Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/YrbeZBaQ9KS0ob9xyLccSdGbXk8.roa
File: YrbeZBaQ9KS0ob9xyLccSdGbXk8.roa (raw, json)
Hash identifier: 2xHCJizjw2vZscEgvhg4cPsNSXaK/a/w8IDhGCSpX9c=
Subject key identifier: 62:B6:DE:64:16:90:F4:A4:B4:A1:BF:71:C8:B7:1C:49:D1:9B:5E:4F
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/YrbeZBaQ9KS0ob9xyLccSdGbXk8.roa
Signing time: Thu 15 Sep 2022 02:38:24 +0000
ROA not before: Thu 15 Sep 2022 02:38:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17415
IP address blocks: 103.152.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Sep 15 02:38:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=62B6DE641690F4A4B4A1BF71C8B71C49D19B5E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:34:58:84:02:63:70:cd:99:fc:46:85:a2:
3a:b8:bc:c4:c8:cd:28:c4:54:5f:1c:61:49:6e:98:
77:8b:18:96:b9:76:e8:cb:6f:30:78:ad:0a:9e:68:
4c:41:da:6e:38:4a:a6:b9:3a:ca:d1:eb:39:0b:e4:
5c:9b:ed:d8:14:cf:97:c9:a1:d5:90:fd:5e:8e:96:
47:0c:86:51:c0:99:d4:fb:00:4a:0e:44:3a:99:59:
50:e9:d4:fb:46:61:1e:40:57:d5:a5:ef:3c:7e:28:
bc:19:58:0b:ec:be:40:e4:73:9a:a1:8f:83:be:e2:
6b:66:36:4c:63:d2:2d:93:d8:3f:8e:0c:df:9b:f3:
9e:35:92:0e:a6:96:32:80:d7:64:15:e1:f4:eb:e5:
bb:a4:de:9b:08:ef:c2:d6:b4:08:e2:4b:76:77:be:
f8:62:c5:8c:1e:61:e2:a7:5f:0e:cb:21:12:85:3f:
8c:12:aa:76:f8:e9:39:22:58:27:2c:2e:5b:f1:3f:
f7:3f:9f:09:31:05:fb:3f:0c:5b:8a:22:16:ca:cf:
ef:59:8d:a1:4e:21:06:7c:1b:24:b9:27:12:b3:78:
df:0b:49:87:70:e8:45:50:9c:65:e5:91:2f:f1:22:
07:67:e8:66:2b:91:08:23:2b:92:85:3c:e5:54:21:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:DE:64:16:90:F4:A4:B4:A1:BF:71:C8:B7:1C:49:D1:9B:5E:4F
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/YrbeZBaQ9KS0ob9xyLccSdGbXk8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.203.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3d:aa:44:c7:90:9a:f2:f3:8b:2e:04:70:9b:7c:e0:c4:d3:
69:2b:74:ba:6e:4a:ad:83:13:4c:d5:ba:91:ad:90:7a:40:82:
24:12:33:5e:6f:b2:e2:d8:e4:f0:f6:da:a6:f5:37:5f:47:00:
74:b8:50:7a:e4:87:fe:0f:f6:a3:6a:0a:6b:e3:f8:4c:c5:59:
25:7a:dd:5b:ee:52:37:7d:55:50:eb:23:5c:97:23:f5:b3:a2:
a8:95:6f:35:d5:19:e1:ab:ee:d6:61:26:d5:9b:5f:93:6c:3a:
68:a4:c1:43:3f:6e:5f:27:f8:8d:ea:82:34:a7:cc:18:1e:7f:
d9:f5:c0:30:83:0e:5e:4c:47:9c:93:9a:a6:13:db:7c:13:d2:
de:a0:9f:07:8d:4a:be:56:c8:57:86:f6:e5:a5:ef:5d:9f:e5:
b1:25:2b:7a:3f:6a:a2:2c:af:75:55:78:98:4f:39:23:4b:26:
0a:df:3e:8e:3f:0a:f2:59:f0:3b:02:b7:2e:a5:02:17:68:25:
9d:55:1d:3b:9d:69:48:03:a5:c3:f3:06:08:df:02:7e:b1:36:
5b:0a:56:fa:a1:ee:9d:a1:4d:ea:94:e2:03:71:f1:0f:e1:33:
55:65:cd:6d:46:94:59:82:d0:bf:9d:4b:4c:6f:a8:c9:2b:08:
14:0d:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org