Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/1BZBg11b7rYw9X1vKIm9yT7PJL4.roa
File: 1BZBg11b7rYw9X1vKIm9yT7PJL4.roa (raw, json)
Hash identifier: 2X2Xic771jbzTjodqKo0CU4dtO+kjbK0eZb4m5a+C2M=
Subject key identifier: D4:16:41:83:5D:5B:EE:B6:30:F5:7D:6F:28:89:BD:C9:3E:CF:24:BE
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A88
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/1BZBg11b7rYw9X1vKIm9yT7PJL4.roa
Signing time: Tue 20 Sep 2022 05:51:29 +0000
ROA not before: Tue 20 Sep 2022 05:51:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 101.3.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 20 05:51:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D41641835D5BEEB630F57D6F2889BDC93ECF24BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:46:0a:2f:79:9d:41:db:d0:f3:0f:78:27:
0c:70:7c:c4:ac:36:03:68:67:78:a1:7e:7c:40:d3:
b4:1d:4e:95:ee:be:df:95:f3:eb:99:18:5a:3c:ae:
4b:0d:50:51:70:09:4f:e8:19:5e:99:17:6d:58:58:
97:ee:6e:93:b0:64:99:4f:f7:8e:8a:f2:21:a7:9a:
87:f1:61:41:34:93:1c:29:db:65:bd:bc:a7:bf:bb:
bb:81:c5:24:49:c9:fd:68:2e:5e:a0:92:e2:e9:85:
38:62:b8:d5:95:54:a8:6b:7b:68:72:6a:a3:51:d7:
ce:e1:56:ce:a2:39:64:43:42:c7:7d:0f:9b:3d:c5:
7e:2f:09:a7:4e:48:72:4b:c8:29:73:07:8e:e7:9c:
dc:d2:ce:26:84:98:d1:17:bd:7b:07:23:cc:72:33:
d7:d3:2e:24:a8:ef:cc:a9:81:f9:af:5a:a2:b7:57:
38:2f:51:e6:b7:71:6f:b6:be:5f:13:21:db:e3:4a:
7e:d4:94:01:57:d9:15:04:e3:f5:30:d8:ed:50:65:
26:7d:38:2a:6f:83:e6:89:11:34:4c:d9:17:26:80:
72:ab:01:ff:26:12:0a:87:96:0c:71:01:a5:2c:bb:
c4:07:60:c2:4f:46:a4:00:bd:51:28:0e:60:56:7a:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:41:83:5D:5B:EE:B6:30:F5:7D:6F:28:89:BD:C9:3E:CF:24:BE
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/1BZBg11b7rYw9X1vKIm9yT7PJL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:99:6a:7e:1f:e2:ae:b4:78:b5:28:10:2c:c8:c4:25:0a:d4:
1f:1a:1b:2a:c9:3f:e1:22:fa:45:73:c6:38:76:cb:cd:ba:a7:
30:06:7b:03:c0:d6:18:91:f3:17:7a:8a:76:5d:09:1a:fa:e3:
92:38:19:90:f9:32:3d:41:3a:60:00:2a:5e:07:0f:e1:66:64:
3f:69:78:bc:06:08:e6:b8:0c:3b:1c:e3:27:bf:56:97:62:c0:
67:3a:88:65:df:28:00:dd:30:57:b5:43:43:24:57:d3:a0:2c:
e9:4f:7f:7c:b4:bd:eb:e8:08:8c:a4:c9:58:6f:e7:15:d8:67:
5a:1d:1f:42:df:e3:d4:75:71:c3:50:24:fd:ef:b8:9b:8e:a8:
17:5a:36:c8:cb:03:3c:6e:08:74:a1:6b:15:5d:d6:d1:48:ba:
98:39:86:d5:8c:86:73:32:51:a5:b7:f5:9e:69:b2:ac:78:95:
02:5d:e5:f9:5e:93:f9:41:73:70:5b:56:ca:ad:95:69:5d:36:
d9:fb:73:c8:4b:31:95:05:27:ff:3c:37:98:c1:17:cd:b4:c6:
90:55:be:9c:83:52:73:ce:f0:c2:1b:0f:8b:c3:18:fb:56:22:
5c:60:40:9b:b5:ad:dc:d8:ce:66:c6:0a:6e:eb:f6:ee:7f:ce:
41:21:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org