Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/fFgoNyMoGp2i5wZXQLrOyWzRm3c.roa
File: fFgoNyMoGp2i5wZXQLrOyWzRm3c.roa (raw, json)
Hash identifier: eOW4nAHae1d5JvniaB2ibz/ot4HrChil/6wZCxCtfBM=
Subject key identifier: 7C:58:28:37:23:28:1A:9D:A2:E7:06:57:40:BA:CE:C9:6C:D1:9B:77
Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Certificate serial: 0930
Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/fFgoNyMoGp2i5wZXQLrOyWzRm3c.roa
Signing time: Wed 29 Sep 2021 02:40:26 +0000
ROA not before: Wed 29 Sep 2021 02:40:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131623
IP address blocks: 103.117.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2352 (0x930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Validity
Not Before: Sep 29 02:40:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7C58283723281A9DA2E7065740BACEC96CD19B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:ed:c9:91:e5:09:4d:ec:e9:32:37:f4:3f:
23:7c:b9:04:eb:16:1c:c8:ed:25:71:c1:01:c4:f4:
e3:50:1d:0d:32:53:0d:d1:60:ae:6c:cf:e6:54:0e:
d1:a1:f9:ff:6a:94:0b:00:3e:09:71:45:cf:3a:27:
f5:3a:f9:9c:2c:3f:2d:67:76:6e:95:18:f5:2c:1b:
ba:0f:a3:11:2a:69:65:17:f2:a4:5d:61:af:26:e8:
05:1c:55:1a:b2:a5:09:83:ce:03:ea:84:57:75:5d:
e4:06:bc:f7:9b:7c:d7:5e:d8:39:4e:e4:c6:a9:e3:
1d:d3:e8:39:31:7d:f4:0a:e8:e0:bc:a3:82:9b:f8:
93:74:40:3d:3b:97:24:2f:90:26:86:8b:66:1a:86:
2b:a9:b2:6f:c4:6a:1a:28:ed:fb:c9:d3:bb:67:a8:
90:22:4f:d0:b6:ec:d0:40:3e:ac:8f:0a:f8:4a:de:
87:56:9e:0a:f3:ac:ec:b7:99:d1:1d:1c:97:80:35:
57:1a:b5:cc:4e:41:76:0b:67:d4:54:f3:b3:a2:86:
8c:48:00:03:b3:10:27:e8:ea:48:0f:ae:c9:76:44:
09:98:be:bb:6b:4e:b9:f2:5f:c5:1e:db:0c:6f:7e:
85:85:b6:6b:31:dd:08:eb:a4:19:05:6b:f9:83:22:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:28:37:23:28:1A:9D:A2:E7:06:57:40:BA:CE:C9:6C:D1:9B:77
X509v3 Authority Key Identifier:
keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/fFgoNyMoGp2i5wZXQLrOyWzRm3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.4.0/22
Signature Algorithm: sha256WithRSAEncryption
33:6b:84:09:8c:aa:4f:6a:21:52:7e:dc:0b:8c:7e:4e:fb:60:
74:d7:8e:c0:4f:b3:89:69:49:7e:02:2d:79:df:69:6e:4f:40:
ee:75:10:fc:fd:23:c2:a9:be:1f:97:90:69:e0:8e:7b:9f:69:
83:b8:d4:7a:84:18:06:b1:d7:12:cc:66:80:1d:7a:52:b4:c3:
c8:68:f8:da:05:74:a3:cc:b9:31:7f:9e:c4:ec:78:c0:5f:cb:
05:44:2f:93:b1:3f:e8:21:23:6a:c3:e6:ac:35:f3:16:5a:9c:
5a:1c:8c:7f:74:02:8b:cd:07:ba:ff:5c:98:b0:4a:ea:71:c7:
12:e6:e1:49:17:25:30:64:60:c7:b0:3f:a6:89:35:7b:68:d1:
2f:44:89:23:32:6f:04:de:40:12:6d:a8:d3:9c:bf:0d:08:2c:
4e:ff:f9:10:e2:6e:1f:2c:f6:5a:8d:d7:99:95:42:db:a0:20:
20:1c:d5:c6:48:af:64:22:9b:96:02:a7:ca:49:8f:93:67:48:
e1:92:49:a4:f0:5e:df:50:30:c4:4e:f3:bd:aa:b9:67:8b:e2:
f4:46:c5:d0:3d:61:22:b8:9c:80:c5:c5:cf:90:51:d4:a4:e2:
a8:9d:26:8f:3c:d3:f2:79:df:9b:a9:32:b0:e1:0b:9c:34:50:
7b:de:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org