Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/4tvIRMyI0_8be3mYF9u-SEbVwxE.roa
File: 4tvIRMyI0_8be3mYF9u-SEbVwxE.roa (raw, json)
Hash identifier: m7LJxbNS3ozs22Uwy6fmEQPHMXlpZez42c4fBSr93iw=
Subject key identifier: E2:DB:C8:44:CC:88:D3:FF:1B:7B:79:98:17:DB:BE:48:46:D5:C3:11
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1021
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/4tvIRMyI0_8be3mYF9u-SEbVwxE.roa
Signing time: Mon 11 Oct 2021 05:01:33 +0000
ROA not before: Mon 11 Oct 2021 05:01:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131631
IP address blocks: 103.123.216.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4129 (0x1021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Oct 11 05:01:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E2DBC844CC88D3FF1B7B799817DBBE4846D5C311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:ba:e6:44:16:17:93:45:44:62:82:d1:ef:
45:47:7d:15:ba:4c:d1:27:2b:7e:c6:68:94:2d:d4:
d3:7c:3b:ae:4d:74:97:1d:b4:5c:8a:33:90:7e:35:
5b:4a:a2:40:6f:56:8e:38:31:70:5f:3f:b6:9a:49:
07:a3:e9:91:73:6b:1b:29:a4:b2:71:f9:72:b7:77:
49:9a:f1:05:48:9f:7f:77:dd:c5:93:a4:50:ae:1d:
0a:92:0a:74:59:b1:e4:27:ea:6e:4a:02:ef:93:fb:
3b:d3:70:dd:2e:9f:41:ea:98:ed:3e:d6:f7:37:ba:
04:ef:1e:5f:72:42:b1:5c:78:a9:06:c5:9b:30:c3:
ad:df:5f:19:52:fa:66:19:95:47:73:66:c1:87:26:
95:9c:a2:9d:ad:dc:a8:a9:cb:0b:49:7d:71:14:e0:
50:68:bb:ef:58:4d:50:af:bb:c2:01:bb:cd:94:82:
85:7b:c3:31:0e:7b:1a:f8:20:9e:5a:8f:2a:ce:de:
db:8c:ff:c5:66:fd:0b:1f:b6:16:af:42:d4:dc:87:
62:39:ec:5c:06:b4:ad:fb:13:7a:9f:1b:f7:9d:02:
71:72:8e:d1:06:61:44:55:7e:78:55:65:35:cb:12:
57:74:59:75:9b:48:57:d7:97:bd:0f:58:4a:fc:db:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:C8:44:CC:88:D3:FF:1B:7B:79:98:17:DB:BE:48:46:D5:C3:11
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/4tvIRMyI0_8be3mYF9u-SEbVwxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a8:8f:61:1f:29:01:c9:00:a9:ec:97:ca:73:00:f0:51:db:
05:0b:98:6e:25:cf:6d:4f:cf:6f:95:89:3b:7b:d3:09:a8:d9:
51:3f:4d:ba:c5:fd:da:7e:46:11:c8:e4:b3:05:14:4f:2a:34:
d1:c3:c1:53:68:e3:0e:54:0d:61:cf:36:3c:c4:78:9b:db:bf:
3e:01:e0:69:a4:e7:50:fa:83:3e:80:f4:de:a8:5e:56:07:f4:
e0:34:6a:86:3d:f0:34:bf:4e:68:bf:9b:ab:71:1a:14:9c:c7:
f4:65:11:f6:79:28:fb:ca:ab:b1:a0:8e:89:45:08:23:64:ed:
e1:51:42:fd:56:e0:71:4b:91:93:2c:82:7d:6a:7a:84:4f:6d:
3b:aa:2c:23:c8:98:bf:71:d0:02:87:b6:14:cf:83:f5:6b:bf:
b4:4f:46:6b:52:84:20:25:d9:e6:b3:c3:43:6a:5c:58:4b:3c:
26:2e:ff:66:67:83:88:7d:68:fa:b8:70:d6:c7:8c:6d:06:30:
68:a4:92:e7:99:1e:14:c0:b2:be:b7:58:b1:1c:f2:13:1c:58:
fc:54:a3:3e:6d:10:fa:db:76:a3:63:5c:7d:91:a7:9a:82:b9:
ce:47:eb:ff:9e:3d:0a:ab:d3:f5:65:8b:93:63:39:38:60:dc:
3c:2e:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org