Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/_Z-aHuSt71NTJpArHkTc_ah2RdY.roa
File: _Z-aHuSt71NTJpArHkTc_ah2RdY.roa (raw, json)
Hash identifier: oP3mTZDg7S6UM05MTBGxr3W2XhkXZ5q3KKOngNPU0a4=
Subject key identifier: FD:9F:9A:1E:E4:AD:EF:53:53:26:90:2B:1E:44:DC:FD:A8:76:45:D6
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/_Z-aHuSt71NTJpArHkTc_ah2RdY.roa
Signing time: Thu 15 Sep 2022 02:38:22 +0000
ROA not before: Thu 15 Sep 2022 02:38:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131682
IP address blocks: 103.152.202.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Sep 15 02:38:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD9F9A1EE4ADEF535326902B1E44DCFDA87645D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:2a:60:ff:75:da:25:c3:38:dd:6b:3f:d2:
89:be:60:0e:fd:0b:7d:09:49:77:bd:c1:46:5c:d9:
f7:11:40:07:73:6c:ec:89:02:c8:26:f8:7b:05:f4:
cc:fc:41:58:c3:d6:56:25:03:38:76:e0:b8:ba:d1:
12:f8:87:37:8c:5d:d7:08:48:27:b3:97:90:1c:62:
40:4c:8a:a5:34:df:43:f0:b0:7a:01:a8:81:01:97:
26:b0:3f:51:89:4b:b3:fb:82:01:3f:fd:e8:1e:9c:
c7:f1:d2:51:46:89:8b:67:db:ac:ba:62:8e:3a:43:
cc:ef:79:12:69:4b:a1:4e:16:e2:5f:dd:e4:b3:b1:
6a:a8:5e:62:e2:fd:fd:bd:fd:43:5b:2b:bd:f4:0c:
6f:0b:83:e1:f2:c5:cb:01:3f:37:1c:8e:ba:3d:ce:
01:bb:c9:6d:fb:7a:ef:59:0f:96:bb:bf:69:38:fd:
bc:99:4e:d0:41:f6:c1:c5:86:dc:81:73:c1:0e:86:
1d:d5:a4:9c:d9:a4:e4:cc:95:69:6b:e7:1f:ce:fa:
b8:cd:be:15:e4:3e:98:6d:16:92:23:02:6e:8a:97:
8c:57:10:c7:aa:37:3f:0f:10:61:9e:74:35:76:a5:
a3:a7:6a:e3:05:cf:d4:57:72:f7:fc:83:76:a6:f9:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:9A:1E:E4:AD:EF:53:53:26:90:2B:1E:44:DC:FD:A8:76:45:D6
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/_Z-aHuSt71NTJpArHkTc_ah2RdY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:4c:ea:ac:76:26:50:94:3c:cc:a0:80:9d:18:e8:32:27:61:
75:0e:87:1b:28:c2:3f:2c:f0:6a:e2:ca:42:9e:14:42:bd:71:
d5:04:5e:26:3b:66:e0:29:bf:64:5c:1e:a2:6f:29:dd:bc:b3:
94:1c:00:9e:68:3b:79:2e:64:95:78:ae:87:88:48:89:b9:39:
2b:e0:4c:d7:65:f0:11:3a:52:ee:12:da:18:6e:b5:5c:29:85:
a6:50:b6:36:a5:99:b2:85:94:79:41:de:63:ca:19:1e:9d:5f:
2a:78:2f:93:99:48:03:17:02:4b:84:79:26:bb:f3:d5:04:e7:
d4:61:f7:e2:56:f9:f1:fd:0c:3f:1c:0d:7c:1f:18:1c:41:32:
4d:d8:fc:29:5e:b9:b5:31:4a:f2:36:6b:8f:5f:d7:fe:1d:1c:
28:70:fc:b7:51:c1:91:8a:98:c3:22:85:13:58:df:de:70:6a:
4a:30:ba:f7:c0:2d:bd:a5:e3:10:6f:01:1c:68:ac:de:75:a5:
84:cf:ec:e3:92:09:0b:8d:a1:2c:01:59:e9:08:a5:32:e8:7f:
d2:37:0d:a1:d4:5a:29:f7:51:17:0e:7d:1a:86:07:87:a7:c3:
5a:0b:6a:b9:cf:d2:52:69:a8:5e:9f:10:3d:9e:fb:d7:48:5f:
5c:53:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org