Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/IKgmoHJ7EG4WfUgbGu4BFUO0rHc.roa
File: IKgmoHJ7EG4WfUgbGu4BFUO0rHc.roa (raw, json)
Hash identifier: pTuk+LH4wL8EIKKQtAJLyAZjqIZpQWWt30ujnclKt7s=
Subject key identifier: 20:A8:26:A0:72:7B:10:6E:16:7D:48:1B:1A:EE:01:15:43:B4:AC:77
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0A5B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/IKgmoHJ7EG4WfUgbGu4BFUO0rHc.roa
Signing time: Thu 15 Sep 2022 02:44:14 +0000
ROA not before: Thu 15 Sep 2022 02:44:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131593
IP address blocks: 43.251.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 15 02:44:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=20A826A0727B106E167D481B1AEE011543B4AC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:d7:dc:bc:90:c8:fc:39:13:80:97:34:84:
9d:b8:52:76:c3:24:1d:10:ac:a9:d9:9d:51:4a:52:
9a:6b:35:20:70:3d:0a:0a:1d:08:dd:30:9e:93:d8:
27:e2:9b:63:39:0c:04:74:49:73:8a:77:99:9c:d8:
9f:1f:92:8d:a5:ac:54:a1:2b:bb:61:5e:4a:df:55:
ee:a1:61:2e:6d:76:a0:3b:e2:04:88:99:6a:d1:1f:
7f:bf:a4:50:04:df:a9:4a:27:c6:46:72:68:7f:8d:
10:89:d8:98:93:6f:73:14:77:b5:2c:84:1e:a5:e3:
48:39:ee:0e:85:ad:b4:4b:91:67:f2:a1:ce:73:5f:
90:8a:0d:dd:dd:f7:2f:ec:4f:9e:ab:8c:51:b3:b2:
46:db:05:d0:58:d4:a5:d1:f5:86:c9:7c:27:32:b2:
09:be:2a:7e:53:58:2a:9d:0b:f2:b0:23:03:4e:09:
1f:99:cd:5c:11:ee:12:44:de:14:3d:36:37:fe:87:
e0:09:a8:a2:6e:76:5a:f4:ec:cc:01:b9:22:6e:c3:
93:65:54:e7:a8:bd:54:da:e8:10:b2:ba:a9:21:0a:
a0:5f:d9:6b:69:0c:7b:d0:1f:7b:7b:b8:cc:e0:5e:
01:c4:77:13:54:5a:1e:de:e3:9b:7d:e5:19:dc:3d:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:26:A0:72:7B:10:6E:16:7D:48:1B:1A:EE:01:15:43:B4:AC:77
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/IKgmoHJ7EG4WfUgbGu4BFUO0rHc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ae:b8:1f:0a:34:78:2e:a1:3e:5e:9f:00:c0:8d:56:23:2d:
32:bc:59:46:8e:85:24:ee:aa:47:79:57:e0:19:3d:f4:1b:90:
aa:23:33:4b:e6:6e:25:0e:a0:38:0b:33:81:d7:85:e0:ef:0a:
b0:4d:de:0e:da:b8:0d:9a:18:54:96:c4:c2:3d:dc:68:f8:21:
84:95:d5:08:aa:e6:0f:1c:ac:84:d0:e6:19:7a:8c:9d:fa:7c:
53:6a:e4:d7:cd:fa:e7:95:29:7a:78:5b:ca:0d:2a:0e:b4:da:
a2:b7:ca:43:50:78:13:ec:06:64:21:42:6d:0f:bf:7b:2d:60:
36:70:6a:a2:11:be:5c:e8:fa:30:8a:2e:79:b0:c5:5e:11:87:
ea:80:13:4c:f6:39:77:92:57:91:8e:03:72:ec:c5:bb:aa:b1:
9f:52:26:d3:25:20:cd:9f:4a:a3:81:cf:4a:32:75:4b:b7:20:
3d:45:4b:c9:c9:90:40:2a:0b:39:2a:dc:67:f4:48:6f:2d:09:
2d:f5:21:8e:83:6f:fa:52:27:5d:4d:0e:4c:44:ef:c4:3f:29:
24:15:d8:84:de:cd:4b:07:62:3e:c7:54:fd:c7:41:61:f4:0d:
1a:e2:4d:70:18:00:bb:4e:ad:42:ad:c1:91:e8:62:ce:ea:df:
91:3f:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org