Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/X-7A7BivfUzj_mni-BFUpcmR_6I.roa
File: X-7A7BivfUzj_mni-BFUpcmR_6I.roa (raw, json)
Hash identifier: 7QLj9YZp2HAvoMoksXyWXu99YNudPa9OoqMd5mrEJVQ=
Subject key identifier: 5F:EE:C0:EC:18:AF:7D:4C:E3:FE:69:E2:F8:11:54:A5:C9:91:FF:A2
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0779
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/X-7A7BivfUzj_mni-BFUpcmR_6I.roa
Signing time: Tue 29 Sep 2020 10:00:20 +0000
ROA not before: Tue 29 Sep 2020 10:00:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7539
IP address blocks: 103.124.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 29 10:00:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5FEEC0EC18AF7D4CE3FE69E2F81154A5C991FFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:2c:3c:4a:7e:3a:02:3c:bc:66:37:61:a6:
55:46:54:ac:63:7b:b3:40:c6:7f:22:cc:d6:25:3e:
de:11:66:aa:0b:06:0b:b7:92:8c:dc:e2:0f:77:ea:
c3:0d:fe:64:53:bd:fb:82:d4:52:b1:d8:e3:24:ed:
a5:62:36:a7:2c:0e:c7:db:b4:df:76:cb:e9:c4:f3:
af:97:ef:e1:d1:62:bd:d1:d7:5d:c6:b6:db:f3:25:
77:a2:53:2c:b0:26:f4:d9:b7:52:5d:26:39:af:66:
21:cd:94:30:2a:7f:14:8d:b8:a6:59:f0:1e:35:02:
71:7e:92:6f:bf:b3:e7:42:05:ad:a9:a7:9e:1f:a0:
68:c9:97:cd:01:d0:ea:fd:1a:1d:3f:d4:58:ee:28:
42:78:99:c1:3c:35:66:2f:83:0c:9c:75:09:c0:64:
a3:1a:aa:b5:0e:52:45:d4:78:94:15:06:5d:6d:c6:
9c:24:92:35:00:00:9a:94:54:21:14:d8:bd:19:ee:
93:e5:6a:bc:d9:d8:d5:0e:bf:e3:13:b9:fd:ff:ba:
0c:f0:b4:e2:74:97:df:ba:50:b3:b2:f6:f1:b1:03:
00:e1:7d:ca:dd:57:95:cc:6a:f1:09:5c:32:87:2a:
89:77:0c:ff:5f:68:34:74:fb:35:2e:ef:bc:93:2e:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:C0:EC:18:AF:7D:4C:E3:FE:69:E2:F8:11:54:A5:C9:91:FF:A2
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/X-7A7BivfUzj_mni-BFUpcmR_6I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.72.0/22
Signature Algorithm: sha256WithRSAEncryption
95:f5:c6:4e:f0:0e:47:02:e6:e9:fc:77:2d:8f:e5:dd:5b:b3:
e2:2b:a4:17:07:e9:23:bf:56:8a:03:1d:af:e7:03:d0:7a:14:
7f:36:9a:0b:31:f1:a3:4c:43:d4:a9:58:79:47:bc:4f:e4:9c:
c2:23:ae:70:9e:37:c4:ec:94:46:4b:c1:b5:57:eb:05:aa:bd:
94:17:e3:b1:47:a9:cf:3d:1f:df:cf:1b:7c:b2:10:9f:48:5e:
02:1b:3f:4d:c5:48:50:a4:31:1b:7f:a9:c7:de:f5:63:db:36:
6c:9d:73:8d:30:9c:c5:66:4d:5f:91:ee:2d:e1:9e:1b:57:69:
23:4b:bf:32:30:53:f6:de:cb:df:b5:05:3a:29:ab:37:ac:07:
25:40:58:59:bf:49:e2:46:57:00:b4:86:3f:2a:4f:88:97:85:
2d:5a:57:40:92:0d:fa:90:37:d2:e5:f5:e8:91:9c:1e:e8:46:
9f:94:48:77:e6:31:f8:5a:20:ce:74:35:60:c3:f1:21:2c:6d:
57:4a:ff:88:3f:47:1c:98:47:bb:b2:6c:d2:ac:c8:37:17:be:
be:b3:99:5e:55:8e:76:23:6c:c8:d9:ac:1d:f6:69:dc:2f:a7:
03:03:c2:65:07:3f:56:f4:77:9a:55:0e:f2:82:5c:fc:eb:d3:
af:4c:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org