Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/8QRoK2SrJ44rJOVxYZjSyyML7Zs.roa
File: 8QRoK2SrJ44rJOVxYZjSyyML7Zs.roa (raw, json)
Hash identifier: s6ZA37OM4fBSQ7SJfrhRkrHvg7VwsSO9pM3PRxITRRQ=
Subject key identifier: F1:04:68:2B:64:AB:27:8E:2B:24:E5:71:61:98:D2:CB:23:0B:ED:9B
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 111D
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/8QRoK2SrJ44rJOVxYZjSyyML7Zs.roa
Signing time: Wed 05 Oct 2022 00:58:01 +0000
ROA not before: Wed 05 Oct 2022 00:58:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131631
IP address blocks: 103.123.217.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4381 (0x111d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Oct 5 00:58:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F104682B64AB278E2B24E5716198D2CB230BED9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:5e:60:fa:d4:a0:21:e4:e9:af:92:6b:60:
36:5e:33:3d:02:60:da:84:59:cb:e7:b3:54:01:e3:
63:b7:bf:81:03:5a:c8:59:e5:28:4a:b6:8f:ac:ee:
b0:57:61:74:f4:67:4e:60:1f:8d:3d:05:58:a8:b6:
93:34:c3:dc:4d:ef:91:4f:06:24:c3:86:cb:ce:fb:
48:53:ca:e2:3b:ba:4a:8c:bc:7f:3f:18:ee:13:ba:
cd:77:88:05:eb:24:e9:72:c7:b4:fc:2e:d4:c7:f0:
43:57:a6:e2:42:cf:4e:35:fd:ae:96:98:21:b8:5d:
43:72:82:42:8d:3a:1a:77:29:66:f9:fc:b7:60:56:
db:a6:3f:b6:e8:59:77:4d:9a:2f:3e:00:92:06:25:
a1:14:8a:0f:3a:ba:4f:84:56:aa:90:dc:2f:09:d4:
92:aa:4e:96:f5:93:45:91:d5:ef:c3:3b:10:d8:60:
9d:bc:dc:af:a2:96:68:b1:a4:cd:4b:24:dd:13:22:
7c:00:00:2b:16:6f:78:97:f6:e0:77:f2:41:8a:1f:
3c:9a:6a:2e:af:e3:37:33:6d:c0:ca:a0:11:cd:43:
8e:63:6b:7c:23:81:df:5e:0a:e8:18:6d:ac:95:d8:
c4:c5:1d:84:e2:41:01:3b:c8:54:8d:f0:12:49:1f:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:68:2B:64:AB:27:8E:2B:24:E5:71:61:98:D2:CB:23:0B:ED:9B
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/8QRoK2SrJ44rJOVxYZjSyyML7Zs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:00:d3:0e:b4:7b:29:95:a1:94:08:bd:5b:8b:d1:a1:e7:e3:
d4:61:5b:f4:93:d5:90:95:c0:1b:1d:b7:55:98:2c:4a:75:48:
77:c8:38:55:95:a5:e3:1b:5e:22:8b:69:4c:44:94:3b:67:f2:
46:a2:a7:f9:e9:9d:91:04:4e:23:80:0f:eb:ff:df:3e:25:de:
b5:83:74:35:25:87:95:cf:dc:46:b0:ce:c2:db:26:70:2e:06:
22:38:cc:a5:c0:47:42:b1:a4:57:88:4a:52:15:b5:a7:f8:64:
13:0b:83:6f:0d:91:47:f1:99:a1:bc:6b:19:5a:15:29:23:2b:
fe:57:db:41:88:4e:6d:3b:5a:15:17:ef:f7:92:f0:8a:85:7d:
09:5b:b4:e2:6a:9b:cf:8d:38:1b:d0:77:20:de:24:71:be:a6:
69:c3:d2:c5:d3:e3:d9:a0:93:fe:60:ad:91:b2:a4:23:ab:7c:
f9:39:e3:97:f5:51:19:b0:be:84:99:36:a5:35:e4:db:36:45:
1f:b3:78:e1:86:b4:95:0a:ce:06:9c:6a:b5:7b:17:65:9c:77:
06:fc:80:d9:65:d0:a9:b6:53:fc:b5:9e:62:68:b2:dd:28:e4:
df:92:d8:36:2d:63:df:4b:d7:9d:53:4c:db:54:70:6c:6e:57:
ab:4f:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org