Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/ARyQPna0faiZge76VCJr6xYipU0.roa
File: ARyQPna0faiZge76VCJr6xYipU0.roa (raw, json)
Hash identifier: ghJCojYlztb9ZXKTqXNyjVi6VvzIFsMuMrlQlu/hZQ8=
Subject key identifier: 01:1C:90:3E:76:B4:7D:A8:99:81:EE:FA:54:22:6B:EB:16:22:A5:4D
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0970
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/ARyQPna0faiZge76VCJr6xYipU0.roa
Signing time: Wed 29 Sep 2021 02:42:14 +0000
ROA not before: Wed 29 Sep 2021 02:42:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131584
IP address blocks: 103.31.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416 (0x970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 29 02:42:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=011C903E76B47DA89981EEFA54226BEB1622A54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:bc:87:97:13:98:31:d7:07:80:00:ce:c2:
a7:72:9c:a0:17:6b:29:25:9a:7c:a7:f1:c2:e3:fa:
0e:f9:c6:00:6c:8a:dc:4c:29:95:1d:e6:47:53:1d:
0a:43:2a:23:8e:e0:5c:ca:a3:a0:0d:5d:72:e9:d3:
04:af:76:89:cc:51:db:08:e2:1e:ab:74:77:44:d6:
02:d1:69:c1:0b:67:f0:a5:db:39:56:73:e5:94:3b:
f1:83:43:20:eb:e7:29:e0:e2:40:8c:9c:75:29:ea:
17:cd:37:6f:8e:b0:b7:8f:af:58:39:30:5f:8d:c7:
3b:23:d8:3a:5f:6b:4b:10:21:ec:71:9e:55:52:ba:
e4:98:42:76:fc:cd:98:b8:78:1c:cf:cf:6d:be:1f:
30:f7:09:ea:7a:0d:1c:9d:53:56:05:ef:38:67:f3:
af:6f:e9:c9:00:f7:5b:25:a0:5d:c9:a9:b1:05:91:
cb:ff:19:2d:7a:b2:08:1b:69:c4:65:04:ed:89:ea:
84:d5:82:ae:b0:9d:f0:71:31:56:c3:ab:61:b7:f1:
40:6e:b0:ea:17:d9:2a:7a:8a:e5:4b:bb:6a:c7:9a:
51:bf:69:4d:72:3c:9d:f5:5c:b3:b3:fc:56:ba:60:
ef:b7:b0:04:81:c8:17:c0:96:18:08:5b:f6:e9:07:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:90:3E:76:B4:7D:A8:99:81:EE:FA:54:22:6B:EB:16:22:A5:4D
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/ARyQPna0faiZge76VCJr6xYipU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.196.0/22
Signature Algorithm: sha256WithRSAEncryption
83:08:15:2d:d3:60:cd:dc:c6:cd:a3:d5:c0:74:3d:9e:c2:29:
6c:11:1f:94:f8:6f:93:fc:3c:cd:42:d3:26:0e:87:61:53:18:
9f:76:19:43:40:1a:53:7d:c2:62:f5:57:84:f3:bf:39:37:2e:
ca:19:c2:cf:bb:21:33:b6:f9:85:a3:ad:6b:ff:f8:0a:4f:b6:
f5:fa:bc:09:f6:71:1b:16:42:e1:bb:c3:c9:29:7d:54:ca:73:
26:b8:9f:08:52:3f:fc:40:d2:ad:49:21:9e:a0:f4:3e:ff:2b:
60:10:c9:1f:e2:75:90:4e:9a:5f:c7:57:21:8b:20:0d:86:c9:
6c:e0:5c:5f:1b:1c:50:e3:18:28:91:d7:fd:c2:5a:13:df:7b:
51:b5:99:22:19:b4:99:ec:4f:43:4c:46:99:2f:80:9b:22:f7:
75:55:49:9e:31:ac:8f:dc:7c:2b:6c:21:32:1c:51:a8:5d:bd:
15:b6:51:9c:35:c4:f4:d3:aa:9e:b4:dd:4e:ab:25:b3:b4:b8:
bc:fe:ee:6f:cc:22:cc:0b:ea:d9:df:0d:e9:a8:06:d7:85:93:
2e:b4:8b:53:68:e8:79:7c:8c:05:be:89:c7:16:05:da:d3:c0:
3d:a7:e1:8c:56:25:2b:a6:73:e3:82:8b:de:12:56:05:8d:81:
02:1e:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org