Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/TGelclCj5Vcx2XXMloWkuZp0ZFo.roa
File: TGelclCj5Vcx2XXMloWkuZp0ZFo.roa (raw, json)
Hash identifier: AUEi6c6Q5srYJAR0mxTgf8ONDS227BgQQLDqeG00U1s=
Subject key identifier: 4C:67:A5:72:50:A3:E5:57:31:D9:75:CC:96:85:A4:B9:9A:74:64:5A
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0933
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/TGelclCj5Vcx2XXMloWkuZp0ZFo.roa
Signing time: Wed 29 Sep 2021 02:53:01 +0000
ROA not before: Wed 29 Sep 2021 02:53:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17710
IP address blocks: 103.234.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 29 02:53:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4C67A57250A3E55731D975CC9685A4B99A74645A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:ec:8a:ea:12:26:1d:de:b1:bc:31:5f:47:
5c:fb:ac:75:e7:79:b6:bf:e1:50:4c:6c:00:bc:e3:
a2:58:97:67:ab:20:5f:af:f0:68:ea:0c:c8:c6:f1:
42:d6:a8:fa:1d:a4:4d:0a:b7:14:21:7c:9d:89:05:
a2:d7:68:d8:bd:56:b0:ff:08:9a:4d:25:77:a1:fd:
96:7c:42:d6:bc:f3:37:f9:26:00:bf:9d:52:d5:76:
92:7a:15:90:fa:f2:45:73:09:0e:cb:b7:59:df:22:
9c:03:87:95:65:89:40:83:8f:4e:09:b1:6c:10:85:
e9:8c:f1:84:60:cd:45:77:d7:61:69:56:3e:5c:59:
53:34:60:06:28:92:c2:06:d3:01:e5:df:85:43:4b:
aa:ca:2d:29:9c:16:f8:f7:ad:6b:87:5b:f6:77:d6:
50:4c:7f:e8:fa:7b:a2:94:82:12:e6:97:48:c2:1d:
e8:7e:15:15:34:f6:92:6c:c3:90:71:b5:1e:b0:28:
4b:c4:cd:8a:8b:fd:be:32:85:fb:01:cb:c0:b7:99:
09:88:1d:b6:ac:a0:c7:db:96:14:16:78:44:0d:fa:
eb:03:93:17:54:c0:57:f7:5b:20:25:d6:cc:4d:46:
c0:01:77:13:67:bc:0e:f3:5e:ae:66:f5:f9:e0:5e:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:67:A5:72:50:A3:E5:57:31:D9:75:CC:96:85:A4:B9:9A:74:64:5A
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/TGelclCj5Vcx2XXMloWkuZp0ZFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.80.0/22
Signature Algorithm: sha256WithRSAEncryption
24:67:ad:5b:b8:0e:5c:c3:30:79:44:bf:44:8a:94:c4:a2:53:
e2:00:62:84:0c:b2:ca:8b:fe:fc:c3:18:36:6c:eb:df:92:8a:
b7:ed:58:f1:1b:83:88:7c:2e:e9:6b:db:06:98:87:6e:96:0d:
69:14:a9:05:e3:5a:1b:50:08:c8:5b:1e:f5:67:ea:8e:32:90:
d8:e2:b4:b4:5f:9a:0f:f6:d0:bd:8a:22:c3:e2:5b:2f:63:71:
e0:b1:57:06:55:f0:a1:69:48:4f:26:c6:49:88:14:d5:71:0f:
92:61:db:74:20:7d:cc:a8:6e:8b:ba:35:c0:5e:87:c9:c1:70:
1f:d1:1c:ff:9e:22:e1:c6:7f:ba:b3:fe:e9:04:41:ec:ef:53:
50:75:cf:09:bb:cd:db:83:eb:19:94:57:03:17:67:72:03:b4:
3d:26:5d:07:00:05:66:71:dd:a8:53:58:07:0c:e6:2b:80:28:
88:5f:a5:40:c3:b4:3f:18:ed:18:28:30:e7:c6:2b:48:79:ad:
4d:5c:1e:43:f3:cc:d4:42:f5:9f:a4:db:dc:2a:b7:90:c3:1a:
ff:f9:e7:ba:1f:fa:fe:f4:82:83:2f:0e:bf:ab:4e:96:32:1c:
e5:b2:e3:cb:4e:25:da:83:8e:a0:b6:57:04:8b:62:6c:e4:82:
47:aa:62:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org