Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/HhxC3KP-VlCUe9F40nLNRh-cl98.roa
File: HhxC3KP-VlCUe9F40nLNRh-cl98.roa (raw, json)
Hash identifier: A2TY2uXlPUiGGY25k/6TsmJ5DTwKXjFZfUqW3xm1sDg=
Subject key identifier: 1E:1C:42:DC:A3:FE:56:50:94:7B:D1:78:D2:72:CD:46:1F:9C:97:DF
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 110D
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/HhxC3KP-VlCUe9F40nLNRh-cl98.roa
Signing time: Thu 15 Sep 2022 02:38:27 +0000
ROA not before: Thu 15 Sep 2022 02:38:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 15 02:38:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1E1C42DCA3FE5650947BD178D272CD461F9C97DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:22:1c:f1:d1:5e:c6:64:9f:ce:61:b5:91:
33:fa:18:71:62:9e:bd:77:1f:6f:22:98:7a:0a:c9:
2d:e0:a7:e1:63:c8:07:74:10:08:b7:67:ca:b3:3c:
3b:9e:85:48:8d:f4:72:e0:20:23:e1:0c:d0:12:a2:
ff:2a:e6:ae:6f:4d:30:c4:47:d2:cb:16:bf:63:0a:
b0:c9:17:9e:e1:3c:17:07:47:11:40:7c:37:63:32:
e4:af:66:e0:5b:db:c9:8f:b7:e9:c8:5c:c8:a3:40:
12:22:72:4d:fa:70:2e:2f:13:da:77:2b:8f:46:78:
61:54:9e:26:2d:d2:89:53:95:bd:d1:39:de:9a:00:
96:86:b6:72:2e:dd:ef:9f:16:11:55:06:8f:80:7e:
bb:60:6d:bc:c0:d3:0b:e7:52:36:cd:4e:37:80:67:
bd:45:34:24:fc:aa:8d:ad:e9:b0:eb:31:c8:c1:a8:
0e:57:ad:b1:2d:72:1a:97:f3:2e:47:af:28:b8:97:
32:0f:2b:cf:aa:96:c2:1f:25:be:83:13:8f:ae:c9:
b9:1e:69:cc:f0:54:77:e2:9c:15:28:ea:33:b4:55:
27:46:4c:a1:6c:ba:5b:37:fb:81:73:80:fd:db:1b:
d6:08:65:12:a1:50:f1:43:85:76:a3:ff:91:ad:2f:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:42:DC:A3:FE:56:50:94:7B:D1:78:D2:72:CD:46:1F:9C:97:DF
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/HhxC3KP-VlCUe9F40nLNRh-cl98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:c9:62:f8:e7:33:97:a6:7d:2c:75:d2:17:a4:7b:8f:1f:ef:
55:58:6e:a2:3d:79:ed:6a:f5:8c:b6:58:c0:4f:e5:64:aa:32:
8f:1e:91:55:06:46:41:16:fc:4e:0d:a3:1e:9d:eb:fc:ad:a2:
7c:c6:5b:38:95:da:ae:84:9c:f3:00:a3:e1:eb:0c:3c:3e:f8:
f5:78:81:f6:a8:a0:7f:6e:73:51:2c:c7:b0:64:30:d3:18:29:
11:0b:95:b1:1f:f9:21:63:52:86:59:0e:c3:05:92:b2:4f:b0:
8e:1c:18:ba:fa:3e:3a:76:71:84:61:cd:4d:f0:f4:31:65:3b:
dd:ba:27:9d:25:32:5a:e6:47:65:ef:95:fd:3e:77:50:12:9c:
09:39:09:bc:59:59:1b:a0:b2:7c:4a:0e:ef:27:35:11:8c:d5:
c2:4b:8d:c1:92:5b:60:ed:ab:62:9f:58:52:d4:4b:24:5c:6b:
a8:85:aa:49:5e:d2:3d:14:22:e7:23:4f:21:51:7e:f2:02:6c:
0f:a2:63:9a:e8:cd:4e:1c:32:19:45:3f:5b:ca:41:e7:86:6b:
51:17:cb:2a:7a:ac:93:74:fc:0f:33:0d:94:6c:76:98:f1:3b:
74:fd:00:43:9e:ba:e4:68:00:55:69:9d:b6:30:35:bd:34:97:
1c:98:ba:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org