Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/V5GqzS3jHtH0r9boVrDMPdp8E_4.roa
File: V5GqzS3jHtH0r9boVrDMPdp8E_4.roa (raw, json)
Hash identifier: ZaTQzBjQTaObZUoX52S+U4FV9IHQ8XMDNyHXiZv/amY=
Subject key identifier: 57:91:AA:CD:2D:E3:1E:D1:F4:AF:D6:E8:56:B0:CC:3D:DA:7C:13:FE
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0AE1
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/V5GqzS3jHtH0r9boVrDMPdp8E_4.roa
Signing time: Tue 20 Oct 2020 04:08:38 +0000
ROA not before: Tue 20 Oct 2020 04:08:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2785 (0xae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Oct 20 04:08:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5791AACD2DE31ED1F4AFD6E856B0CC3DDA7C13FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c0:b3:c8:cf:9f:33:0a:97:61:a7:d3:ff:8c:
8c:8b:c8:7b:d1:39:c1:81:45:05:fd:e0:d4:31:02:
1e:8b:13:66:70:4f:f8:a3:9f:1e:1e:19:c4:7c:d7:
43:c8:a4:dd:c0:79:17:73:79:9b:d4:4a:a5:5a:f0:
d1:fd:86:53:8d:f4:2d:3d:80:cb:24:cb:d8:31:6b:
98:5c:e7:9d:00:25:49:b3:f9:dd:fd:59:f1:e6:06:
3b:76:16:11:7f:5d:76:34:3b:df:44:be:e0:db:3d:
fe:8c:12:3b:45:e3:80:fe:69:c4:d0:c9:cd:0f:f3:
74:38:7f:9b:ad:a1:04:c7:bb:d2:5c:f7:3c:1e:b4:
5b:f1:c7:8c:aa:9c:50:75:17:5f:24:40:25:f5:62:
08:0d:33:be:e2:6e:39:0c:0c:55:8c:1a:97:2c:40:
6b:cc:ea:98:47:0d:bd:71:66:6c:08:42:93:83:5f:
1b:12:ad:78:61:7d:2d:92:65:83:2d:3a:0d:0e:a8:
f5:f0:a4:c4:0d:9b:1c:bd:28:4e:70:2e:0e:1e:50:
50:97:05:d7:3f:56:59:76:42:d1:40:be:ba:36:bf:
c9:b2:c8:57:48:71:a3:ae:24:53:42:1b:33:5e:3b:
e6:0c:3c:d7:d3:b4:28:cf:d2:ba:73:fe:76:3b:20:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:AA:CD:2D:E3:1E:D1:F4:AF:D6:E8:56:B0:CC:3D:DA:7C:13:FE
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/V5GqzS3jHtH0r9boVrDMPdp8E_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a3:0b:9f:3d:ee:06:48:ff:52:b0:b8:cb:a5:d6:4c:3a:0a:
66:27:3b:bb:9e:3e:4e:57:af:47:b9:51:72:91:b8:7c:6e:c1:
c5:9c:ce:7f:bb:58:63:a2:a5:89:7a:72:fd:18:04:41:ef:b2:
91:65:69:b3:d3:4e:c2:6c:83:7e:2f:53:1b:5e:1d:fe:49:cb:
21:93:fb:fd:81:17:ca:c5:8b:e7:a7:d4:61:8f:bd:3c:89:13:
0f:9b:ca:cc:b0:06:42:7f:84:ff:97:89:d9:c4:d0:2c:93:f6:
cf:3e:7d:19:6e:a6:c1:1d:e6:93:f5:d4:b4:58:bb:cd:26:7b:
18:91:fa:f5:c0:a3:87:c5:10:45:92:33:5a:da:af:12:cf:d6:
07:25:9f:cf:35:08:fd:a9:c8:bf:0b:18:79:5c:36:ed:ad:b2:
50:8e:95:42:84:e2:f1:e7:e6:03:5c:5b:8c:d4:22:d5:14:af:
f3:39:64:ad:05:81:a5:d0:6c:0e:c9:23:32:1b:54:1a:63:95:
fe:ad:be:d1:8f:38:3a:b8:43:3a:9d:d1:fc:c8:6c:ff:b7:79:
f8:d2:5c:da:e3:72:d7:9f:5b:44:81:b6:b4:91:75:5c:53:77:
12:8a:0c:42:20:04:76:43:84:25:d9:13:0b:b9:7d:1f:46:2e:
3b:9d:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org