Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/36aw_z2ZC_ySzMI8oruG6wK9PtA.roa
File: 36aw_z2ZC_ySzMI8oruG6wK9PtA.roa (raw, json)
Hash identifier: xEoo2A+Vq1v1tITvbvPP2roj64O2K3aPUUaN1UyzFZ0=
Subject key identifier: DF:A6:B0:FF:3D:99:0B:FC:92:CC:C2:3C:A2:BB:86:EB:02:BD:3E:D0
Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial: A7
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/36aw_z2ZC_ySzMI8oruG6wK9PtA.roa
Signing time: Fri 21 Aug 2020 07:35:56 +0000
ROA not before: Fri 21 Aug 2020 07:35:56 +0000
ROA not after: Thu 22 Jul 2021 06:22:36 +0000
asID: 9678
IP address blocks: 103.152.150.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Validity
Not Before: Aug 21 07:35:56 2020 GMT
Not After : Jul 22 06:22:36 2021 GMT
Subject: CN=DFA6B0FF3D990BFC92CCC23CA2BB86EB02BD3ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:05:be:80:42:3f:32:04:17:00:91:d0:bc:
f4:27:ce:10:a4:36:40:38:59:f0:c6:1f:09:34:69:
7f:76:e4:c7:fd:f0:e0:05:ff:a0:ec:7e:93:13:3b:
7e:da:52:34:6c:0f:e5:d6:48:49:9d:4f:1a:92:b0:
32:26:39:72:df:37:23:64:3f:e5:14:b0:7f:ba:f4:
6e:c8:5a:5e:52:ba:61:6c:e6:16:44:e5:66:eb:9e:
93:4a:bd:f7:0b:98:cc:6d:63:f0:22:3f:19:02:62:
35:e1:26:0f:f2:4a:99:ab:0d:51:3c:de:f5:38:d9:
5a:e3:36:fa:2a:25:92:c3:dd:f7:03:61:ad:4b:65:
4c:35:71:35:ff:bc:19:12:ae:3e:a0:6f:6c:64:0c:
81:30:60:f5:59:f8:5d:32:71:cd:5e:03:3f:5e:5f:
98:9c:68:51:d5:54:3f:99:7e:dd:bf:f6:20:c9:6b:
bb:38:82:f3:5e:53:25:79:06:f6:fe:a0:ee:17:1b:
6b:b0:8e:03:0e:7b:30:33:de:61:61:20:da:cb:5f:
98:62:08:54:52:fa:68:cd:3a:4a:8e:34:44:48:fe:
92:fb:07:b2:6c:0c:37:bc:e6:c1:31:e2:a7:f1:de:
f8:75:bb:37:15:16:16:45:cf:fb:f5:52:02:ba:83:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:B0:FF:3D:99:0B:FC:92:CC:C2:3C:A2:BB:86:EB:02:BD:3E:D0
X509v3 Authority Key Identifier:
keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/36aw_z2ZC_ySzMI8oruG6wK9PtA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.150.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:c6:2a:47:b4:a7:38:60:04:28:30:f7:53:f3:d4:d1:3d:34:
0f:d1:9a:ed:03:49:c1:5c:77:70:0b:3d:71:d9:a2:76:20:75:
bf:89:cb:ea:5d:47:39:a1:ff:75:a3:49:37:9a:ba:ef:1f:aa:
a6:40:2f:fd:d8:f3:83:49:79:f9:7a:ce:29:88:2a:44:dd:c2:
e4:ae:64:7a:5e:da:93:33:0e:56:73:bb:bf:2c:57:80:c6:9f:
b2:84:23:70:bf:70:64:53:92:7c:3c:3b:01:df:1b:c1:4f:c2:
ce:48:8f:49:71:55:84:ac:f8:df:5e:59:2c:6b:24:26:39:57:
13:27:83:f7:eb:42:2b:95:ab:70:43:81:06:0b:82:50:5a:bc:
ea:31:60:32:84:2e:6f:94:1d:ff:7c:e1:99:aa:46:81:94:87:
c1:27:76:8d:f5:be:7c:54:9f:96:ab:04:53:ef:5d:e3:d9:d3:
3b:c5:0b:43:cd:21:77:af:94:85:14:38:cb:28:f7:c4:e2:68:
2e:49:e4:f4:ac:f8:7c:32:1b:f9:a8:97:35:14:9d:bc:49:d6:
8c:53:b5:e2:1c:dc:bb:b1:9e:19:e5:8a:4b:e0:8d:bd:68:5c:
22:bf:12:79:92:ca:82:53:d0:35:78:2c:a0:54:1d:8c:8b:39:
b4:4a:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org