Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/-yxfm_ShHWae_M-zjJCoZY8wlsw.roa
File: -yxfm_ShHWae_M-zjJCoZY8wlsw.roa (raw, json)
Hash identifier: Td+Ggm5SXQBHqH6oOmDBRm4jKCP/uEJnvqFwd8ka6Uc=
Subject key identifier: FB:2C:5F:9B:F4:A1:1D:66:9E:FC:CF:B3:8C:90:A8:65:8F:30:96:CC
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 0E3E
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/-yxfm_ShHWae_M-zjJCoZY8wlsw.roa
Signing time: Tue 29 Sep 2020 10:05:11 +0000
ROA not before: Tue 29 Sep 2020 10:05:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 29 10:05:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FB2C5F9BF4A11D669EFCCFB38C90A8658F3096CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:44:7a:20:08:ba:44:24:93:78:3d:55:f8:
82:4f:fb:61:34:70:46:09:eb:46:6a:ee:7a:65:66:
fb:9b:c7:8f:aa:52:ce:14:9a:65:b4:1f:d5:28:83:
9a:cd:18:de:ae:80:44:e9:f6:e9:f3:ac:12:6e:59:
3c:ce:cf:05:3d:fe:34:6e:d2:37:21:91:c3:0f:42:
8d:7d:cd:58:72:c9:99:f4:a9:d9:3f:e0:06:4e:b0:
27:68:9d:8d:9b:30:02:70:55:f7:cb:ef:7e:1a:d8:
97:d6:b7:9f:5e:59:e9:1a:f8:e0:ba:6b:b9:1c:54:
69:35:4b:e9:fa:d9:d0:19:48:6b:11:86:36:c2:e9:
38:95:83:7a:a9:07:c4:55:a5:bc:3d:79:08:f4:4c:
7c:dd:94:09:5c:a9:32:5e:70:e5:3a:d9:c9:1c:fb:
8c:dc:58:f9:76:17:42:6f:7e:f7:7e:1e:aa:fc:a2:
14:b4:76:26:63:a5:31:14:64:37:4a:61:20:7b:8c:
21:0b:1f:5b:38:d1:d2:06:e5:f4:a0:4f:c4:ba:31:
9c:a3:cd:d2:5f:0e:c5:74:38:fd:10:72:0d:76:1a:
d5:f5:8c:55:cf:01:4b:55:fb:26:13:75:b9:d5:6b:
5b:ed:bd:04:05:b1:bc:52:e9:d5:a5:e8:c7:2b:64:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2C:5F:9B:F4:A1:1D:66:9E:FC:CF:B3:8C:90:A8:65:8F:30:96:CC
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/-yxfm_ShHWae_M-zjJCoZY8wlsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ef:d3:5f:b9:13:90:a7:e0:d8:4a:03:8f:1e:42:3e:ee:73:
45:41:ca:a9:4c:f2:76:81:f1:ac:0d:00:2f:ad:d8:d9:dc:3b:
e5:d7:7f:db:ab:b1:90:2a:95:11:eb:01:c5:11:8d:e1:c2:a1:
eb:dd:50:87:f4:3c:b2:b4:3b:ba:4b:0e:e0:eb:2a:ce:73:c5:
4a:91:24:fe:83:07:3a:ce:a8:3b:3c:e4:d4:a3:5c:09:00:24:
15:eb:a5:a8:ed:5e:50:0b:d0:d3:1e:81:0f:da:fc:39:62:22:
f3:c8:4f:19:30:21:b1:ef:78:84:8c:1a:21:86:18:05:f2:cf:
cf:1b:fe:41:1a:1e:a9:27:2e:6b:76:3f:bb:93:19:72:fe:06:
02:df:72:bf:39:5c:35:35:9b:d7:cf:03:f3:2c:59:af:c6:1e:
0f:61:63:93:d7:21:91:b6:30:b8:f5:29:9b:fe:89:04:3d:fb:
ce:cf:7a:f8:27:4e:b8:63:96:6a:c1:9a:24:4c:16:95:e5:f8:
f0:36:c1:6b:60:62:ef:66:73:40:60:3c:99:06:7c:d9:ed:2a:
df:fc:7a:f4:c6:26:8f:4c:0e:5d:e1:3d:6a:3b:03:a7:d8:d4:
d3:a5:99:0e:2f:f3:f3:d5:62:8e:c2:0a:5b:fb:b9:af:ca:2b:
80:61:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org