Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa
File: Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa (raw, json)
Hash identifier: HFyh1r/UB1AxZeID/xfyOnJvT5Q7I2wKUuzsV4gQkCk=
Subject key identifier: 12:8F:36:6F:5C:20:E0:B2:2E:28:80:65:60:A8:26:47:4C:76:B0:92
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1016
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa
Signing time: Wed 29 Sep 2021 02:50:26 +0000
ROA not before: Wed 29 Sep 2021 02:50:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131631
IP address blocks: 103.123.217.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Sep 29 02:50:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=128F366F5C20E0B22E28806560A826474C76B092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:bf:46:b0:81:00:15:28:33:82:18:02:cc:
34:dc:b0:8d:95:a1:1d:31:1c:fd:a1:0e:87:7b:ef:
0a:12:11:69:49:81:c2:0c:94:06:41:ca:53:ac:9a:
af:0b:d7:22:76:91:ac:c1:cc:85:51:40:ba:a9:7c:
af:ed:ea:a2:d2:f2:ba:37:b3:c6:63:b0:26:f1:e6:
0e:ac:f9:a3:22:7d:51:02:56:08:43:4b:2d:87:24:
24:b7:60:f3:9d:14:09:4b:d9:f6:f1:93:2b:af:f2:
04:f6:94:69:96:d5:2d:10:57:15:46:75:1b:f4:af:
5d:55:06:c3:09:2c:88:16:69:19:9d:b3:0b:47:8b:
ac:fe:8c:92:f6:86:aa:b5:92:c7:cf:39:f6:bf:11:
2a:35:2e:17:ac:9d:6e:78:55:11:25:af:96:fe:5b:
15:4a:7a:92:2a:0d:4c:60:c7:d3:65:52:01:06:88:
c7:49:8a:30:4b:57:12:37:3a:ea:78:ec:9b:b9:6b:
32:2a:3f:25:90:70:91:87:c4:82:45:0a:35:99:79:
91:c5:57:cc:63:85:8a:fb:58:7e:04:3a:2b:21:ff:
c6:7c:cf:13:3b:40:ab:5f:82:e1:80:c8:66:b1:8c:
57:60:4b:9e:c5:2e:fd:7f:09:7d:e3:c4:4d:49:85:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:36:6F:5C:20:E0:B2:2E:28:80:65:60:A8:26:47:4C:76:B0:92
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.217.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7c:10:61:b7:91:63:f4:ce:67:0e:95:a3:79:93:4d:45:b7:
ff:56:52:af:c9:51:38:dd:99:ec:6e:f9:5c:02:4d:83:20:48:
43:ae:f7:f6:d8:54:5b:83:86:e0:fa:69:77:e8:86:3e:9d:83:
21:16:59:0a:18:ff:11:72:17:f1:8d:17:8f:53:fe:69:1b:09:
b9:f3:99:bf:f6:3b:77:f3:07:1d:79:14:38:7c:5c:21:ed:ac:
02:d4:82:bc:50:4c:1f:5b:39:09:35:2a:bc:9d:89:48:94:0d:
83:61:11:e0:49:78:dd:6f:b0:0d:38:33:72:ed:d5:e9:25:c9:
a0:98:8f:30:ec:85:2b:55:eb:db:b9:c0:45:bb:0f:18:d6:a3:
a7:e1:1b:dd:73:f0:74:cd:54:00:70:3e:e2:06:d7:c2:66:9d:
fd:00:ea:a0:09:d2:e4:6a:4a:a5:e9:21:10:01:1b:c4:47:8b:
92:ff:ea:e0:33:73:64:27:fe:12:a4:e3:64:88:58:df:0b:82:
77:3c:aa:48:d7:71:69:58:94:c7:ed:1c:a8:6a:08:04:fd:df:
85:6a:12:3b:7b:e9:db:4c:1c:78:4a:b1:03:d8:d6:eb:6a:66:
a5:51:cb:91:19:b6:b7:7b:af:bf:44:a3:26:34:05:0d:6e:dd:
2d:5f:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org