Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/n8fdc7RMLdiAkxlpmcjqN_IhrRY.roa
File: n8fdc7RMLdiAkxlpmcjqN_IhrRY.roa (raw, json)
Hash identifier: DDGBleTVBa0AyLb+s95ESE6+9JHIklrgAEHaSoN8xwU=
Subject key identifier: 9F:C7:DD:73:B4:4C:2D:D8:80:93:19:69:99:C8:EA:37:F2:21:AD:16
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/n8fdc7RMLdiAkxlpmcjqN_IhrRY.roa
Signing time: Thu 15 Sep 2022 02:37:13 +0000
ROA not before: Thu 15 Sep 2022 02:37:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 14618
IP address blocks: 103.235.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 15 02:37:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9FC7DD73B44C2DD88093196999C8EA37F221AD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:47:dc:7a:17:7f:32:b5:b5:cf:13:dc:a0:
7e:44:b6:e6:31:cc:0a:04:a3:bc:30:15:a9:43:5d:
f4:61:32:f1:d7:f8:bc:c0:12:28:a7:a6:f2:89:75:
d8:f8:ff:90:67:7f:c5:b2:a9:5d:d2:b9:ff:58:55:
be:eb:2d:bc:a0:0d:7a:30:97:9c:af:3a:62:bd:a9:
28:d9:b1:a7:68:d9:44:0a:c8:75:5a:0f:53:40:3b:
18:1c:69:cc:75:b0:bf:59:15:71:1e:03:f0:13:8f:
62:ce:af:86:a1:13:09:19:ca:5d:4f:84:bd:54:df:
2f:62:c0:51:48:bf:44:a8:fd:cf:7b:03:e1:b1:a8:
92:a5:fa:28:23:85:b1:12:5a:17:7c:bd:86:6e:f0:
a4:a4:2c:9b:ba:15:56:92:d2:d1:20:81:79:4e:e6:
68:56:46:50:b7:f5:6f:13:eb:1b:ed:32:0a:9d:1e:
27:c0:18:ed:0b:26:e0:38:b6:04:b5:42:88:a3:18:
5a:08:d1:67:87:d5:b5:32:a1:51:8e:ec:1d:e4:73:
70:9c:63:57:8c:36:4f:e1:50:1a:a9:3c:7b:28:07:
a9:55:4c:34:f6:62:3a:51:38:18:42:05:51:80:29:
d2:df:a5:1c:9f:57:da:89:fb:e1:b5:7b:16:21:0e:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:DD:73:B4:4C:2D:D8:80:93:19:69:99:C8:EA:37:F2:21:AD:16
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/n8fdc7RMLdiAkxlpmcjqN_IhrRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
71:37:bd:b9:fe:a3:09:04:fe:97:63:a7:e9:43:0e:3b:2d:93:
54:a8:38:5b:0b:a0:1b:13:29:61:82:09:63:25:09:11:39:e5:
d0:6f:31:8d:d8:2c:d5:29:0e:f8:a7:e0:dd:a9:62:d7:d0:0a:
19:16:31:2d:61:a9:4e:22:e7:b8:32:b4:67:99:18:69:f8:27:
ab:48:7e:6e:0d:47:37:aa:01:db:fc:3f:e8:69:a1:0a:8b:14:
89:73:f4:9b:e5:f5:38:0e:1e:e2:7b:a9:bd:ec:11:63:6c:18:
85:fa:b7:08:c0:71:43:4c:6e:22:f0:a9:1d:6c:89:b6:e2:6c:
22:91:8f:1c:20:df:13:6b:41:08:da:a3:cf:24:f2:a0:9d:50:
99:88:b5:16:c8:6b:db:e6:af:44:7a:1a:86:cb:09:da:ee:2b:
96:37:9a:99:13:13:6d:08:2b:3f:51:26:10:5a:37:93:23:92:
6b:07:b2:0f:fd:c9:6f:b1:25:cd:ce:a1:f9:bf:6a:d0:c2:bd:
1c:76:a6:72:33:66:93:27:ec:82:f5:ca:07:b3:77:bc:d9:1f:
94:36:1c:6b:a2:77:76:2b:00:3e:85:a2:9a:a3:75:51:bc:0b:
aa:c4:7f:f1:e1:d6:da:83:e2:cc:f3:26:93:8d:b5:e9:f6:1d:
5b:fa:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org