Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/Gm7XKjmw0VoWNEm2Ljmd0efipuE.roa
File: Gm7XKjmw0VoWNEm2Ljmd0efipuE.roa (raw, json)
Hash identifier: Y2WmyzAfgdB3bEctKEjrCBg4yCBGz+n6oL0Ae9ys8TU=
Subject key identifier: 1A:6E:D7:2A:39:B0:D1:5A:16:34:49:B6:2E:39:9D:D1:E7:E2:A6:E1
Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial: 04BC
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/Gm7XKjmw0VoWNEm2Ljmd0efipuE.roa
Signing time: Thu 16 Feb 2023 10:59:45 +0000
ROA not before: Thu 16 Feb 2023 10:59:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 209854
IP address blocks: 103.152.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Validity
Not Before: Feb 16 10:59:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1A6ED72A39B0D15A163449B62E399DD1E7E2A6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:31:56:5c:91:84:98:f8:3e:30:b1:18:95:
ad:5c:cb:61:9e:f8:03:15:6b:ca:c9:a7:84:b3:8e:
5e:7b:65:60:ad:27:53:80:54:9c:04:78:8f:cb:66:
ba:59:f6:d6:bd:a5:5c:9a:c5:90:92:f5:51:f9:58:
91:b7:ee:71:be:24:c9:bd:ac:09:a2:52:b5:c1:32:
08:67:e0:2f:d2:a8:b9:f0:5d:cf:42:93:59:b6:7d:
1e:11:4f:44:04:f5:a9:ce:e2:8c:61:be:c8:eb:d1:
8b:57:21:2a:6a:3a:13:da:78:dd:21:cb:28:06:85:
a7:47:ce:2f:d5:5e:5e:46:b3:07:e8:16:74:87:df:
e5:14:08:a0:1a:c8:c5:7c:20:a9:1b:1b:7c:ae:3f:
f8:78:2a:fc:47:29:09:f1:1b:77:ff:cb:59:8e:ad:
54:b4:0d:bb:4d:e3:1c:eb:49:d7:01:aa:c2:d7:ed:
16:47:ba:ae:d2:16:54:d7:7f:9e:83:48:6e:0d:2e:
8a:ff:18:13:7d:c1:29:76:62:0e:29:2b:53:bb:b8:
de:b6:d9:48:18:59:8b:36:bb:62:7a:c6:f8:dc:d8:
da:0d:65:e6:40:b6:34:1c:72:22:e6:b0:04:77:57:
9d:49:0f:93:92:16:d1:11:4f:07:24:8e:b8:dc:ae:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:D7:2A:39:B0:D1:5A:16:34:49:B6:2E:39:9D:D1:E7:E2:A6:E1
X509v3 Authority Key Identifier:
keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/Gm7XKjmw0VoWNEm2Ljmd0efipuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:48:ae:51:96:90:8e:90:c0:8e:19:69:34:29:e8:74:68:f1:
43:c0:7e:39:ba:c2:75:00:20:6b:68:9d:f5:41:db:4d:4e:b6:
0d:a6:44:6c:0b:33:df:5f:fe:8b:8c:e4:9d:17:19:7b:ed:d6:
59:2c:30:af:08:cd:ea:bb:e1:b0:3d:0a:63:db:8f:80:95:11:
1a:3b:f8:9c:8f:42:53:bc:3a:1b:79:57:0e:83:35:7f:d8:3c:
3c:05:66:3e:e0:c6:94:99:68:27:2c:c9:04:38:b2:50:e5:04:
f7:35:78:c8:bb:11:cb:9c:be:e4:df:ff:b3:74:02:ce:89:6c:
b0:3a:7b:57:6b:74:13:59:f3:c6:82:68:25:61:0f:f9:9d:9a:
bb:46:87:8f:88:df:f0:16:71:58:47:3f:2d:c5:4d:ef:76:9e:
58:b6:94:ed:74:dd:51:8a:75:91:e3:f3:3f:1a:46:53:15:e2:
14:95:66:d5:5b:9e:1c:33:c3:63:cb:e6:e7:09:6f:53:3b:42:
be:aa:3f:a7:78:52:95:34:00:a9:85:58:83:2a:70:4d:71:19:
17:a2:ac:91:f0:a8:08:0c:9e:39:b4:ba:44:cb:2b:1c:c5:42:
c6:a0:96:1e:58:5d:be:7d:8f:0e:08:f3:84:72:64:b6:82:3a:
6a:cc:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org