Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/dtfnPnXeNICbTH-RWJHuS_JbZ_Q.roa
File: dtfnPnXeNICbTH-RWJHuS_JbZ_Q.roa (raw, json)
Hash identifier: 41cRE5mipNjmNOUVc5n0ttBlAuNFCg1aQ36qr+COpfI=
Subject key identifier: 76:D7:E7:3E:75:DE:34:80:9B:4C:7F:91:58:91:EE:4B:F2:5B:67:F4
Certificate issuer: /CN=98A5C390143149481DE79BC17BB62DBA2271F61F
Certificate serial: DF
Authority key identifier: 98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/dtfnPnXeNICbTH-RWJHuS_JbZ_Q.roa
Signing time: Sun 21 Nov 2021 16:41:50 +0000
ROA not before: Sun 21 Nov 2021 16:41:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131618
IP address blocks: 103.159.120.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98A5C390143149481DE79BC17BB62DBA2271F61F
Validity
Not Before: Nov 21 16:41:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=76D7E73E75DE34809B4C7F915891EE4BF25B67F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:15:28:3d:e5:eb:89:3c:38:cd:e8:19:96:
4a:b0:db:f0:63:bc:1c:e6:72:0b:71:b2:9c:25:df:
ea:3a:dd:d5:b5:8c:be:7f:7e:a9:f6:ae:f6:24:2a:
85:20:25:ed:5c:08:ea:c2:6b:af:8a:65:16:6a:ac:
f2:b8:79:83:7e:7c:28:32:3a:e2:4d:d2:cf:50:54:
42:ea:29:08:e2:e5:fb:86:17:6e:62:57:2a:41:9d:
ce:fe:94:0b:bd:bb:1a:e8:da:b8:e8:c5:c4:cb:43:
45:24:d2:7e:11:dc:f5:c0:24:59:88:37:14:bb:e3:
22:5a:31:0a:73:2c:b8:56:b1:d5:8b:81:40:6d:cd:
3d:50:a5:c3:cf:09:78:d2:d2:c1:06:dc:d2:81:c3:
7b:89:4a:34:84:79:21:ed:b8:f4:b7:d9:44:19:51:
b5:c4:87:07:6d:87:6a:8d:22:bc:4f:fa:b8:84:78:
f0:38:2f:4b:7c:ad:0f:a2:e4:29:b4:73:6c:93:00:
c8:ae:17:05:bd:44:7f:6d:5d:09:0e:7c:73:bc:0d:
f1:81:55:6e:55:19:53:04:a8:32:cd:e4:e5:8f:41:
4d:f6:bf:99:13:c2:50:70:ec:eb:46:a1:be:f7:29:
e9:60:e2:79:48:b5:41:de:5f:4c:3a:53:f7:c2:3e:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:E7:3E:75:DE:34:80:9B:4C:7F:91:58:91:EE:4B:F2:5B:67:F4
X509v3 Authority Key Identifier:
keyid:98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/dtfnPnXeNICbTH-RWJHuS_JbZ_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.120.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:c8:a2:33:57:e1:4a:f1:a4:4b:03:25:79:48:47:0a:d8:8f:
5f:7a:d9:1a:36:03:01:e1:20:39:70:c6:c6:53:53:cf:38:43:
81:c9:fc:b4:d1:92:ed:92:13:3a:24:86:0b:b8:8d:16:f8:25:
04:18:42:d4:70:7f:b7:22:4f:83:9f:8e:b8:75:2d:83:d2:95:
21:3c:d1:bb:d7:58:6f:c8:f2:fe:34:c6:f6:dd:ad:fb:70:2e:
ca:0e:07:70:25:f0:7e:eb:ee:b7:fc:94:eb:d7:00:60:4d:d8:
cb:8a:94:b1:46:61:1a:ee:6d:7a:02:17:34:56:b0:c8:f4:1d:
8e:b9:96:31:e5:43:f1:3d:c0:b6:bf:12:7c:ff:df:7a:b5:54:
ea:13:8f:7b:6b:c8:11:eb:a1:50:40:d6:da:b8:c3:6e:97:03:
1f:5f:2e:19:01:88:71:32:6c:61:c4:11:32:66:54:47:4e:08:
6e:31:fb:08:2f:9a:35:77:4a:f9:07:6c:2b:62:9e:de:d7:bf:
33:87:70:c7:3c:40:25:34:dc:a8:42:e3:5e:c1:c9:9e:02:63:
b9:56:93:02:84:66:5c:43:fe:96:76:6b:c0:6a:c7:34:f7:80:
b0:b0:98:66:76:36:0a:1c:5c:76:38:69:b0:ff:4c:62:af:79:
0d:5d:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org