Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/017R3LAFslZZTbRpM18ApNzk4_8.roa
File: 017R3LAFslZZTbRpM18ApNzk4_8.roa (raw, json)
Hash identifier: uCv6DHeZNhOGbegFDGsyom0c+1bj4lRRaYd7Qmx+xtQ=
Subject key identifier: D3:5E:D1:DC:B0:05:B2:56:59:4D:B4:69:33:5F:00:A4:DC:E4:E3:FF
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 08CB
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/017R3LAFslZZTbRpM18ApNzk4_8.roa
Signing time: Sun 07 Feb 2021 11:50:58 +0000
ROA not before: Sun 07 Feb 2021 11:50:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 103.229.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Feb 7 11:50:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D35ED1DCB005B256594DB469335F00A4DCE4E3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:ac:ec:73:06:f1:56:43:26:c3:a4:23:f5:
f9:3c:45:41:93:da:c1:24:95:e3:65:56:32:c4:fb:
ef:97:26:f3:40:7e:da:de:e8:67:5d:eb:e7:7d:20:
79:11:7c:e3:8a:b8:02:45:0e:b2:a3:c0:3c:71:fd:
d1:2e:86:44:70:c2:81:1b:c5:aa:5c:ed:ce:3e:7e:
61:9a:b4:eb:13:8e:0b:9a:73:47:8d:ce:f7:d3:39:
f4:5b:1b:34:eb:b0:3c:f4:f2:29:21:35:26:a9:92:
f6:6a:66:85:71:57:25:8b:6c:8a:a8:00:a0:71:5e:
3f:38:66:fa:c0:45:a5:ed:b2:41:2a:f6:12:c9:fe:
66:f2:1e:91:1b:98:a3:c5:b6:a7:5b:7d:87:1a:81:
8c:e1:91:ec:4d:ba:77:7e:79:7c:ac:4a:49:9a:f9:
39:aa:c1:ad:66:e3:ac:e5:33:03:bd:fd:44:b9:fc:
d5:9e:74:5d:10:da:8b:34:2a:fa:2a:0c:6a:56:89:
15:c9:55:1d:4e:f8:46:05:70:f9:f4:1a:70:b0:0f:
19:68:ef:c9:aa:c7:ec:4b:7a:a2:c9:80:6d:11:f7:
94:94:9f:18:96:45:ab:4b:7c:ac:b1:ee:f7:ce:f0:
bd:4e:cc:ef:3a:b0:3f:11:b5:69:f9:a1:83:5e:d1:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:D1:DC:B0:05:B2:56:59:4D:B4:69:33:5F:00:A4:DC:E4:E3:FF
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/017R3LAFslZZTbRpM18ApNzk4_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.100.0/23
Signature Algorithm: sha256WithRSAEncryption
76:e9:16:03:e1:c4:40:ae:2f:3e:41:70:e8:c9:8c:b8:bd:92:
96:99:6e:41:de:29:b2:59:ba:7e:8a:a5:31:e0:23:b4:73:bb:
80:92:c8:81:ee:25:9a:65:0e:7b:d2:19:0c:fd:be:96:4e:a9:
9c:c6:5e:43:6c:40:f8:0d:11:a6:df:e9:10:ea:11:13:6a:47:
e2:74:9a:db:85:b2:1e:21:bf:ce:d0:31:fc:0c:dc:26:38:ae:
11:e2:26:80:fc:34:27:d0:41:b4:80:b7:fc:ac:21:d4:3b:20:
1c:dc:6d:33:72:d6:a9:66:4d:f2:bf:6a:5b:a4:9d:67:2c:a1:
e6:11:36:87:d7:ff:57:55:47:4a:c8:20:76:27:e2:d8:c9:64:
f9:73:57:98:72:d7:05:e5:50:2d:e0:9d:d9:f4:f6:10:74:84:
ac:a8:21:0f:ca:6a:dd:c9:25:61:1f:58:73:e9:ab:a2:05:bf:
07:51:70:4f:cb:1a:1f:ea:84:ef:a5:cf:a2:90:49:35:26:4b:
2b:d5:5b:83:79:68:1e:7b:b2:0a:84:7a:a3:be:66:72:15:2e:
82:6f:32:55:8b:a6:ea:9b:2d:14:e8:d9:2a:42:bc:82:fb:62:
65:e1:89:a4:72:53:bf:65:12:f5:b5:28:05:7a:b9:e7:84:7f:
62:42:ed:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org