Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/Dn_d7LUmZBounG6-hiBIwto6vLA.roa
File: Dn_d7LUmZBounG6-hiBIwto6vLA.roa (raw, json)
Hash identifier: ypKBm2NQIszbBLMtneU+n1mivGUv7lU/k71YfkERod4=
Subject key identifier: 0E:7F:DD:EC:B5:26:64:1A:2E:9C:6E:BE:86:20:48:C2:DA:3A:BC:B0
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0954
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/Dn_d7LUmZBounG6-hiBIwto6vLA.roa
Signing time: Wed 29 Sep 2021 02:53:15 +0000
ROA not before: Wed 29 Sep 2021 02:53:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18179
IP address blocks: 103.16.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 29 02:53:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0E7FDDECB526641A2E9C6EBE862048C2DA3ABCB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:03:06:d4:e6:a8:92:8b:65:68:cd:8a:05:
73:70:a9:d3:e6:d5:84:61:af:82:62:69:67:e3:c5:
75:20:33:41:ad:91:4e:79:89:85:ac:d9:69:f4:f0:
fb:f9:af:fb:82:f8:28:29:1e:6d:8c:50:b4:e8:45:
fb:cb:06:de:a7:b5:e2:12:0f:69:56:33:47:a4:f0:
0f:c7:8a:14:6e:2e:39:f2:22:11:41:43:89:73:6c:
f4:c2:6b:9b:d9:78:50:ac:aa:5f:e5:54:2c:20:1a:
56:2a:4a:0e:f8:08:68:a5:c7:c1:f8:ab:8c:18:4f:
06:1e:d0:d3:9c:bf:23:fb:eb:e8:1e:7c:69:c4:4f:
90:e5:e7:0b:d7:e7:cb:67:d6:63:28:04:e8:99:6e:
4d:23:89:03:90:d0:c0:0a:b1:88:88:50:83:7b:fb:
ce:5d:43:05:c8:bc:fa:e0:73:ad:8f:23:06:f0:71:
37:50:ac:bc:89:b9:71:24:b7:2a:6e:a1:25:b5:66:
4f:8c:67:bc:86:27:13:6c:e9:d2:f0:0d:76:e0:49:
c9:d3:57:f9:a9:af:4c:e4:75:a1:4b:38:80:fc:25:
03:cb:5b:36:e0:c5:e6:81:37:61:fd:f8:ab:7f:78:
d1:5f:2b:df:43:0e:3e:06:28:a3:76:d2:8b:48:2e:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:DD:EC:B5:26:64:1A:2E:9C:6E:BE:86:20:48:C2:DA:3A:BC:B0
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/Dn_d7LUmZBounG6-hiBIwto6vLA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:31:e9:ef:a0:3d:20:10:55:a7:a3:2d:e1:eb:4f:94:55:ad:
75:61:38:da:c2:04:71:5d:04:68:71:f5:9c:ec:76:da:f4:06:
4c:38:cc:c2:e6:bf:74:88:18:3a:34:6c:c1:f0:09:19:a2:eb:
06:1d:ac:ed:6d:a2:98:76:e5:0e:75:a1:02:35:c4:32:a7:b9:
95:7b:9f:16:a8:c3:4e:e5:a6:85:0f:5e:59:88:09:50:cf:28:
5a:ed:76:a5:8b:ea:93:bd:c2:8b:3a:53:0b:b9:2d:4e:ce:49:
15:c5:6f:84:6e:77:e4:d9:0b:3c:84:41:43:a5:05:d2:51:f0:
ac:c0:22:54:62:5d:db:8d:23:7e:ac:59:4b:4d:f4:17:95:96:
b0:03:52:0e:6a:9b:e1:ad:0f:e2:75:6a:41:cc:e3:ce:09:fd:
f0:ef:5b:27:15:3b:61:16:5a:ac:75:5d:a3:72:bb:16:41:ef:
9d:c1:cf:79:90:59:f7:fd:e9:17:27:8a:7a:24:96:3e:75:83:
7f:61:38:16:37:15:a5:f3:fa:f3:cf:a3:73:29:08:24:a0:31:
c6:e3:94:60:13:d7:fe:c6:a2:69:cf:bd:4f:2a:d6:b7:b4:f8:
dd:4b:49:df:08:e5:1f:c6:d2:19:0d:15:2c:23:33:b8:77:b0:
6f:35:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org