Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/Gztk-ln-bGcQRujK2vtjkV_Zi9M.roa
File: Gztk-ln-bGcQRujK2vtjkV_Zi9M.roa (raw, json)
Hash identifier: 2khk7E1mKbHkQtbQmJUq38+0TGuAHuIuA0plbAcOt/g=
Subject key identifier: 1B:3B:64:FA:59:FE:6C:67:10:46:E8:CA:DA:FB:63:91:5F:D9:8B:D3
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0785
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/Gztk-ln-bGcQRujK2vtjkV_Zi9M.roa
Signing time: Tue 29 Sep 2020 10:06:58 +0000
ROA not before: Tue 29 Sep 2020 10:06:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131590
IP address blocks: 103.227.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Sep 29 10:06:58 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1B3B64FA59FE6C671046E8CADAFB63915FD98BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:67:c2:84:d3:34:08:24:12:43:4a:84:93:
f5:26:b8:3d:51:ed:a5:c4:ba:db:a9:5b:ff:e5:aa:
db:fa:fc:09:0c:97:9b:61:17:6a:3c:14:a0:8f:a6:
dd:f9:3b:19:f1:a5:dd:07:ef:3e:5d:8e:df:a9:f1:
2c:fa:b2:c0:49:f9:0c:12:b6:b8:94:ed:d2:12:5e:
85:a1:76:bf:39:fb:d7:40:0e:4d:97:e7:16:34:62:
ec:2c:1b:8b:95:4e:04:66:eb:b4:44:94:6c:56:48:
77:12:f0:9c:ed:b0:f7:ef:27:a9:b0:d2:9a:58:e7:
48:42:b5:2f:9a:73:54:e6:82:4b:d1:db:c2:43:4a:
ad:4d:e3:f1:e6:0b:80:53:84:75:0b:95:20:96:cd:
d3:76:23:db:bd:a3:ad:cc:df:8d:ff:da:e3:5c:1b:
db:ac:ba:a8:ce:6d:d1:04:d2:68:e6:d4:c0:c7:16:
a9:1d:a0:e0:15:9f:bc:ab:e2:88:ba:78:d5:ac:2a:
16:cb:70:47:a3:04:d1:34:73:8d:5b:ed:83:c8:69:
39:ea:0c:ce:75:c6:0b:b0:6f:e8:16:c1:b1:7a:3a:
2a:cc:0d:da:81:f4:ba:19:f7:41:62:83:13:31:d4:
05:38:74:83:5c:9f:5a:f6:d6:41:ba:bd:3e:d5:a5:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:64:FA:59:FE:6C:67:10:46:E8:CA:DA:FB:63:91:5F:D9:8B:D3
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/Gztk-ln-bGcQRujK2vtjkV_Zi9M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.224.0/23
Signature Algorithm: sha256WithRSAEncryption
31:64:ac:1c:c4:7d:2e:fe:33:1d:15:bd:1b:95:8f:ef:bb:8e:
5e:f7:9b:cc:6e:b8:c5:b4:bf:b3:aa:47:b4:41:e8:e8:61:d4:
7f:c8:34:f7:90:14:54:4a:f7:41:67:eb:06:9e:96:09:64:93:
e4:3a:51:4d:5a:74:e9:bc:f7:ea:a5:4c:31:ec:3d:f6:be:74:
7f:ec:c6:20:45:a5:6c:c3:3b:0f:cd:22:09:27:a5:73:ec:61:
1d:0f:91:22:53:2c:5a:ed:10:62:c1:a8:9d:c2:83:9c:10:64:
c8:c6:9f:37:53:b2:70:fc:38:2e:85:0c:d5:4f:98:4e:f5:fc:
eb:29:f2:4b:f7:23:17:1b:97:c1:f6:53:dc:b1:bb:5e:5e:fd:
29:67:8a:46:26:03:63:f9:a8:f9:34:a8:1b:d9:52:19:8c:eb:
c6:f2:19:6c:28:52:9f:0e:cd:d3:21:e8:e0:c9:5b:b7:8e:19:
48:a5:46:cb:22:cd:b3:3f:c3:88:e1:28:9d:0b:a7:ab:9c:7e:
3a:97:b0:7f:42:f1:16:df:4e:56:88:01:9d:1b:d1:c1:10:3c:
70:2b:5a:cc:85:a9:14:6c:3b:2d:0a:41:ab:1d:e7:5c:f1:74:
6a:36:3e:8d:fa:cf:74:cb:fd:b0:d0:f6:a0:fc:0d:b4:09:17:
77:b2:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org