Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/PJ2qWfJPumbXgQTxXXR1SAybKvc.roa
File: PJ2qWfJPumbXgQTxXXR1SAybKvc.roa (raw, json)
Hash identifier: DOlDyiFqj1c6hY+1wQKoN3ZuX3okfjZro69gaXdEVdk=
Subject key identifier: 3C:9D:AA:59:F2:4F:BA:66:D7:81:04:F1:5D:74:75:48:0C:9B:2A:F7
Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Certificate serial: 061B
Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/PJ2qWfJPumbXgQTxXXR1SAybKvc.roa
Signing time: Sun 07 Feb 2021 13:04:18 +0000
ROA not before: Sun 07 Feb 2021 13:04:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131677
IP address blocks: 103.147.130.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1563 (0x61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Validity
Not Before: Feb 7 13:04:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C9DAA59F24FBA66D78104F15D7475480C9B2AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:b6:a7:b7:4b:37:3e:8b:de:79:38:73:28:
ca:66:23:f2:0a:f3:a2:c3:dd:94:7c:5c:af:a2:7d:
3c:6c:9c:60:21:67:67:06:85:2a:68:9e:dd:b6:e3:
a9:2b:dc:a5:03:67:5d:9b:2c:1a:28:d3:28:fa:1b:
ed:f6:31:d9:01:06:4a:aa:9c:81:ff:43:55:02:01:
53:f5:e6:72:24:83:1c:d0:61:7e:07:33:9b:27:e0:
ef:d4:eb:3a:4b:78:c9:b3:1b:07:89:66:9e:8f:5e:
02:e2:2e:54:90:69:d6:ce:96:b7:2c:e0:b8:ed:f1:
12:87:ec:a1:cf:20:49:e2:40:cf:66:54:b8:83:c4:
f1:f9:24:eb:b2:94:8f:23:52:49:6e:03:63:5a:5f:
79:df:fb:b7:10:cb:8a:4c:a6:06:8f:b9:9e:c6:02:
26:36:7e:f1:ee:fe:91:52:43:ed:f4:9d:d8:62:0f:
56:5a:0b:d0:31:a5:ff:a1:88:6d:cf:a1:20:da:d6:
42:6d:f0:3f:5c:c8:b2:1c:91:9b:eb:c9:80:f0:bd:
68:02:a3:18:84:58:e8:99:66:f2:c3:c0:56:19:a0:
a5:b7:6a:bd:ea:3c:4a:75:b7:67:c1:ed:21:b3:26:
bc:dc:25:d5:40:a6:fd:0c:e3:8b:99:24:1a:79:28:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:AA:59:F2:4F:BA:66:D7:81:04:F1:5D:74:75:48:0C:9B:2A:F7
X509v3 Authority Key Identifier:
keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/PJ2qWfJPumbXgQTxXXR1SAybKvc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:e4:72:c3:08:22:1b:26:a5:d6:d4:99:36:08:10:ed:0f:df:
42:19:1a:7d:08:0b:e4:20:a2:00:c7:8f:05:1d:df:3f:37:ba:
46:a8:db:97:6b:80:51:48:27:5e:d1:3f:92:e3:49:62:04:25:
29:fd:84:70:4e:01:25:f6:cc:01:d7:2f:27:c8:96:21:78:9b:
25:a8:d7:42:6e:f4:f3:43:ae:e5:6d:09:41:b8:ec:e8:c3:30:
a8:99:b6:ab:ed:7b:57:4a:78:3a:63:fe:38:e6:8a:76:8c:d0:
a2:71:06:43:fd:f9:a5:db:a5:6f:2e:57:f9:19:7a:6b:37:99:
71:64:25:94:1d:56:c6:1e:c0:b3:db:14:78:f5:69:9b:30:fc:
e6:f1:12:ec:02:3c:61:3f:7d:57:e1:b5:79:63:86:4d:2f:70:
a9:b4:6f:42:a2:4a:57:6e:65:3f:7a:46:31:6d:84:74:78:10:
65:bd:51:6a:bc:23:1e:ca:cf:fb:bc:e1:6b:c2:7c:53:64:f5:
3f:ae:96:7f:5e:c5:a5:c4:34:71:e3:14:67:10:73:94:cc:b4:
34:24:ac:42:02:75:37:85:27:23:15:2b:05:90:ec:cf:8b:c4:
bd:6d:0b:1e:e5:db:14:f1:12:e8:54:a7:b3:b8:45:a6:4a:1d:
38:eb:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org