Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/oLbc1mZY8Lpn9ORG2GfeRTRoyYc.roa
File: oLbc1mZY8Lpn9ORG2GfeRTRoyYc.roa (raw, json)
Hash identifier: lArWaz4DzTLZRqCqBr57kvUp0bCYQ4AmO3fNWpWfjyE=
Subject key identifier: A0:B6:DC:D6:66:58:F0:BA:67:F4:E4:46:D8:67:DE:45:34:68:C9:87
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A8E
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/oLbc1mZY8Lpn9ORG2GfeRTRoyYc.roa
Signing time: Tue 20 Sep 2022 05:55:04 +0000
ROA not before: Tue 20 Sep 2022 05:55:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 103.31.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2702 (0xa8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 20 05:55:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A0B6DCD66658F0BA67F4E446D867DE453468C987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:44:01:63:90:49:ca:02:cc:cf:5d:88:99:
76:4b:45:3e:75:5b:23:dd:c0:f1:6d:85:86:b3:b2:
7b:3e:54:2d:31:29:06:7f:ef:a8:44:3d:69:6d:c8:
21:34:45:55:67:ff:52:d9:21:38:34:23:85:36:64:
df:2e:a1:b1:35:e9:37:7d:d9:1e:11:71:f5:47:1b:
22:29:91:2e:92:7b:d9:1b:75:44:1c:fd:de:67:0f:
24:9d:b1:59:fd:a8:5c:0e:9e:15:63:cc:b7:c1:ee:
e0:30:c7:4d:1c:09:b6:26:19:d7:0b:d5:36:79:b6:
2b:5d:09:ca:20:d8:9b:6c:4d:0a:67:2f:d2:e8:14:
ff:bc:f4:60:4b:c6:92:ed:bc:29:5e:a7:6b:2e:6a:
12:9d:7c:51:57:20:80:50:47:3d:c5:a5:2e:b5:db:
7e:25:54:2e:52:90:c0:98:9f:93:c6:f4:99:3e:1b:
9f:95:81:d4:41:c6:c6:6e:b7:d2:12:55:69:f9:9a:
d9:7b:74:79:33:bd:5b:c7:3a:fa:f2:f7:18:6a:56:
e8:b4:f3:49:86:da:24:b5:b7:a6:ec:8e:6a:75:3b:
af:19:2f:a0:3f:27:ee:d4:97:85:fe:4c:11:b5:e1:
a4:fd:98:42:fb:a4:cb:7b:a4:52:a3:d8:ac:db:69:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:DC:D6:66:58:F0:BA:67:F4:E4:46:D8:67:DE:45:34:68:C9:87
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/oLbc1mZY8Lpn9ORG2GfeRTRoyYc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:88:b5:78:57:b4:cb:01:02:9d:4f:ef:cb:98:97:89:2c:2b:
45:aa:00:b6:11:b8:c8:d7:8e:2b:2d:47:62:72:f2:b5:fa:27:
c8:f9:cc:9b:ea:ea:be:36:05:ef:04:b8:b4:2f:ad:e8:39:1b:
b8:b8:e2:6d:c2:b7:06:b2:03:4e:50:d2:67:c1:84:c1:20:c0:
e4:1e:ab:69:63:44:f9:04:cd:a5:2d:32:81:52:1a:9f:70:c4:
74:3e:b4:47:81:5e:ac:92:b8:53:3f:a4:84:02:1b:a3:66:a5:
12:74:73:f1:55:8d:bf:86:3f:88:8b:de:2b:c1:22:81:28:63:
ee:8b:6e:52:81:d5:86:62:43:73:7a:d7:65:a5:25:7e:27:cc:
b7:81:5d:19:6a:34:8a:50:7f:88:c2:49:69:f7:94:60:82:b5:
1e:bb:31:10:96:13:26:72:c7:14:d0:8f:db:2b:35:1d:c1:1c:
3c:7e:9f:ab:76:7f:ee:72:87:f9:3f:70:f7:0e:bc:6b:df:01:
35:86:ed:b6:1f:07:16:7a:49:f9:36:cc:f8:fe:0a:b2:5d:a2:
42:92:6b:93:f3:f5:e0:d7:ab:69:12:6f:7c:c6:47:93:bd:a7:
97:56:5b:4d:84:c9:fc:68:76:b1:2a:d7:3d:3f:d6:2b:4d:ce:
38:39:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org