Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/_VO1SfWCkd0L-CW1TrqDx5EwqZM.roa
File: _VO1SfWCkd0L-CW1TrqDx5EwqZM.roa (raw, json)
Hash identifier: mDiMRmW5jX2CeUDsIT93v5vNnPHZ6L8e2B4FBDIO4Us=
Subject key identifier: FD:53:B5:49:F5:82:91:DD:0B:F8:25:B5:4E:BA:83:C7:91:30:A9:93
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 111B
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/_VO1SfWCkd0L-CW1TrqDx5EwqZM.roa
Signing time: Wed 05 Oct 2022 00:57:46 +0000
ROA not before: Wed 05 Oct 2022 00:57:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131631
IP address blocks: 103.123.216.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4379 (0x111b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Oct 5 00:57:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD53B549F58291DD0BF825B54EBA83C79130A993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:4e:16:d5:d8:5f:ca:39:af:9a:bc:fa:97:
67:d7:7e:a6:bc:5e:06:c3:4c:f6:b9:11:dc:aa:f0:
69:1b:f7:cf:e7:ae:aa:66:35:58:87:0e:88:e0:86:
8a:be:55:78:76:f6:bf:7d:5c:10:18:c9:7e:0d:76:
80:90:6d:f8:47:4c:95:84:01:45:d4:fd:48:36:5b:
57:16:cf:38:54:09:0d:6d:52:83:a8:8c:3c:34:bd:
bd:15:82:f9:26:3d:ef:d1:be:28:5f:e5:5d:f7:f0:
82:44:19:86:f5:0d:9e:bc:d4:c3:0c:e3:46:2d:82:
22:69:ad:22:35:62:ba:e9:1a:fd:2c:7e:ad:ab:19:
58:3a:b6:d2:2d:1b:1c:fb:4f:96:eb:89:e0:29:78:
1d:f1:03:30:17:d3:fa:df:64:a2:7a:17:10:ad:5f:
c5:77:4c:5c:85:36:f2:7e:2c:24:14:1a:33:42:db:
0e:02:33:81:41:22:f3:00:5a:39:82:41:18:1c:68:
72:45:49:8d:e1:64:1f:c7:30:7d:b2:67:58:32:8d:
61:1f:df:4d:f5:15:22:a3:ac:27:f1:5f:3c:53:79:
50:98:45:35:a2:e6:14:1d:1d:84:6e:74:b9:e7:92:
aa:fc:c3:1b:38:03:96:15:f2:4a:10:a8:74:46:33:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:B5:49:F5:82:91:DD:0B:F8:25:B5:4E:BA:83:C7:91:30:A9:93
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/_VO1SfWCkd0L-CW1TrqDx5EwqZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fd:0c:1c:91:46:2a:18:94:68:a1:ac:e6:76:11:c3:47:99:
30:ba:70:49:49:d8:40:90:d1:c4:3a:7f:e4:eb:34:ed:cf:ac:
18:40:4f:a8:b0:a5:04:ec:e5:62:97:55:af:1d:58:bc:58:4d:
d3:49:88:52:df:2a:8c:b6:f2:8b:31:0d:43:9c:34:aa:69:7f:
c9:38:ff:6b:9b:52:fb:1a:66:04:8a:a8:b9:9b:df:92:34:6a:
54:c9:c2:38:64:c7:79:d5:24:b4:70:cc:43:22:66:b8:2b:a9:
d0:7f:18:b1:4d:f0:fd:6a:13:06:1e:24:89:80:22:d7:d0:88:
a5:22:89:e4:66:d5:33:01:5b:11:d4:76:c9:27:42:6b:c5:16:
fe:a3:54:1d:5b:1e:18:a8:1f:2b:bc:18:bf:20:e6:55:17:f2:
cd:59:6e:02:b6:b5:4e:27:85:d0:8b:d3:9e:44:0b:92:ba:f7:
32:06:d9:21:1f:dc:f5:48:df:d9:c3:12:60:69:9f:92:12:dc:
63:23:7d:1f:54:7b:61:16:d0:42:5e:da:23:de:38:30:84:be:
b2:7d:75:bc:19:14:1f:a5:4b:ee:f5:29:5c:c6:9c:04:a1:fc:
3e:14:80:34:da:8b:c1:e6:d8:94:14:2e:7f:8d:7a:7a:bd:1a:
73:5e:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org