Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zgggELu9RgbSvsrEOvF994Z0Tus.roa
File: zgggELu9RgbSvsrEOvF994Z0Tus.roa (raw, json)
Hash identifier: OcSckcySWlG7z9OBEPXPykjvZQ+cYoFksrwDfjYoy0I=
Subject key identifier: CE:08:20:10:BB:BD:46:06:D2:BE:CA:C4:3A:F1:7D:F7:86:74:4E:EB
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0999
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zgggELu9RgbSvsrEOvF994Z0Tus.roa
Signing time: Wed 29 Sep 2021 02:44:39 +0000
ROA not before: Wed 29 Sep 2021 02:44:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38407
IP address blocks: 103.106.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 29 02:44:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CE082010BBBD4606D2BECAC43AF17DF786744EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:3b:d1:cc:07:31:2d:39:29:01:3a:ed:1e:
2d:b6:2e:2f:ec:b1:68:86:27:31:c3:5e:3a:74:6c:
c4:16:f0:f4:a4:28:3c:90:37:00:85:2c:e4:bb:5c:
91:39:78:ad:62:70:05:3a:4b:ef:2c:28:a2:87:24:
bf:73:41:06:ce:a8:b4:24:46:d3:fc:53:24:b4:44:
6d:e2:44:7e:65:c2:e1:05:2d:bc:17:0f:15:32:db:
77:9b:f7:77:2f:e3:53:3f:9b:03:c6:7e:8f:69:3f:
98:27:7e:5a:d0:01:b1:11:aa:93:ff:8d:a5:dc:de:
c7:75:92:94:cb:ae:59:fa:cb:b6:ca:67:62:63:7a:
20:39:ac:93:23:5a:cd:21:a2:a2:de:75:31:c9:62:
01:35:11:1d:c7:5d:ed:67:c6:b2:08:e0:a2:4d:97:
39:41:34:5d:dd:42:27:64:be:9e:66:87:73:e8:4c:
30:c6:00:28:c5:0f:cf:66:e6:9b:72:78:73:b6:b6:
be:81:35:87:70:7e:0f:0d:1b:10:a9:2f:f0:85:c8:
7b:a1:cd:b5:d3:ca:54:9f:76:2e:3b:79:f0:2a:89:
1a:73:e0:d6:20:ae:07:00:98:8a:3a:26:ae:2e:cb:
b0:9b:db:b8:c4:3a:ce:b6:e4:3c:2c:7f:6f:41:a9:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:08:20:10:BB:BD:46:06:D2:BE:CA:C4:3A:F1:7D:F7:86:74:4E:EB
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zgggELu9RgbSvsrEOvF994Z0Tus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:52:f2:a6:f1:d4:7a:14:f4:b3:05:f7:3a:bb:b2:78:d4:87:
9e:e2:80:e0:2e:e9:cc:7c:5d:06:6f:82:9a:ac:ba:b4:29:8b:
e2:25:c5:d1:47:be:05:89:4b:3c:f7:01:90:69:7d:2b:c5:38:
8b:ed:1f:b7:82:97:a7:e8:1e:87:57:93:05:4d:0b:2b:74:c8:
94:ff:01:3b:3a:1b:9b:fa:55:d5:32:b1:44:bd:03:82:72:0d:
1b:3e:08:e9:1f:1c:2b:72:26:39:14:c0:3f:24:b4:5b:b2:5c:
4c:91:81:53:3a:2b:2c:27:a9:34:65:d0:be:87:87:9e:fe:f9:
75:49:b1:cd:85:77:3a:d5:57:dc:c6:ce:0b:ce:19:83:74:a5:
1d:a6:d6:0f:eb:77:56:18:35:c3:ba:96:8f:0a:a7:4b:c0:25:
ab:ee:19:6e:a4:f2:74:ef:0c:44:44:da:c1:fc:dd:18:10:7d:
ab:3c:21:c3:9c:4e:03:3c:b4:cf:77:22:44:08:4b:f0:23:77:
37:40:b9:89:8d:05:a2:a0:f0:aa:6a:24:f9:74:f8:88:90:1e:
3f:3d:a8:67:a1:77:70:8f:af:d4:84:d4:87:d0:2b:69:ee:3d:
28:a2:46:02:7f:fe:e5:2d:9e:51:49:fe:42:15:36:1f:d2:2c:
89:8a:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org