Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/v7kZg_jkzjVjicywnClU0Dv2gec.roa
File: v7kZg_jkzjVjicywnClU0Dv2gec.roa (raw, json)
Hash identifier: NOmZ/5jL5eLbeVu0L1PZLv0sIbjxcJC6fHM1nlwQc0I=
Subject key identifier: BF:B9:19:83:F8:E4:CE:35:63:89:CC:B0:9C:29:54:D0:3B:F6:81:E7
Certificate issuer: /CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B
Certificate serial: 1033
Authority key identifier: 0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/v7kZg_jkzjVjicywnClU0Dv2gec.roa
Signing time: Thu 15 Sep 2022 02:38:13 +0000
ROA not before: Thu 15 Sep 2022 02:38:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.124.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B
Validity
Not Before: Sep 15 02:38:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BFB91983F8E4CE356389CCB09C2954D03BF681E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:79:ea:0f:67:e2:7e:63:36:90:51:6d:8e:
8d:9c:17:23:99:99:fb:72:a9:5d:dc:1f:e8:07:b9:
ae:3c:dc:5b:18:c0:27:e7:aa:8f:ad:5a:f8:51:b0:
1f:11:54:60:26:4a:d4:b6:72:8b:46:c2:27:72:2c:
a4:16:ec:b4:da:13:ec:93:74:33:4d:6c:49:61:c6:
f4:1b:ea:4a:ed:51:be:2c:59:94:ff:cb:53:55:9e:
17:34:e7:3f:68:14:59:1f:0e:d8:b8:58:93:fe:2f:
71:57:8a:b2:47:12:0f:de:73:8f:5a:b0:3a:84:1b:
ae:b4:ff:0d:15:d8:0e:26:17:27:a7:5d:57:97:fb:
2f:9b:99:ae:d0:ab:ba:86:33:50:83:d8:80:42:bb:
ac:10:38:06:4a:6b:1a:1f:76:cf:b2:43:3d:f9:07:
19:a9:88:5c:dc:17:bb:73:91:95:f1:ad:7b:97:dd:
52:29:79:67:7e:f7:81:45:59:37:21:6a:97:2d:8f:
06:2d:7a:dc:84:ba:96:02:ed:4e:f3:dc:e9:6a:69:
f0:2f:2b:00:7b:4d:93:3c:03:e5:23:84:00:2d:b9:
b0:9b:d9:f5:b5:6e:ff:2c:5b:b3:51:90:0a:3c:54:
71:8d:ae:25:9d:db:9f:86:15:8f:3b:b0:c1:c9:0d:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B9:19:83:F8:E4:CE:35:63:89:CC:B0:9C:29:54:D0:3B:F6:81:E7
X509v3 Authority Key Identifier:
keyid:0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/v7kZg_jkzjVjicywnClU0Dv2gec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:49:d9:23:a6:27:d9:15:3b:17:7b:df:5d:a2:c7:95:b8:2d:
f3:be:70:ac:fb:67:aa:8f:cf:15:be:c1:64:71:cb:76:9d:90:
2e:86:0f:7e:64:25:3e:10:c7:bf:75:7e:76:31:97:37:ca:af:
75:c2:4a:4f:ab:c2:93:74:fe:33:00:33:61:27:85:a8:5d:9f:
3e:2b:2a:e4:98:7b:4d:28:44:c8:dd:40:93:68:f0:97:22:2b:
f3:8f:0d:96:6b:96:ef:a9:99:4d:6c:09:bc:7a:ea:53:e5:b8:
6d:93:32:7c:1e:23:38:7f:be:92:8d:0b:38:dc:be:b6:d7:5f:
3a:58:7c:13:f0:bd:e6:0f:21:6c:3b:93:26:40:48:4d:3a:e1:
37:50:fb:ff:75:8b:b4:58:33:ae:c9:2c:db:45:bc:bb:05:48:
ad:91:7b:c6:82:7a:f6:2f:70:b7:f5:f3:2b:c7:6e:ec:58:3f:
42:03:eb:7b:fe:30:c3:c9:bf:54:a7:2a:14:27:a9:50:1a:e5:
6a:3b:23:1d:b0:c3:ed:cf:67:dc:79:bc:0a:3a:eb:ce:ce:b5:
32:f3:32:4c:80:e3:05:4d:60:58:c0:98:15:9f:fd:cc:04:81:
63:fe:5d:ee:77:59:ad:34:35:e7:a2:f8:b5:30:79:d1:70:cd:
33:ce:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org