Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/etpr1gP9OR8acvEKRctkpULkXi8.roa
File: etpr1gP9OR8acvEKRctkpULkXi8.roa (raw, json)
Hash identifier: w/DqM4PpOKSTbyKU0+4KRUuMAU04JZY5gpgLtG+uAbU=
Subject key identifier: 7A:DA:6B:D6:03:FD:39:1F:1A:72:F1:0A:45:CB:64:A5:42:E4:5E:2F
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 088F
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/etpr1gP9OR8acvEKRctkpULkXi8.roa
Signing time: Sun 07 Feb 2021 12:44:48 +0000
ROA not before: Sun 07 Feb 2021 12:44:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17710
IP address blocks: 103.234.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Feb 7 12:44:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7ADA6BD603FD391F1A72F10A45CB64A542E45E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:42:53:a8:44:a9:1a:f1:ae:80:55:b1:99:
5d:48:41:6c:26:bd:4f:64:2a:53:33:db:39:b5:15:
99:18:9c:cb:80:fa:59:31:0b:e9:ff:b5:f3:f7:c7:
aa:5a:83:40:3f:66:5f:cd:41:f2:a8:8d:fc:7c:e2:
b3:2c:27:f0:ae:dc:0c:fe:ee:03:24:1e:c2:96:b4:
6e:88:af:cb:eb:18:58:79:e6:0b:90:a9:93:ed:39:
18:72:14:96:e9:31:0c:40:da:34:96:57:90:0a:90:
73:cd:63:46:e2:79:74:22:ab:48:50:14:a0:19:b3:
2e:2b:45:a2:35:90:ae:5b:2c:f8:4b:dc:2f:e3:43:
37:76:55:72:e4:61:44:01:b0:c2:ce:3c:f1:bb:44:
8b:8f:b6:b5:9e:09:d3:eb:e2:b2:89:85:fe:9c:4f:
cf:2e:d2:87:f4:f9:71:57:db:b2:85:7f:bc:79:8d:
34:98:89:d7:a5:d5:2f:48:6d:aa:f2:6c:4b:be:c4:
30:b0:8d:81:b1:c7:7a:53:9b:f3:e4:35:57:51:09:
4f:5b:32:ae:64:bb:19:b3:54:af:b6:25:82:3c:51:
e2:73:ef:8d:c0:ae:a5:43:7b:7a:48:99:b7:e3:05:
3a:85:76:31:df:bf:14:2e:01:91:b6:1e:0e:df:d9:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:6B:D6:03:FD:39:1F:1A:72:F1:0A:45:CB:64:A5:42:E4:5E:2F
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/etpr1gP9OR8acvEKRctkpULkXi8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.80.0/22
Signature Algorithm: sha256WithRSAEncryption
54:bf:86:64:b5:70:ac:19:e6:65:59:5a:57:09:6e:5f:59:9b:
b2:48:2b:56:a1:97:c2:cf:1e:fe:a6:17:c4:c1:d6:33:77:60:
4a:38:5d:1f:54:3a:df:90:c0:96:ab:6a:28:fe:ed:d3:3d:d5:
68:65:72:62:fe:e0:85:69:de:e1:b9:de:ea:2f:34:4e:8a:60:
a9:5d:e6:f8:4f:1e:04:37:a4:7d:43:b4:eb:73:ea:39:69:e9:
7e:14:25:ff:9f:5c:c8:ed:e8:76:85:6f:44:3d:79:b3:1a:66:
33:b7:d5:b7:42:06:c0:17:a7:40:15:c2:48:d6:fa:d2:a4:fc:
eb:95:65:a2:37:22:f5:b7:e7:37:9c:9f:be:7e:59:9a:69:73:
63:a4:04:6e:7e:73:7c:77:b4:ca:50:ca:20:a4:23:f7:fc:b4:
de:03:ae:d4:c9:97:1f:48:88:bd:45:6f:13:bd:90:59:02:15:
ce:6b:20:7e:29:01:38:a0:c0:0a:10:ab:d8:32:e9:0c:3c:35:
d8:65:9b:e0:c9:67:23:6e:95:29:00:24:f2:d6:6d:af:65:57:
bc:3e:21:52:d3:11:c3:4f:f7:b5:46:3c:b2:9e:91:5e:ca:8b:
58:07:f9:5e:c7:77:e5:f1:f6:b5:e7:2b:c4:c4:4d:6d:de:38:
55:b7:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org