Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/Pemvw35gQ43TBxwl1i9-c_O4SUY.roa
File: Pemvw35gQ43TBxwl1i9-c_O4SUY.roa (raw, json)
Hash identifier: VBjgsEQz2UszkOzgZggSCtp+3z/IoXpuRPVoIV9cdmM=
Subject key identifier: 3D:E9:AF:C3:7E:60:43:8D:D3:07:1C:25:D6:2F:7E:73:F3:B8:49:46
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0AE3
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/Pemvw35gQ43TBxwl1i9-c_O4SUY.roa
Signing time: Tue 20 Oct 2020 04:08:50 +0000
ROA not before: Tue 20 Oct 2020 04:08:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18178
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Oct 20 04:08:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3DE9AFC37E60438DD3071C25D62F7E73F3B84946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:8f:f1:e5:dc:13:b4:c4:30:8e:98:ad:7f:
1f:77:54:c2:a5:49:7c:9b:1b:06:49:bc:bf:a4:c2:
2d:08:93:42:fb:19:7e:c9:85:c3:85:7a:75:4c:20:
63:f3:71:32:b8:b7:d2:fb:bf:74:f9:09:b3:b1:49:
08:d0:f4:32:93:30:6b:df:16:5b:d5:2f:45:f8:b1:
dd:d3:1f:62:4e:80:2b:d0:69:b4:fe:64:6f:37:8e:
a5:7f:37:4f:6e:3e:78:83:e6:4a:58:35:b4:03:19:
96:97:e8:60:cb:e0:b5:74:86:77:16:10:e6:87:ec:
cb:89:b2:9a:69:cd:34:16:d2:47:12:81:b9:24:76:
bb:46:2a:08:61:b0:52:b7:78:5a:18:7a:b6:64:f4:
7f:69:2b:83:c1:e8:b7:85:56:1f:ce:43:2f:e3:5a:
ff:43:b3:a4:01:f9:be:fb:ce:61:21:67:af:64:fc:
8d:cb:3d:f8:26:83:ca:cc:a0:15:d1:e5:3c:60:60:
0d:ad:57:c6:3d:6a:ae:36:74:56:36:c0:a5:15:04:
13:cc:10:b3:ac:45:62:8d:8b:e2:e5:97:c8:45:c9:
ca:bc:d3:5a:ee:3b:ed:11:70:23:52:6f:f3:f7:78:
a5:df:91:00:31:59:6c:d4:07:9e:3b:9f:d9:83:65:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:AF:C3:7E:60:43:8D:D3:07:1C:25:D6:2F:7E:73:F3:B8:49:46
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/Pemvw35gQ43TBxwl1i9-c_O4SUY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e5:86:27:7d:10:18:1e:20:1b:61:c8:97:79:c5:43:f0:5a:
f7:00:54:ab:9d:c8:38:ef:fc:2b:dc:0f:c3:b1:3f:ce:07:16:
2d:34:17:78:56:a9:ac:72:af:18:4b:cc:9c:8e:09:9f:5f:47:
04:b6:74:4d:cc:b5:59:6f:e9:d6:ec:c9:50:3f:46:e5:dc:51:
83:df:55:30:d7:50:d4:ff:88:97:dd:5b:9d:84:00:61:01:9c:
e1:cb:a3:cb:a8:b9:5f:9f:37:6e:c2:e7:36:08:25:3b:e9:cc:
30:4e:21:53:26:71:59:75:b2:ca:22:81:22:96:f7:26:11:4a:
bb:1a:08:de:1f:08:69:c8:f8:76:0a:ea:cd:1e:88:72:e7:a3:
b2:b0:88:78:58:0d:bb:8a:4b:4e:f9:45:22:b2:54:84:3e:0c:
01:93:d1:9a:2f:5d:79:af:a9:86:de:43:34:20:9b:02:83:20:
78:51:f6:df:53:60:8c:e6:4e:b5:30:18:0e:6b:1a:16:f2:12:
ee:9d:68:55:5e:a9:3c:77:32:11:2e:44:9a:ed:3a:38:08:fb:
c6:83:78:22:7a:b0:5e:5c:37:4c:ea:19:89:a5:9b:4f:49:0c:
94:d6:d8:d6:13:3c:9b:fb:de:a5:da:6b:b3:20:23:c9:c8:8b:
91:47:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org