Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Xnnk_mr8cSf2qQsry_yZWgVDaaY.roa
File: Xnnk_mr8cSf2qQsry_yZWgVDaaY.roa (raw, json)
Hash identifier: 28f3JRWlTgSR4LnFkz4t8nVX8v0eWQmOookPmU7hBBo=
Subject key identifier: 5E:79:E4:FE:6A:FC:71:27:F6:A9:0B:2B:CB:FC:99:5A:05:43:69:A6
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 09C4
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Xnnk_mr8cSf2qQsry_yZWgVDaaY.roa
Signing time: Wed 29 Sep 2021 02:42:00 +0000
ROA not before: Wed 29 Sep 2021 02:42:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 103.234.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 29 02:42:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5E79E4FE6AFC7127F6A90B2BCBFC995A054369A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:5d:16:48:45:f2:63:5e:b7:7b:17:2b:d8:
9a:d3:54:b6:ce:3a:6a:48:4e:d8:f2:d8:c2:12:60:
04:b2:44:c4:98:b5:34:c5:f3:46:71:74:24:53:87:
ff:1b:9b:75:db:0f:fe:2a:ca:b6:5f:3d:44:48:6f:
c7:fd:84:99:68:49:b0:b0:f8:e3:96:a1:81:55:4f:
7b:d7:7e:e5:41:7b:e7:37:ff:bf:af:79:db:de:67:
7e:9f:62:25:ee:c5:96:96:7f:48:03:29:cb:0b:8a:
49:a7:1e:36:a8:33:62:88:ad:1c:4e:4f:6b:f6:16:
de:bb:36:64:d6:d8:8d:d3:63:a4:9b:6a:00:e6:a3:
92:21:eb:cd:3a:98:98:03:1d:e3:4c:20:2b:28:a1:
45:37:84:c0:a8:d8:2b:97:67:2f:3b:20:1d:f4:32:
4f:f3:ea:f9:33:9b:9f:42:16:5b:bb:1e:10:a6:88:
a8:f6:d2:e4:1f:b8:e1:4b:ff:e8:6f:9d:2c:df:32:
23:66:4f:cb:31:ff:27:0b:ac:1b:c0:66:01:52:fd:
45:19:04:76:00:24:35:1e:83:49:d1:72:76:ef:d6:
9a:7d:be:ea:b9:e5:a7:7c:dd:c4:6d:14:da:62:14:
bd:e0:54:5e:80:5f:7e:3d:51:b5:c3:18:f2:14:33:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:E4:FE:6A:FC:71:27:F6:A9:0B:2B:CB:FC:99:5A:05:43:69:A6
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Xnnk_mr8cSf2qQsry_yZWgVDaaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
86:2b:ec:69:f2:51:03:ed:15:c6:1c:d1:0d:fb:49:42:68:a1:
34:c7:94:6f:51:e8:11:fb:3a:42:1f:89:42:d6:cb:73:0a:58:
56:bd:a5:b5:27:34:5f:42:4c:96:17:4d:2a:48:2e:43:a4:55:
85:f4:1b:47:c8:57:70:9d:af:c1:f2:a4:39:c3:54:6c:66:02:
e5:e8:38:45:6d:6d:91:e9:2d:2c:3e:4d:3e:2a:f3:ad:5a:ed:
a7:10:cd:a4:80:70:fe:05:ba:32:27:b6:c6:25:c8:81:71:97:
85:46:14:2e:3d:d8:29:b0:33:45:7f:bd:17:c5:d3:19:d2:cd:
1e:38:d6:58:e2:f8:5b:65:a9:8a:17:5f:47:90:78:61:fc:09:
74:f2:d4:86:d8:5d:f3:90:63:2c:ca:40:f9:4a:c3:80:30:93:
1e:b2:41:23:c7:8d:1e:84:39:31:5b:4d:4e:1e:9e:7d:7a:6c:
5b:1a:3c:2d:87:fe:c4:d3:69:dc:ff:3a:3c:1c:32:10:4e:ae:
bb:ea:56:1b:2e:ba:5b:9c:7d:1a:0c:a5:e6:67:1b:1b:09:55:
d6:ce:9e:6e:78:d8:13:03:a1:4d:46:bd:8b:d3:47:d9:ef:df:
3a:79:3a:2e:e3:e1:e0:54:ca:d3:93:eb:88:ad:02:13:1c:05:
09:80:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org