Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/V4w6GWsC345H93DGKvqWgivBwbg.roa
File: V4w6GWsC345H93DGKvqWgivBwbg.roa (raw, json)
Hash identifier: JH8EtCo56R8vcWxvTggK+RpQb64G56Q/YbATaDP+nMY=
Subject key identifier: 57:8C:3A:19:6B:02:DF:8E:47:F7:70:C6:2A:FA:96:82:2B:C1:C1:B8
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1113
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/V4w6GWsC345H93DGKvqWgivBwbg.roa
Signing time: Tue 04 Oct 2022 14:35:27 +0000
ROA not before: Tue 04 Oct 2022 14:35:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 16509
IP address blocks: 103.123.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4371 (0x1113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Oct 4 14:35:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=578C3A196B02DF8E47F770C62AFA96822BC1C1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:dd:87:77:e5:a1:5d:ee:96:0e:f1:23:99:
d8:62:d0:04:cb:f6:ff:f8:a8:99:0c:f3:0e:43:7b:
17:17:03:b3:13:fa:4e:ff:89:8f:ea:6c:3d:82:1f:
58:54:0f:c2:fb:a3:46:c7:43:11:8d:2d:2d:c9:7a:
51:e0:95:1c:d0:ce:04:2d:e1:a5:a5:df:f1:31:02:
75:99:85:ca:85:07:7c:b8:df:43:72:55:5e:5f:7b:
4a:c6:6c:0b:63:57:69:f6:fa:91:03:62:53:da:92:
da:ae:94:7a:19:7a:47:88:46:00:43:ab:b7:90:ae:
2e:74:f5:6c:81:4e:86:1c:63:59:9f:08:5b:29:33:
4c:d6:ef:4e:46:77:3a:04:71:06:e6:a9:f5:d6:83:
05:a9:c1:b3:de:87:d7:f4:c9:d6:87:b5:62:35:ab:
5f:08:a7:ff:19:16:40:ed:09:71:3c:5d:8d:54:30:
c6:e0:f2:12:39:a7:c6:8b:4c:ac:6c:64:c4:49:8e:
3f:0c:a0:5a:c8:52:03:22:de:da:1b:6e:1d:fd:ce:
53:89:5c:19:dc:d3:d4:b6:d4:98:ae:a4:40:1c:0d:
f7:cb:2a:d6:cd:da:01:63:d0:41:6c:ba:48:6a:8c:
62:0a:7e:d6:f0:95:ac:d9:f7:fa:09:94:55:08:60:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:3A:19:6B:02:DF:8E:47:F7:70:C6:2A:FA:96:82:2B:C1:C1:B8
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/V4w6GWsC345H93DGKvqWgivBwbg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1c:b4:d7:52:4d:78:7b:63:87:2e:2f:4a:05:e2:f3:78:6d:
ab:03:15:b4:6d:51:fb:ff:df:fa:9b:98:61:6f:7b:2d:95:3b:
c0:e6:57:17:0c:50:45:01:21:2b:5e:aa:f3:be:a8:20:29:b8:
f6:e5:c0:07:21:17:01:5e:92:b2:0b:bc:80:72:bf:94:cf:03:
0b:6d:7f:d8:ef:3b:5f:32:22:90:00:c0:29:97:0d:a4:dd:5c:
5b:c3:6b:53:83:32:fd:1d:ef:78:f7:69:41:ca:cf:41:d0:c1:
17:d5:37:64:11:23:08:cc:1d:7b:43:52:48:dc:fe:d0:25:ae:
58:9f:d1:f2:88:7d:a3:aa:48:89:3f:9f:5b:7f:df:74:0e:ad:
08:d5:39:a5:aa:aa:7e:3c:be:93:5f:d4:29:86:b9:35:e7:6e:
4c:30:f9:b1:d6:6b:26:0e:b1:8c:77:48:91:63:41:95:08:bc:
88:25:d1:2e:2f:ab:8b:c6:05:91:9a:67:85:c3:e6:26:1a:05:
df:00:03:34:9b:98:50:8c:66:f9:fb:f0:15:f2:52:17:60:3b:
12:3e:86:77:4e:36:76:c6:46:34:69:97:26:8d:11:9c:68:2e:
ef:e1:cb:56:23:49:a3:4b:5c:25:60:84:e8:22:d0:77:73:a8:
ea:4f:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org