Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/VHP7p9u4z6MyLhGfkK8_5bN_OuU.roa
File: VHP7p9u4z6MyLhGfkK8_5bN_OuU.roa (raw, json)
Hash identifier: hKCFSBPUWNRk3b9eIjdyoHmWNLjIsjraHFpFOeJISuI=
Subject key identifier: 54:73:FB:A7:DB:B8:CF:A3:32:2E:11:9F:90:AF:3F:E5:B3:7F:3A:E5
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0EDD
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/VHP7p9u4z6MyLhGfkK8_5bN_OuU.roa
Signing time: Wed 29 Sep 2021 02:56:14 +0000
ROA not before: Wed 29 Sep 2021 02:56:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 103.235.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3805 (0xedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 29 02:56:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5473FBA7DBB8CFA3322E119F90AF3FE5B37F3AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:df:6c:be:40:f2:41:d9:80:e4:d6:b4:db:
24:56:33:08:51:13:ad:2e:8c:d9:fa:4f:eb:e7:a8:
72:44:9c:4a:0f:40:0d:a2:7c:f4:2e:95:c4:c6:1f:
e2:0a:8d:0c:04:c7:ca:a4:33:4d:6c:33:62:96:93:
79:db:04:bb:25:01:67:4e:eb:da:1c:f1:74:fa:62:
64:4a:09:06:d3:59:ca:c9:d9:74:1c:6c:a6:8a:8c:
13:c7:84:49:84:3a:b7:b6:ef:1b:0b:11:20:99:6a:
5d:37:ff:ab:39:27:1b:65:2a:df:48:94:a9:27:66:
b0:0e:f9:8d:43:d3:e6:90:85:7f:29:5f:2c:44:47:
ab:24:f6:92:ec:ff:91:eb:55:d0:81:40:f7:d6:a5:
c7:d1:bf:53:91:75:4d:37:c8:c3:57:5f:cb:cc:8e:
e7:a1:1d:2b:e5:15:e5:fd:3a:8e:d0:ac:c3:63:73:
d9:6e:54:42:82:f2:26:7a:63:dc:ef:d2:8f:eb:c5:
86:71:b1:39:8e:ca:df:fb:eb:e1:c4:36:29:8a:af:
41:ee:d0:f9:c0:21:61:77:d3:dc:b4:0f:83:a4:d7:
4f:51:2a:cf:0f:2b:37:4f:1e:8f:ef:84:e8:43:0f:
8c:83:ac:31:f3:25:da:a5:1c:fb:03:c5:ba:1a:ee:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:73:FB:A7:DB:B8:CF:A3:32:2E:11:9F:90:AF:3F:E5:B3:7F:3A:E5
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/VHP7p9u4z6MyLhGfkK8_5bN_OuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.89.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:69:35:2f:bd:a3:17:87:cb:d2:f6:92:1c:91:9f:ce:1e:
ef:a8:99:86:43:7d:04:02:f4:ca:27:01:69:d9:b4:e6:81:41:
cb:e7:cc:bd:6b:c8:50:1d:a3:8c:bc:d7:92:d9:2e:8e:85:aa:
6c:17:58:b1:99:c3:75:43:ee:16:50:55:49:0d:96:26:f8:e7:
a8:f7:a6:aa:6a:13:ab:22:55:6d:0f:01:fa:66:e1:bd:2e:bd:
e8:09:8a:3a:98:2a:60:64:68:b6:9d:6e:9c:26:9c:4f:0e:57:
92:74:cc:28:de:23:9b:09:6d:34:af:12:27:56:05:2f:94:89:
8c:44:fd:69:73:05:9a:7c:22:2f:5a:29:58:8b:1b:1a:b7:13:
b9:3b:bd:14:19:68:08:19:5c:7f:43:92:29:d9:71:c2:84:36:
35:73:7a:17:0b:70:cd:26:5d:d2:74:0c:33:9a:b0:20:92:3e:
c4:9d:9f:4e:5f:10:ea:74:dc:41:84:0c:29:63:d6:2b:6c:72:
d9:b5:04:2f:42:08:8a:3b:4c:80:74:47:32:58:8c:52:61:a5:
e1:ae:f7:44:43:fb:06:8b:92:dc:0a:00:e9:96:39:dd:ee:ea:
4e:11:fd:ef:a8:4d:8e:97:72:3d:70:bc:11:b3:ab:8b:f4:c8:
e9:4c:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org