Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/yT_H3nPIQkPhsdbEDbSc8mG9RpI.roa
File: yT_H3nPIQkPhsdbEDbSc8mG9RpI.roa (raw, json)
Hash identifier: Xhvk/Z+250fPhsPxzmqvTxhQP9xw1YOtlmcJTLm3rCo=
Subject key identifier: C9:3F:C7:DE:73:C8:42:43:E1:B1:D6:C4:0D:B4:9C:F2:61:BD:46:92
Certificate issuer: /CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
Certificate serial: 07BC
Authority key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/yT_H3nPIQkPhsdbEDbSc8mG9RpI.roa
Signing time: Thu 15 Sep 2022 02:38:46 +0000
ROA not before: Thu 15 Sep 2022 02:38:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 103.126.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
Validity
Not Before: Sep 15 02:38:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C93FC7DE73C84243E1B1D6C40DB49CF261BD4692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:c2:47:db:85:28:2d:2d:98:d2:fd:29:7c:
81:fc:c9:2b:60:60:a7:b4:94:48:2c:43:d5:7a:ef:
a8:0c:f4:af:9a:85:de:d8:8c:66:2f:b1:e5:c6:d2:
ee:5e:f5:49:af:19:17:e0:a6:9f:3e:df:4a:b6:37:
35:e3:df:77:22:73:2f:4f:d1:6d:44:eb:99:2c:3e:
5d:97:9e:cd:ac:c2:f7:63:0b:5f:bc:ed:3a:ac:55:
e6:14:c0:c6:78:96:6c:0b:d4:f1:9d:15:ee:ed:7c:
86:4a:6a:c8:4b:50:dd:fb:e3:47:32:a4:1f:1e:24:
4c:24:52:ea:b5:a6:55:18:50:e7:c3:e1:82:fe:e2:
94:34:23:52:18:79:4d:80:12:67:6f:8b:52:76:17:
9e:68:7f:87:53:56:36:a5:d5:b4:6e:c5:18:8c:71:
cf:a8:44:66:c2:1a:78:34:0e:23:f8:20:ff:bf:d1:
5d:35:55:4a:10:30:3e:ec:66:da:63:c3:5c:e6:ed:
d4:0c:3e:04:e2:cc:c8:da:e3:78:08:46:59:51:26:
87:c2:a8:57:b7:41:44:50:a0:76:2a:20:2d:9a:5a:
79:eb:fe:65:c8:35:96:e4:9d:78:d1:1c:21:da:0b:
3e:83:0b:c7:63:d1:55:74:5b:d2:44:32:55:fb:11:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:C7:DE:73:C8:42:43:E1:B1:D6:C4:0D:B4:9C:F2:61:BD:46:92
X509v3 Authority Key Identifier:
keyid:0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/yT_H3nPIQkPhsdbEDbSc8mG9RpI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5a:e8:3c:dc:43:8c:63:e8:e1:f5:89:90:91:cf:67:7b:6d:
40:4f:4d:14:b6:2d:da:fa:2f:37:25:df:22:26:9e:83:a5:b4:
56:9f:74:87:d0:5a:b1:7b:6a:16:2e:6d:c2:71:8b:11:70:d9:
6e:d3:4a:49:1d:6f:c0:36:3e:8b:cd:91:78:f8:c1:2c:40:33:
60:57:20:cf:cc:09:02:59:ae:3c:3b:93:0c:e9:35:de:76:16:
80:50:4e:f8:09:bd:c8:4a:82:c2:52:91:fd:bf:ff:ad:21:ac:
94:95:bb:48:0d:52:1d:a8:38:57:44:03:d9:6a:6d:b8:f5:2b:
e0:d5:9c:91:0e:28:f4:82:76:40:05:f4:ae:03:15:24:94:9e:
0c:3c:c2:28:59:fe:ec:07:46:3f:54:99:d7:4e:f1:2a:04:21:
6c:54:a0:d3:6e:26:66:7d:28:90:3d:48:e3:95:67:2c:42:3e:
8a:91:f3:a5:56:f8:41:4d:e6:8b:97:37:e2:b2:b1:bf:70:8d:
8c:ee:ef:a9:b8:96:d9:7a:33:9c:f4:ac:87:3b:d1:fc:8c:22:
d0:10:f2:ba:12:b6:d9:65:38:c1:47:1b:34:b4:77:b4:7d:1a:
da:5c:d6:b8:31:e5:30:cf:66:e7:8d:4c:b8:38:0d:ad:32:0f:
a1:8a:9c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org