Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/AugtC68cGh2VuhY1vKhI5Yjj0pQ.roa
File: AugtC68cGh2VuhY1vKhI5Yjj0pQ.roa (raw, json)
Hash identifier: Mugs9fWts7oGlTaOCVJOxaYqsZqVSEly012Hav9aj8E=
Subject key identifier: 02:E8:2D:0B:AF:1C:1A:1D:95:BA:16:35:BC:A8:48:E5:88:E3:D2:94
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0770
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/AugtC68cGh2VuhY1vKhI5Yjj0pQ.roa
Signing time: Tue 29 Sep 2020 09:52:57 +0000
ROA not before: Tue 29 Sep 2020 09:52:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Sep 29 09:52:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=02E82D0BAF1C1A1D95BA1635BCA848E588E3D294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4b:cc:7f:6d:a7:8c:b2:ec:ed:c9:bf:ad:d2:
31:e1:fc:2a:c0:f0:97:7c:38:0f:40:54:5d:93:22:
29:31:c1:59:6f:0c:fb:7d:51:fd:79:24:ad:55:72:
6e:7d:c8:5f:ff:d4:ba:74:f6:5a:89:eb:b4:a5:82:
81:d2:df:00:ce:e6:e5:ad:32:82:b5:c4:12:d5:ba:
48:74:c7:f2:a0:51:28:3c:0e:57:cf:94:23:9e:4e:
5e:59:15:c1:96:cb:5a:06:a2:7a:2f:5c:16:3f:38:
1c:f1:4a:b7:be:42:59:48:2e:c8:dd:b7:6c:16:8a:
9f:03:a5:b6:01:27:0e:14:2b:96:ca:3e:b3:6e:0e:
1d:96:a2:3a:33:bc:e3:3a:3d:df:7f:0a:4d:fd:bd:
6f:7e:4c:8a:6b:2d:ba:3c:c3:9b:cc:de:41:9f:e4:
aa:5b:97:0a:95:2c:43:a0:92:79:69:4d:55:e7:98:
1a:63:29:83:27:3e:a5:01:a6:87:e8:a5:94:e4:e9:
46:64:3e:38:6c:3f:9a:a5:51:e0:eb:42:22:ef:a5:
1b:7d:1d:be:73:c1:cc:55:26:54:fc:13:11:73:87:
1e:7d:ba:b5:0b:3a:41:65:8d:b5:17:1b:4a:74:26:
d0:37:0c:f3:97:3c:08:32:b3:6c:5f:60:30:e6:a1:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:2D:0B:AF:1C:1A:1D:95:BA:16:35:BC:A8:48:E5:88:E3:D2:94
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/AugtC68cGh2VuhY1vKhI5Yjj0pQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
78:3f:a7:0e:4a:4b:0b:58:a3:6e:7a:c8:ad:3f:83:44:27:45:
b4:a4:15:f3:c5:06:64:40:40:5e:03:10:c8:4d:4b:c5:c9:7f:
b7:8e:73:8b:2a:31:ac:ac:83:d6:56:1b:2f:ed:c4:f2:70:33:
2e:96:f5:b4:3b:16:58:34:8e:f7:a2:b6:05:e6:95:26:fc:5b:
d9:0a:62:84:8d:ef:46:08:f8:97:58:56:fd:d0:20:cb:bb:7e:
15:00:2d:3a:04:e3:22:ee:e9:8c:29:d9:c0:fa:c5:9d:6b:ca:
1b:8a:3f:80:54:c9:25:8f:9b:e0:c5:2f:fc:02:df:1c:98:5a:
6b:8d:63:ed:f2:ba:92:fc:f5:12:ed:e4:7b:96:26:4b:7b:89:
0c:0a:29:82:e0:e2:e9:d0:c5:a0:4c:f9:b7:44:cf:16:4a:9d:
1a:04:b4:2f:c1:99:d6:0d:cc:cd:24:f0:72:55:79:98:f6:50:
8a:0e:fa:e8:40:54:a6:84:47:2a:69:42:0a:88:61:bc:31:3f:
84:00:99:ec:a9:a6:71:40:33:6d:e8:5f:b5:0b:af:0d:d3:e5:
ea:bc:c2:ab:3f:44:8d:fe:3a:a2:e9:d3:a8:7c:fb:f9:2d:8e:
38:11:38:8b:93:99:58:db:6a:9e:76:66:dc:35:d8:0f:20:fc:
64:3e:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org