Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/s93vGRs3UOFY2AHrzTS3EzJwClA.roa
File: s93vGRs3UOFY2AHrzTS3EzJwClA.roa (raw, json)
Hash identifier: BI9ha/zWyEUNzJEGpq3jtNO54Pzg/ot3Dm83binjD9w=
Subject key identifier: B3:DD:EF:19:1B:37:50:E1:58:D8:01:EB:CD:34:B7:13:32:70:0A:50
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/s93vGRs3UOFY2AHrzTS3EzJwClA.roa
Signing time: Thu 15 Sep 2022 02:37:12 +0000
ROA not before: Thu 15 Sep 2022 02:37:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 203.119.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 15 02:37:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B3DDEF191B3750E158D801EBCD34B71332700A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:cb:ea:6c:ee:d8:2a:09:cd:9a:c1:bf:ac:
be:2e:a8:4e:c0:a0:a8:54:9d:0d:5c:e7:0d:0f:69:
9b:3e:6c:a5:af:9c:ba:3c:f6:c8:cc:52:76:17:09:
cd:41:f1:47:23:a6:10:4f:9e:b3:29:49:9e:88:62:
78:c8:3c:40:35:33:ea:3e:5f:46:a8:f1:d2:ab:b5:
bc:0f:39:b4:9e:c8:1f:d6:8c:de:f1:35:7c:9b:68:
7a:f8:d2:9e:b0:c7:ba:5f:f8:a7:22:e7:30:1e:eb:
85:4c:62:c3:bb:c8:87:a0:39:b6:ce:21:b6:9a:0c:
f4:d5:ec:ad:75:04:4f:be:f7:37:2f:51:2e:0b:c1:
74:fb:b9:6e:ca:16:be:4c:71:e7:ac:ca:c3:66:1b:
7a:64:1d:72:dd:4b:82:60:65:95:e4:a5:28:18:44:
11:40:ac:3e:0c:25:3e:fa:cb:1f:3f:1c:01:17:9b:
5c:02:7e:6b:f1:52:8f:5c:f0:a5:55:0f:34:ec:5f:
79:8a:45:4a:b8:ee:6d:f5:41:a1:4a:30:c7:07:4d:
9d:d7:97:a3:62:55:eb:44:5a:5c:73:ba:55:87:4d:
97:43:cc:c9:f7:e7:bf:88:80:00:07:07:a2:f4:cf:
d4:c5:b7:8d:9b:64:72:de:fa:b8:c3:cb:f9:8f:f3:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DD:EF:19:1B:37:50:E1:58:D8:01:EB:CD:34:B7:13:32:70:0A:50
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/s93vGRs3UOFY2AHrzTS3EzJwClA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:07:5e:84:8c:68:7b:67:f6:57:80:07:17:3b:1a:76:a2:ed:
87:81:e6:e5:71:40:0c:52:b5:89:2f:cb:af:b5:f5:8e:0c:bf:
50:13:58:bf:18:45:84:20:ae:6f:cf:1f:26:9a:3b:22:76:c2:
db:43:3c:56:f7:07:a9:b5:1d:21:d0:42:65:64:ca:57:5f:2b:
3e:a4:f7:ec:91:5a:82:e0:7c:47:a9:bd:5e:eb:1b:9c:ab:cc:
6a:32:b8:98:9f:b7:59:94:1e:36:4b:7e:76:d3:00:18:a7:90:
de:84:99:e0:13:c4:99:88:57:26:3a:76:57:8e:8f:15:43:8c:
72:d6:29:cd:1c:9a:83:6b:94:dd:57:ac:35:68:7c:3c:08:43:
0b:1d:19:75:76:22:54:a3:1e:17:cb:57:c8:da:bb:8a:ac:fc:
9d:e0:ef:56:fd:6c:bb:22:54:cd:2b:6a:f7:b7:81:a2:bb:21:
e0:83:91:e4:6a:be:4f:6b:32:fc:8d:29:1e:24:ce:e4:2a:a4:
98:ca:48:0a:02:4f:f2:db:c2:b9:67:76:ea:0a:34:a7:6f:7a:
b3:fa:fe:e8:92:b2:15:cb:42:83:94:7d:2e:bc:ee:1e:40:e6:
2f:7b:98:f1:97:bf:7b:28:51:48:19:a7:51:91:49:46:c5:54:
16:46:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org