Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/j1BHTdYGfZiMasLo7yHEt5JrkUI.roa
File: j1BHTdYGfZiMasLo7yHEt5JrkUI.roa (raw, json)
Hash identifier: RqunXc88F3pKZbMmbKuKYv9BA/n7OhAhJLhfNV71V7o=
Subject key identifier: 8F:50:47:4D:D6:06:7D:98:8C:6A:C2:E8:EF:21:C4:B7:92:6B:91:42
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/j1BHTdYGfZiMasLo7yHEt5JrkUI.roa
Signing time: Thu 15 Sep 2022 02:37:12 +0000
ROA not before: Thu 15 Sep 2022 02:37:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 396982
IP address blocks: 101.102.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 15 02:37:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8F50474DD6067D988C6AC2E8EF21C4B7926B9142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:db:6a:6d:41:87:7b:48:47:d2:9a:1f:a6:
f9:1f:e4:43:f1:9c:71:35:c2:f2:4f:91:d7:d2:d7:
77:1a:58:d3:47:d3:89:c4:10:59:ba:17:fd:da:11:
58:6e:dc:cb:fb:67:65:c9:e3:55:88:8b:4b:c1:1c:
f9:e2:eb:cc:bf:01:1c:e8:6e:e8:20:cc:4d:f4:a8:
23:9f:b2:34:7f:be:ba:09:1b:85:c7:86:8e:25:f4:
60:65:e2:71:6b:70:c7:c4:0e:e5:1b:4f:1a:b8:3c:
aa:e7:af:17:2e:f2:53:5e:66:b6:17:52:ed:f8:91:
aa:f2:80:1d:26:c4:64:91:6f:57:19:03:f3:2a:37:
33:5a:ab:5f:87:38:de:b9:b3:6b:b0:8a:51:84:a6:
1a:31:24:d0:5f:45:a7:b6:8d:6b:80:5a:27:68:b6:
8e:93:d1:e7:88:e0:e3:68:79:f1:72:21:67:55:62:
c0:cf:66:b4:8b:cc:26:37:b1:1f:9d:5c:bb:01:17:
cd:26:a6:fa:cc:99:a2:de:f5:0b:aa:ea:a3:f6:ab:
33:ef:83:36:c7:3c:a3:9e:ca:de:16:27:2d:f0:84:
7e:d7:dd:23:9b:9d:89:b4:c3:8e:67:b0:f9:a5:68:
21:3f:bf:c6:a6:14:38:fe:e5:65:7c:52:f8:45:94:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:47:4D:D6:06:7D:98:8C:6A:C2:E8:EF:21:C4:B7:92:6B:91:42
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/j1BHTdYGfZiMasLo7yHEt5JrkUI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7e:b1:d0:43:a0:15:5f:86:d4:f9:da:6e:6f:2e:06:f7:1a:
9a:a5:ae:a1:42:d5:4f:55:b2:49:19:cb:2b:24:2a:99:c7:a5:
20:1b:ec:a6:95:fc:ec:18:fe:7e:96:42:01:7f:6b:99:4e:9b:
ac:f7:8e:8f:f3:ea:74:55:af:0a:41:58:71:51:46:82:d0:ff:
c0:e8:30:54:ed:fd:c9:7a:3c:88:21:84:e8:8c:2f:7e:83:ae:
55:86:dd:cb:bb:a0:e7:41:25:40:54:a4:0f:1d:62:48:86:95:
12:45:48:0b:5d:c1:10:b9:23:8b:4d:06:4e:92:d5:67:4c:bb:
d1:5d:ac:a9:b7:d2:22:47:9b:94:47:92:31:49:3e:68:57:fb:
56:12:51:10:89:d4:37:37:e1:28:4e:fb:6e:31:bc:41:0e:0b:
53:b4:8e:78:e2:bf:c0:c3:56:cd:5d:2f:9d:20:9a:dd:8f:37:
1f:af:78:9f:cc:f7:96:d8:43:5a:ce:c6:98:99:34:f7:4b:93:
af:27:27:ee:fa:88:90:0e:c4:3e:07:c7:ef:61:aa:25:43:2a:
c6:33:72:1b:aa:70:c3:8d:32:3b:17:45:c4:76:84:b8:9b:d3:
f1:c2:6a:24:03:bf:e6:2a:33:5f:7a:9f:60:80:1a:5e:c8:8b:
d5:db:a6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org