Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/zkIadcmC9qnu_SnPcNlHHcigBWg.roa
File: zkIadcmC9qnu_SnPcNlHHcigBWg.roa (raw, json)
Hash identifier: Dgypvu4O5ZXVRDBjIjLDQ9Mqj3LVnjGCqB2IcLGkc+4=
Subject key identifier: CE:42:1A:75:C9:82:F6:A9:EE:FD:29:CF:70:D9:47:1D:C8:A0:05:68
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 08C2
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/zkIadcmC9qnu_SnPcNlHHcigBWg.roa
Signing time: Sun 07 Feb 2021 13:05:43 +0000
ROA not before: Sun 07 Feb 2021 13:05:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131593
IP address blocks: 103.42.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Feb 7 13:05:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CE421A75C982F6A9EEFD29CF70D9471DC8A00568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:ed:19:df:3c:f0:38:cb:c5:20:23:f2:d6:
74:d9:29:4e:ab:74:db:67:2a:0a:10:72:21:2f:37:
ae:e4:71:66:ab:9c:70:9e:d9:16:a1:fa:b5:53:3e:
c4:07:3d:36:a8:19:d7:ca:73:07:7e:3a:1e:03:82:
c5:20:a4:82:ba:6d:be:c5:02:e5:7c:18:de:6f:55:
a9:51:c2:7d:af:ff:79:02:6a:51:90:ed:20:42:e5:
0e:ff:9c:89:81:d4:03:fb:2f:19:e4:26:c1:87:40:
21:9c:4a:1f:58:06:15:a7:73:f3:0f:06:b5:72:04:
8b:0f:a0:46:36:34:f1:58:f6:a3:78:15:0f:e7:5e:
7d:74:cf:fb:ab:ed:5b:0b:12:75:54:6a:3c:be:d9:
6f:c0:4c:b3:a0:ce:74:f2:70:8a:21:c4:10:6f:22:
ab:b1:44:26:9a:1a:48:0f:06:01:cd:cc:e4:fb:b5:
ac:a0:9d:d2:ea:5f:88:2a:fb:51:d7:e5:58:ad:e3:
53:ac:1f:94:92:d5:e2:20:6a:aa:d2:9c:01:8b:04:
ba:69:2f:5f:18:00:59:93:6f:c6:f6:87:bc:54:7f:
d7:ef:c6:45:ca:80:64:55:18:32:16:09:c0:aa:b2:
0c:13:47:98:d6:5c:93:30:03:a0:98:7a:93:ff:67:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:1A:75:C9:82:F6:A9:EE:FD:29:CF:70:D9:47:1D:C8:A0:05:68
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/zkIadcmC9qnu_SnPcNlHHcigBWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.148.0/22
Signature Algorithm: sha256WithRSAEncryption
28:8c:a7:95:f5:4e:c5:c8:e8:6b:01:70:8e:d9:30:25:34:0f:
72:60:d0:f8:e9:83:60:c1:e8:d8:aa:80:80:52:a2:2a:26:db:
c5:7f:76:c1:2b:55:47:cd:94:67:fc:50:34:a6:ae:ea:00:85:
5f:68:7e:32:98:15:4e:25:a3:1a:7a:81:f7:3c:e1:61:9d:ea:
77:a3:0f:55:a3:5e:b3:55:e6:3d:85:f8:2e:11:78:1e:b7:4d:
d7:ce:3f:9a:d8:f5:c3:03:de:cc:4f:83:b5:6e:29:40:e4:97:
c9:ec:e4:9c:4e:55:d2:d6:ee:fa:3f:4e:6e:f1:5f:33:ef:08:
37:24:6a:72:2b:00:50:2b:65:21:2c:97:44:ba:29:ba:c9:0c:
55:11:05:c7:e5:c2:42:dc:9b:89:a6:7b:9e:5e:33:92:9a:a0:
5b:0c:a1:8c:fb:2e:22:bf:ec:99:53:a1:1d:e9:df:42:60:07:
e0:54:60:a0:93:b9:b1:67:98:ab:58:e4:d4:2a:15:98:d6:e1:
38:70:36:a8:96:bc:d3:54:25:47:29:55:72:37:9e:5b:3a:a5:
d2:5b:9d:58:ef:0a:9f:a2:70:fe:3f:33:73:ad:cc:b3:fa:87:
b9:2e:b2:97:3b:df:ab:e7:ba:c5:23:af:51:cc:5d:e8:80:98:
37:f2:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org