Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/NRC3HrdWP8ACe71918XHcI-5JX0.roa
File: NRC3HrdWP8ACe71918XHcI-5JX0.roa (raw, json)
Hash identifier: Peq1o+iho1MFGcl2I1PpVHPRqeplde8iOw7+0EZtVRY=
Subject key identifier: 35:10:B7:1E:B7:56:3F:C0:02:7B:BD:7D:D7:C5:C7:70:8F:B9:25:7D
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/NRC3HrdWP8ACe71918XHcI-5JX0.roa
Signing time: Thu 15 Sep 2022 02:38:24 +0000
ROA not before: Thu 15 Sep 2022 02:38:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17415
IP address blocks: 103.152.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Sep 15 02:38:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3510B71EB7563FC0027BBD7DD7C5C7708FB9257D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:bc:61:3b:2e:49:12:37:99:32:0b:f5:86:
e1:6a:5c:78:8a:a2:e4:64:f7:be:eb:95:a8:6b:45:
08:a3:a2:11:a5:9e:cd:cb:e8:f0:a6:4a:72:9d:18:
15:83:3e:81:94:c5:5a:c0:5b:13:68:8e:29:dc:82:
ab:7d:12:71:9c:dc:88:e6:a9:91:02:fd:d8:99:4b:
a1:1d:b3:11:52:73:87:97:e9:5b:f8:6c:d1:3b:ab:
e9:14:19:d9:d6:c5:f4:76:03:fd:ea:10:29:7b:73:
a4:2d:e9:8e:47:03:f7:3d:00:7e:3a:2b:f0:34:8d:
0e:cf:9c:a0:ea:f0:41:31:25:35:fc:29:71:9f:96:
0a:b4:33:1e:f1:ee:85:89:b1:62:4f:f7:a9:4e:ed:
58:96:70:bb:ae:2d:3e:0b:79:36:eb:49:6d:d9:f2:
5f:cf:96:09:9f:f4:58:5f:9c:46:60:b7:cb:ef:db:
ce:60:64:d6:0f:60:de:f4:16:f0:71:91:a5:d7:02:
9c:a9:17:c5:33:45:09:24:3a:f5:98:d7:7a:92:21:
c9:b7:cf:e7:69:0b:0b:b7:ae:b2:be:b5:02:1b:78:
36:39:e1:a6:c2:d5:a7:f5:53:90:a4:77:08:41:52:
14:40:88:93:53:bb:b7:01:fe:cf:a9:b5:de:66:7d:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:B7:1E:B7:56:3F:C0:02:7B:BD:7D:D7:C5:C7:70:8F:B9:25:7D
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/NRC3HrdWP8ACe71918XHcI-5JX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f9:a5:a7:57:dc:0d:45:59:70:a4:18:d6:8d:65:5f:63:51:
5f:e4:46:44:91:b9:d4:9a:1a:0d:02:cb:33:8f:89:b9:43:08:
4e:cc:a1:0a:03:78:f7:97:1c:2c:54:b2:e6:4b:7a:79:ef:54:
fe:ed:9d:23:61:06:bc:7a:ac:a9:68:94:08:36:34:f2:62:55:
9b:b3:6b:64:ca:47:bb:1a:a7:49:4c:96:df:bd:e1:2d:f2:c1:
1b:5a:90:5c:4a:c6:a9:5e:ce:c1:27:bf:be:5d:7f:b1:a1:5d:
17:b9:dc:0a:be:b6:0a:8f:81:21:3c:44:8a:f2:c6:ec:fa:4c:
09:9d:24:7a:dc:30:5b:f0:20:6c:c5:82:52:f7:19:50:e7:6f:
c6:43:0b:e3:80:4e:2c:91:22:62:5e:62:56:59:f2:bb:f0:f1:
32:6c:8f:93:78:e8:83:32:ff:67:57:ed:89:19:71:fe:8d:0b:
f0:02:17:29:fe:d7:f5:a5:c3:88:ee:17:cf:9b:d2:ac:b3:3e:
ae:0a:a9:12:2d:ad:16:d4:d2:45:e9:9e:a3:4f:fb:aa:99:ec:
4c:57:fd:87:f3:d7:aa:cb:6d:d8:f9:18:c4:cb:fe:d1:99:d5:
4c:64:24:7e:5b:9b:a7:ba:6c:00:7c:32:6d:53:86:99:de:a8:
91:f5:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org