Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/voX6AWo0rJ1F26eKscoYJckPA7U.roa
File: voX6AWo0rJ1F26eKscoYJckPA7U.roa (raw, json)
Hash identifier: 1EhMN2f2Ws/gGHJDFZmDk3gxfhBzcbnjIVK4HRByAuI=
Subject key identifier: BE:85:FA:01:6A:34:AC:9D:45:DB:A7:8A:B1:CA:18:25:C9:0F:03:B5
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 0109
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/voX6AWo0rJ1F26eKscoYJckPA7U.roa
Signing time: Sun 07 Feb 2021 13:04:45 +0000
ROA not before: Sun 07 Feb 2021 13:04:45 +0000
ROA not after: Sat 16 Oct 2021 04:29:56 +0000
asID: 131642
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Feb 7 13:04:45 2021 GMT
Not After : Oct 16 04:29:56 2021 GMT
Subject: CN=BE85FA016A34AC9D45DBA78AB1CA1825C90F03B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:b1:ae:4a:11:6e:31:be:49:1b:c3:83:73:
e1:59:3f:f9:51:fd:42:98:fa:88:57:a5:54:05:d2:
21:8b:fc:6a:41:06:6b:93:b3:00:09:1c:ea:46:eb:
d0:6b:47:e6:98:09:3c:12:8e:28:c6:bc:d5:5b:8e:
6c:db:b4:04:ff:e4:aa:01:52:ce:ec:c9:a2:a2:eb:
1e:34:49:bf:db:9b:4c:45:97:d2:ba:ff:5b:67:3a:
28:35:91:77:b2:ae:2b:a2:cd:f8:94:1e:a3:2a:8e:
96:a5:55:eb:3c:a7:e9:99:40:97:92:a6:ce:ed:45:
26:ce:9e:78:22:b6:56:d1:04:c6:61:8f:01:cc:b6:
50:82:37:32:73:58:fd:b7:04:53:a4:b8:79:c3:fb:
e7:7e:ac:24:cf:b6:85:c6:89:45:19:d0:14:fe:a2:
e2:54:dc:ac:1c:cc:1c:10:0a:4d:31:64:e6:df:94:
7b:b4:15:b8:78:9e:f1:a3:6c:ba:fd:48:c6:36:81:
1d:73:43:b1:c8:ef:09:09:f5:75:14:9b:c1:44:96:
ac:e1:88:b8:1f:4c:ff:b4:9d:b8:e5:ac:c1:de:a7:
f5:e4:55:42:7e:17:94:a3:58:1c:e2:dd:51:91:c6:
ef:6f:c3:cf:ef:db:29:fa:58:9c:b3:f7:eb:3e:c6:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:FA:01:6A:34:AC:9D:45:DB:A7:8A:B1:CA:18:25:C9:0F:03:B5
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/voX6AWo0rJ1F26eKscoYJckPA7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
31:10:19:44:e6:cf:c6:ac:1b:b1:cd:83:2c:98:c3:26:e2:a9:
2a:dc:23:ea:43:4d:c2:5a:8b:95:f2:aa:4b:ff:49:65:bf:95:
0d:77:dc:e0:4d:71:af:3b:4a:57:a4:34:27:b0:91:02:66:7b:
a5:cc:58:4b:aa:56:f3:ad:62:2a:fe:ef:1e:bb:34:82:fc:4e:
01:c6:91:f1:30:64:b4:ce:96:4e:d6:72:80:80:10:5b:c6:c5:
78:69:0f:7c:13:8b:f1:9c:0b:35:db:f1:0c:ce:e1:9d:83:27:
67:dd:ef:a5:92:d2:71:47:13:0f:a6:a2:ec:44:20:8a:da:fc:
d6:c2:6b:2f:c2:52:7b:14:7a:35:46:78:a0:d2:e6:8e:61:a7:
3b:9b:56:80:a7:9e:7d:ed:12:bb:f8:29:6f:23:bb:d7:ad:8a:
00:11:57:f2:ac:b0:7d:c6:38:79:d5:40:a7:1e:4d:39:c0:3a:
79:d8:bc:58:52:35:d9:69:c9:9f:2b:63:e1:41:9b:e3:22:e6:
ab:6f:58:57:92:68:ba:9c:4a:f7:a2:a1:3e:de:07:ff:6a:ad:
6c:77:d9:a5:27:cf:ed:ea:0e:39:db:b2:9c:20:4c:70:b8:53:
cb:30:52:15:73:f6:2b:82:51:67:06:ba:b6:d6:77:39:ba:05:
f8:88:7c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org