Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/DUcKqROQUu0K4q00P3QwjyDJVNY.roa
File: DUcKqROQUu0K4q00P3QwjyDJVNY.roa (raw, json)
Hash identifier: 9A11QN3ouV0FYp/nMpzH+Rj8wfzWQx6UeM0VfcHXIZQ=
Subject key identifier: 0D:47:0A:A9:13:90:52:ED:0A:E2:AD:34:3F:74:30:8F:20:C9:54:D6
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A82
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/DUcKqROQUu0K4q00P3QwjyDJVNY.roa
Signing time: Tue 20 Sep 2022 05:49:34 +0000
ROA not before: Tue 20 Sep 2022 05:49:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 101.3.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2690 (0xa82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 20 05:49:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D470AA9139052ED0AE2AD343F74308F20C954D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:0a:b3:7c:1d:81:2e:35:c6:d1:d3:e0:77:
84:78:79:c4:e5:1b:73:c1:a1:2d:34:23:8e:17:7c:
0d:d4:11:8a:17:fb:a2:c4:e2:fa:b8:e0:13:63:27:
2c:54:ad:63:eb:c7:f9:cb:69:69:91:4c:48:1f:33:
61:eb:05:c2:88:81:b1:83:1c:57:14:51:13:42:c1:
7b:2b:de:e8:36:95:d1:8d:95:e6:6b:4d:15:c9:71:
3f:13:be:5a:27:ce:5a:7c:7f:1a:36:45:49:6c:e2:
27:a5:d9:54:95:c3:4f:1e:8a:d7:15:3b:f3:e4:ce:
73:69:9e:2b:12:31:7a:17:40:86:11:13:e3:6c:10:
95:d3:e6:3e:65:ea:f8:d8:61:e7:19:a3:a4:28:18:
f6:b6:e5:5a:d2:af:f4:9b:05:0e:ee:ee:a4:07:a9:
41:c5:6f:df:1c:e5:8d:2f:3c:41:1f:c8:18:31:8b:
a6:af:80:65:da:fd:95:04:5c:29:2e:aa:d5:d3:e9:
ba:c0:26:74:41:f9:f4:16:40:f4:50:ed:98:6a:d1:
1e:cc:c7:39:3b:53:1b:a9:eb:db:d4:e1:3f:ea:5c:
d3:f2:26:41:83:1b:c2:ca:cb:a3:17:14:10:f5:f3:
61:09:bf:2f:b6:b0:67:ad:db:b0:b9:d1:0d:8d:95:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:0A:A9:13:90:52:ED:0A:E2:AD:34:3F:74:30:8F:20:C9:54:D6
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/DUcKqROQUu0K4q00P3QwjyDJVNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:a4:ba:47:65:3b:e5:e3:00:7c:56:3b:50:c9:fd:d3:ec:bd:
d1:09:40:43:07:ce:81:80:58:a1:79:83:b3:a2:63:24:61:d9:
a6:38:f0:c6:79:cf:67:2c:f5:58:72:a5:07:f7:16:ff:18:99:
b4:b5:c1:c9:f5:53:d0:81:ad:95:d9:70:c3:37:43:55:c4:80:
30:57:2b:84:93:d2:99:bd:3a:4e:08:7b:bf:d5:4b:a8:d6:82:
a6:7d:c8:45:07:07:25:00:5d:74:f2:4a:9d:cf:98:65:83:40:
c1:ee:96:73:17:70:09:80:87:d6:2d:d2:90:68:c3:06:bb:95:
34:13:c9:b6:25:d5:e2:3a:4f:c9:5e:d7:63:f5:e0:5d:a1:1c:
02:d8:76:24:6f:d5:14:2f:5f:dd:bc:b6:4f:3f:b5:04:ee:f4:
d9:ad:4e:18:52:45:b3:de:79:00:f6:4e:5d:af:ac:0c:f5:99:
dd:80:e3:0d:8a:cf:fd:32:9c:14:70:c6:a5:f7:b1:ae:c9:85:
64:72:85:be:b4:6b:ab:de:67:f9:bf:7e:d4:14:77:8b:05:12:
31:73:bb:4e:40:e6:9f:e5:2c:5e:5e:1d:21:60:08:95:ce:8a:
49:7a:c7:53:2e:83:42:5c:77:63:4d:b4:b8:22:93:88:ac:39:
c8:45:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org