a:4e:e3:cc:4f:f5:34:a3:07:7e:
31:e0:24:34:f6:f2:9b:af:9a:64:e7:79:53:b8:dd:
88:cc:17:13:b2:e4:23:2a:98:85:96:2d:fe:fa:76:
19:29:80:99:7a:63:92:86:02:16:01:b2:dd:e7:1d:
69:5e:d3:80:26:13:91:95:6b:87:16:5f:2f:65:49:
a9:6c:36:9b:aa:bd:cb:d2:49:04:4e:19:7d:96:94:
85:62:80:23:0c:e1:ca:73:56:04:d7:ea:9f:8e:c8:
09:06:37:c3:5c:d0:ba:f7:3b:2a:1f:ca:c7:91:89:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:C6:DD:8F:D9:F3:32:D9:4A:2B:37:26:54:A8:6A:C9:67:B5:EF
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/qGrG3Y_Z8zLZSis3JlSoaslnte8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.240.0/22
Signature Algorithm: sha256WithRSAEncryption
89:81:0e:ff:b5:87:65:7c:e3:e4:2b:88:85:2b:36:45:15:44:
c4:f2:97:4b:c0:e5:34:f7:de:da:c6:01:e6:70:7f:22:d1:98:
b9:2c:5a:dd:c1:2c:b9:e4:65:70:58:6a:68:ef:5a:c2:e2:32:
b4:f9:a3:35:1a:ed:73:46:29:fe:96:57:34:25:bf:28:66:66:
87:be:78:7b:8d:a7:1b:7f:8b:87:d1:08:df:81:31:da:3e:0b:
c1:9c:a7:34:53:b5:31:ec:e3:38:27:ff:d6:7f:56:00:2b:75:
13:65:44:ba:ce:9d:20:a7:13:76:91:90:8a:dd:48:ab:45:47:
72:82:5a:93:c0:18:39:2d:48:26:bd:50:aa:ca:eb:d2:7f:ed:
99:a9:cc:f5:77:9a:ac:c6:5f:d7:08:44:24:70:c5:0e:09:72:
46:61:e0:72:d2:3f:cc:ba:46:f7:3e:68:1e:f8:c2:0c:d9:94:
dc:9a:d7:cf:b0:18:98:fa:96:04:d5:2b:6a:4c:51:3c:ba:a2:
cd:33:c8:a8:9f:90:8f:58:06:15:1f:4f:37:ff:51:0a:f8:d2:
26:76:e8:22:dd:aa:03:b3:fb:50:e6:86:eb:8d:83:17:a0:c3:
50:dd:e4:87:4b:42:ee:a3:97:57:b8:88:32:ec:bb:7d:00:22:
7e:97:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org