Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/F_w4FS_SkQhV7DoCgADm_CWBiZc.roa
File: F_w4FS_SkQhV7DoCgADm_CWBiZc.roa (raw, json)
Hash identifier: ucr1aoCnfuiccEOhVsMFiiqXmF4/ZDgC1HLgp5PyRlQ=
Subject key identifier: 17:FC:38:15:2F:D2:91:08:55:EC:3A:02:80:00:E6:FC:25:81:89:97
Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Certificate serial: 0584
Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/F_w4FS_SkQhV7DoCgADm_CWBiZc.roa
Signing time: Wed 29 Sep 2021 02:37:31 +0000
ROA not before: Wed 29 Sep 2021 02:37:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18178
IP address blocks: 103.148.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Validity
Not Before: Sep 29 02:37:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=17FC38152FD2910855EC3A028000E6FC25818997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:a4:e5:a4:d5:7d:76:ea:e3:a2:1c:86:e9:
42:2e:d4:8d:81:d3:aa:cd:6a:78:10:73:21:03:8a:
3e:0d:b5:f4:2c:bc:8e:83:56:b2:1a:ea:f5:58:9f:
af:8e:36:99:c0:78:e7:82:dd:1c:9d:57:fb:e5:86:
be:b2:f2:6a:19:6d:01:fa:ca:17:e9:ca:30:b3:d9:
23:5e:c5:96:04:a3:d8:27:ee:83:b7:fd:02:c8:e1:
3a:98:13:b3:a2:16:cd:b3:db:ad:60:f1:e2:6e:4a:
5f:a2:33:e0:32:fa:41:69:e9:45:be:2f:3a:e1:a9:
21:6b:0a:45:44:76:29:1b:8a:5f:04:b0:1a:b8:e2:
3c:fd:82:6c:be:27:4b:ab:8e:02:fd:cc:0e:78:da:
7f:a8:d8:11:cd:df:5c:b7:82:91:f1:25:a0:ba:61:
3e:c1:bd:47:77:00:51:a3:1e:3e:1a:37:73:6d:58:
9c:a5:9f:a8:03:86:12:34:19:94:f3:42:e7:ed:2b:
6d:89:5b:78:ff:6f:86:72:47:f9:2d:20:b6:d4:1f:
6b:9b:65:13:53:69:93:a5:82:56:9c:34:b2:ea:53:
3a:5d:a0:9e:3f:28:23:8d:18:07:b8:1f:70:04:18:
7f:e3:5c:b5:bc:d4:86:0c:03:bd:7c:2a:7a:6a:0a:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:38:15:2F:D2:91:08:55:EC:3A:02:80:00:E6:FC:25:81:89:97
X509v3 Authority Key Identifier:
keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/F_w4FS_SkQhV7DoCgADm_CWBiZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:d1:28:8a:27:b3:14:e1:40:fc:e6:75:a3:0c:e0:37:00:b7:
98:98:00:75:cb:b3:53:21:74:00:4d:90:92:96:83:11:9f:35:
73:7c:69:bd:ef:61:e0:e3:ce:aa:90:ef:05:76:79:41:18:5c:
1f:9e:4c:47:1f:45:9c:3c:79:f1:6f:57:e2:86:e6:87:46:80:
6f:0f:e6:55:be:39:90:e4:da:29:e1:2d:71:69:e7:23:58:7a:
cc:79:d2:0c:ae:29:92:d2:2b:28:3b:ee:1e:9b:66:59:88:6e:
aa:6d:5e:e3:9c:44:98:05:39:ab:c3:25:ac:f2:c9:8a:e2:5d:
2b:53:2c:95:5a:2d:34:2b:90:90:28:fa:53:6b:ae:f3:c4:36:
59:91:24:82:1e:67:4f:c0:9c:e4:e5:7a:aa:e5:1a:97:a7:9c:
c6:bf:2c:78:0f:18:95:ae:a8:04:89:8f:00:58:fc:4e:7b:71:
03:e4:7b:a7:59:41:05:c3:d4:2f:ed:42:49:69:cf:60:4f:ed:
2b:90:d9:0e:44:51:3b:5a:73:b9:03:e2:6d:7e:ab:20:4c:eb:
22:fa:7f:dd:c3:9c:70:96:cf:22:0a:84:aa:bb:94:53:12:d1:
c3:49:e9:fe:b6:96:79:92:7e:81:7c:e0:a3:50:2a:f9:2b:2c:
7f:7f:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org