Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/gJhZBHtye0VYzG-PFT3f5oXBsnc.roa
File: gJhZBHtye0VYzG-PFT3f5oXBsnc.roa (raw, json)
Hash identifier: /wA0IpL/icJzejGVPh6nbXNAzlRzE0xzfZdI0J4xOEg=
Subject key identifier: 80:98:59:04:7B:72:7B:45:58:CC:6F:8F:15:3D:DF:E6:85:C1:B2:77
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0A5B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/gJhZBHtye0VYzG-PFT3f5oXBsnc.roa
Signing time: Thu 15 Sep 2022 02:44:13 +0000
ROA not before: Thu 15 Sep 2022 02:44:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131593
IP address blocks: 43.251.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 15 02:44:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=809859047B727B4558CC6F8F153DDFE685C1B277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:0f:b3:7a:af:a0:26:ef:8d:7e:58:e5:16:
55:bc:ea:e9:cf:ee:ec:f2:c6:9d:34:fa:99:36:f0:
99:d0:ae:03:d2:01:a9:34:ab:93:e9:d1:75:a6:72:
d0:f6:ad:a4:09:56:b9:cd:8a:c2:2d:e1:73:22:8c:
70:5b:1b:05:58:e9:c8:5e:62:28:6a:a5:82:c1:31:
de:01:37:98:a2:8c:54:67:81:77:8b:17:af:54:46:
0d:ca:3a:bf:d7:42:09:6a:20:62:e0:c3:aa:7e:db:
e5:9e:8f:55:eb:23:30:45:75:5e:3d:e7:e8:14:42:
f5:4c:18:bf:5b:f8:c8:8b:e3:72:09:cf:29:8a:10:
88:c4:32:75:90:cf:68:60:0f:31:58:10:d4:63:a9:
f1:93:4d:58:c1:a2:c0:d5:e4:c6:06:3f:10:8a:e6:
ce:42:24:ba:fe:1f:62:51:95:00:40:87:80:9b:c6:
87:86:91:b5:48:b9:e9:4a:72:a4:cc:c2:f3:76:66:
d9:75:86:2a:fe:2f:7b:83:14:f9:2a:61:4b:2d:0f:
5d:91:d8:99:79:aa:cb:0a:23:a9:b4:bc:07:e0:25:
03:57:35:91:93:a3:99:d6:9c:b7:14:c0:eb:92:64:
57:e4:20:5a:e3:43:d0:9b:6d:c6:9e:28:4c:13:8d:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:59:04:7B:72:7B:45:58:CC:6F:8F:15:3D:DF:E6:85:C1:B2:77
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/gJhZBHtye0VYzG-PFT3f5oXBsnc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.63.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9f:e2:9a:62:d7:57:6c:de:75:d5:3d:e8:d1:7a:98:d1:62:
cc:fd:06:53:55:a2:d0:1c:d5:70:fb:a5:ae:ac:60:c9:e5:25:
27:80:35:87:de:7f:f1:24:eb:5f:d6:f4:80:ca:a5:f8:5d:b6:
30:ad:0f:7e:b8:73:cb:2e:c1:af:27:a1:5a:60:9d:a1:d6:c9:
0f:2e:2f:31:74:39:90:19:7f:2b:e0:fa:ed:1e:1e:ac:3a:e0:
c2:18:e1:74:e3:77:a3:e0:25:0c:3e:78:98:61:62:93:77:3c:
5d:72:3f:f0:3a:90:98:1b:e3:90:d1:88:3a:ea:03:55:88:13:
b4:b4:c2:4b:98:4c:73:c6:ae:e9:c9:db:b9:cc:0c:bb:68:08:
1f:a7:30:10:a8:ea:98:6d:e8:76:d3:be:e9:7d:a1:9a:9f:d0:
28:78:6c:5a:58:08:cf:52:0e:1d:53:4c:62:4e:a4:44:95:e2:
e3:e4:66:46:94:07:e0:fb:62:64:84:49:e2:f1:c0:07:d6:6e:
42:2d:8d:07:5c:13:73:5f:16:d8:f1:84:bb:5a:03:97:0f:f2:
b2:27:eb:f7:3f:d2:2e:b8:3b:96:88:10:7e:0d:6b:d7:5d:c1:
1c:fd:9e:45:cb:ec:03:f7:fa:62:14:73:3c:b4:83:51:f1:11:
db:b6:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org