Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/3vFNOUz8B2Uqavc85jiNbD7hkSU.roa
File: 3vFNOUz8B2Uqavc85jiNbD7hkSU.roa (raw, json)
Hash identifier: 3neYxUw93AXcpmm0n3xBJgJXNgRawI84sWnZHf05j6k=
Subject key identifier: DE:F1:4D:39:4C:FC:07:65:2A:6A:F7:3C:E6:38:8D:6C:3E:E1:91:25
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 033B
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/3vFNOUz8B2Uqavc85jiNbD7hkSU.roa
Signing time: Sun 07 Feb 2021 13:02:46 +0000
ROA not before: Sun 07 Feb 2021 13:02:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17415
IP address blocks: 103.152.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Feb 7 13:02:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DEF14D394CFC07652A6AF73CE6388D6C3EE19125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:f7:a2:1b:32:28:fe:5a:94:8d:fa:b0:1c:
f5:7a:75:0f:db:15:9d:f5:aa:f9:68:22:be:67:e7:
91:96:c8:c1:e4:2f:81:ef:1e:ec:c9:07:3e:91:65:
2d:0a:f8:cf:67:b9:fa:ec:3c:f7:35:b6:e3:69:20:
89:af:8a:0d:ee:d0:68:31:06:5f:d3:c2:2e:e6:dc:
46:f0:89:fd:76:0e:08:63:00:de:e8:2d:12:52:fb:
41:1b:6d:42:86:fb:6e:08:de:4c:83:60:e6:30:f4:
36:eb:b7:82:ba:44:b9:7b:c0:39:74:70:6f:cc:da:
7c:a9:37:b9:dc:fd:61:4a:73:97:23:54:26:eb:c7:
9a:a5:07:9f:d8:65:72:b0:ca:8a:8c:da:a3:09:2f:
37:c6:8a:19:15:15:fe:58:73:03:d1:24:0d:7f:03:
fb:97:e3:63:ae:7d:94:40:d9:9b:ba:3e:04:bf:95:
f1:90:c7:25:5e:76:65:8d:4c:66:19:71:34:67:9d:
e0:54:53:54:56:3a:55:a7:58:6f:93:ea:e9:58:19:
22:19:b5:33:5a:e2:ba:8f:f4:b7:4c:3f:77:32:d3:
b8:fe:70:0f:67:e6:dd:59:f7:e0:51:9d:2d:c6:3f:
bd:d9:aa:a3:c1:65:df:65:ee:d8:7b:da:43:ab:34:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F1:4D:39:4C:FC:07:65:2A:6A:F7:3C:E6:38:8D:6C:3E:E1:91:25
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/3vFNOUz8B2Uqavc85jiNbD7hkSU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:31:fa:a6:31:4c:de:11:ce:c3:42:4a:34:a6:88:4c:b1:7d:
36:30:5e:6f:40:9a:91:4e:e7:65:42:c5:fe:50:33:bf:62:00:
c7:82:af:0a:eb:f6:c1:7b:dd:26:ab:9c:87:81:64:61:4e:4a:
cb:0f:3d:69:f5:b4:db:85:6a:28:88:3f:38:8c:f9:34:0f:93:
43:46:32:10:d2:39:a1:c3:db:e8:a8:ab:ac:be:9c:e6:54:e2:
74:1a:19:b0:a9:c9:22:2f:7a:58:ca:ea:c9:ac:30:10:59:87:
3e:20:56:13:33:bd:1c:60:2f:c1:6b:9a:b4:5c:72:6c:99:68:
75:b3:bf:20:b5:f6:d9:25:18:dd:a8:ef:81:a7:b5:d6:b1:10:
8b:19:97:9c:e9:04:93:8f:d2:b2:dd:ba:40:4d:36:bc:0e:10:
77:87:42:d1:f1:58:e0:2b:e6:76:c1:1f:97:88:5a:c8:12:cf:
e9:d4:ad:64:0b:13:c9:1a:83:8c:38:43:b9:89:96:5b:ea:77:
86:0e:70:4d:2f:e2:af:36:57:97:c8:0c:ff:3c:45:70:73:7d:
24:af:c9:5c:10:b1:b2:44:3d:c9:52:0a:53:34:81:b3:e0:fb:
18:93:a1:d0:95:e9:64:87:48:c0:16:0f:17:56:78:91:3d:76:
14:e4:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org