Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q1jdVB-FfdAmQ8y6nD6QmvA4p3o.roa
File: q1jdVB-FfdAmQ8y6nD6QmvA4p3o.roa (raw, json)
Hash identifier: feUtGxicUatPPfBloG8rVPEflc4+wcV1bHzOroePtA8=
Subject key identifier: AB:58:DD:54:1F:85:7D:D0:26:43:CC:BA:9C:3E:90:9A:F0:38:A7:7A
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 09A6
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q1jdVB-FfdAmQ8y6nD6QmvA4p3o.roa
Signing time: Mon 06 Dec 2021 07:51:57 +0000
ROA not before: Mon 06 Dec 2021 07:51:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 101.3.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Dec 6 07:51:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AB58DD541F857DD02643CCBA9C3E909AF038A77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:8c:93:65:2c:e4:b2:ee:11:78:5f:00:03:
15:2f:f2:0c:80:90:76:ef:5f:14:66:46:48:d4:14:
90:db:d5:ae:9f:18:42:f9:ac:64:70:e1:d7:82:13:
d6:29:13:c6:1f:65:4c:e2:18:aa:73:68:b8:1d:cc:
9c:48:43:11:59:e3:af:3e:30:0c:78:c3:48:2b:f2:
6a:60:9a:ec:0c:a6:a9:61:86:65:7d:9b:28:ea:33:
c6:e8:f5:5d:0e:eb:0d:e6:0b:7d:dd:c2:57:57:28:
74:0e:27:0b:c5:ba:04:ac:61:73:94:66:3f:38:85:
b9:4c:db:87:f2:2d:0c:7d:e2:87:53:4b:9c:d9:bd:
b7:c9:51:22:03:49:3e:94:8d:bd:e4:1a:cb:96:d0:
ff:3c:78:2e:63:d2:40:92:93:f5:af:a3:b9:f8:32:
27:1b:9d:06:b8:da:f2:92:d7:64:2f:d0:c6:a9:35:
25:7f:cc:1f:e0:90:37:2a:b5:b3:01:3f:43:be:a5:
9a:26:36:c8:ba:a2:0a:57:50:57:ab:b9:39:73:55:
0c:3a:78:d0:b9:50:80:ec:0c:8b:25:e9:ac:c4:01:
f6:83:b2:56:5b:2d:c6:2f:3d:6a:a4:4c:a8:a1:21:
6f:6a:74:2d:96:ad:58:b1:f6:05:e0:9b:16:72:30:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:DD:54:1F:85:7D:D0:26:43:CC:BA:9C:3E:90:9A:F0:38:A7:7A
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q1jdVB-FfdAmQ8y6nD6QmvA4p3o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.112.0/20
Signature Algorithm: sha256WithRSAEncryption
db:db:27:ce:75:c9:bc:52:8e:dd:ec:e0:91:6f:27:68:7f:6c:
6f:42:bd:9b:50:b7:5e:11:0a:52:26:99:c9:fe:b7:94:63:c4:
ec:ea:ed:16:ae:2e:c9:86:5b:1b:ea:01:f2:6a:96:f3:41:73:
a3:c3:12:9d:77:68:ac:11:6a:93:c9:27:8c:ee:16:09:05:62:
dd:73:5b:3c:89:f4:a5:24:5a:10:64:13:be:cf:95:ca:a9:a9:
64:b1:38:6f:12:b7:aa:44:bf:d0:14:37:ef:d7:df:ed:8e:40:
9d:b1:3d:c1:a8:27:1e:68:ae:c9:f5:57:9d:24:38:41:db:3c:
88:b2:58:88:64:54:fd:48:44:3d:05:5f:f4:fc:a6:4a:3f:b2:
12:29:d9:c3:8d:2a:c6:2a:c5:8f:b6:a5:ee:e5:f7:1b:b1:38:
c3:d1:50:9d:c9:24:84:41:96:75:69:9b:55:25:b2:3d:2b:f4:
ca:cb:25:a6:a9:70:7d:59:ca:36:ca:dd:8d:b2:a9:16:b7:36:
d2:da:93:8a:f0:63:33:7f:13:a6:91:4d:bc:64:e1:d1:e7:e2:
91:05:67:31:0e:8b:c0:fe:d7:d8:bd:b2:5e:e3:86:82:f1:ac:
e9:7d:b2:17:24:6c:6e:b6:7b:9c:98:ae:69:1a:29:d3:15:d0:
a8:e3:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org