Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3ghF0Qjdn3bv_qhjt07wvR_faMg.roa
File: 3ghF0Qjdn3bv_qhjt07wvR_faMg.roa (raw, json)
Hash identifier: wWSmhlQi/ejtcGvcHCc2CjDkmuPET/+mS8v2cWidx5g=
Subject key identifier: DE:08:45:D1:08:DD:9F:76:EF:FE:A8:63:B7:4E:F0:BD:1F:DF:68:C8
Certificate issuer: /CN=DEA0948BB7791C4710993A8F1FCCE967ADA09C00
Certificate serial: 0F9A
Authority key identifier: DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3ghF0Qjdn3bv_qhjt07wvR_faMg.roa
Signing time: Wed 29 Sep 2021 02:41:29 +0000
ROA not before: Wed 29 Sep 2021 02:41:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131659
IP address blocks: 103.131.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3994 (0xf9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEA0948BB7791C4710993A8F1FCCE967ADA09C00
Validity
Not Before: Sep 29 02:41:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DE0845D108DD9F76EFFEA863B74EF0BD1FDF68C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:d0:7a:23:bf:8e:87:fc:fa:24:90:0a:67:
78:b6:40:bf:da:af:a8:2a:db:18:20:81:55:d1:0d:
19:b9:73:e6:81:1e:fc:ae:55:fb:99:07:1c:b5:75:
05:f9:00:46:cf:5e:ec:2d:58:8d:55:e6:12:fa:88:
6d:fa:a6:3e:e7:f9:ea:d2:da:9a:42:db:d4:9b:e9:
9d:a9:34:ce:60:7d:88:72:05:1a:cb:84:71:cb:3e:
8b:c7:25:87:d7:ee:91:47:a3:fc:73:c6:6d:f5:a3:
ae:b8:c8:3e:fb:c8:3e:0b:11:e4:9a:24:2e:2d:4c:
db:82:ed:6e:8f:b8:15:da:be:76:4b:65:17:c9:b3:
e1:0d:60:c4:b3:cd:4d:5f:80:de:e5:03:b5:b6:4e:
b1:45:af:e2:43:7a:7b:a1:21:a3:7a:ad:01:fd:62:
c1:e9:b3:24:2d:1f:71:0e:58:87:e2:5a:f4:7d:c1:
14:87:67:f8:45:1e:b9:d0:41:18:b0:5a:ff:f8:8d:
62:2b:1c:b7:2d:9f:c5:83:bb:80:92:e6:4e:59:9b:
9c:e1:c4:a5:10:be:e8:33:e5:71:00:d1:aa:9d:6a:
2c:cf:89:78:65:14:d9:7c:1a:19:54:42:fd:da:4a:
93:d4:d4:b9:48:b6:11:09:e5:7a:87:ca:28:c8:57:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:45:D1:08:DD:9F:76:EF:FE:A8:63:B7:4E:F0:BD:1F:DF:68:C8
X509v3 Authority Key Identifier:
keyid:DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3ghF0Qjdn3bv_qhjt07wvR_faMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:6e:8a:ec:b3:93:3c:0c:41:03:30:9c:35:09:45:5b:c2:02:
84:78:a7:6c:61:e9:ea:a4:06:6f:c4:81:c6:a7:20:73:0e:51:
4a:08:25:08:76:71:bf:c4:2a:0c:4d:1f:8d:b5:90:87:3f:cc:
44:33:32:e4:a4:ba:45:4a:20:b8:b4:05:7b:ef:fa:dc:12:3c:
b9:94:4d:1b:01:3e:cc:35:5c:38:37:b8:05:6a:4c:92:ce:d6:
c5:23:97:6e:bb:52:f3:25:dd:01:32:1f:4f:c7:ad:cc:31:5b:
cc:21:4c:72:29:0b:fd:22:89:ff:44:0c:9d:ad:d8:a1:5e:3d:
29:4f:5e:d7:ee:26:eb:3f:29:18:c0:4c:13:9e:a8:1c:fd:b2:
80:0b:f1:88:6e:7d:34:09:e0:54:5e:2b:b8:c3:47:e3:08:d3:
48:57:13:90:18:72:7b:3b:2f:59:4f:90:0c:a5:64:89:b6:25:
59:b7:b5:76:4e:78:83:51:c2:78:06:ee:e4:b7:09:f6:4a:aa:
77:66:67:51:ce:5b:21:01:5b:87:f7:a8:32:1c:77:9f:53:af:
65:71:cf:77:e7:1a:d4:1b:b8:4d:8a:9b:54:e0:e7:5b:0b:3b:
38:6e:63:2a:d6:99:71:bb:cb:d6:cb:f2:a4:c1:2a:22:9b:d5:
d4:62:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org