Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/nYkhEQsOwkiNZm4ClSNXfrJooac.roa
File: nYkhEQsOwkiNZm4ClSNXfrJooac.roa (raw, json)
Hash identifier: t3Nru0MtK4pF1YoLJgBJjK0qDqgBcL9ldVwx/Pia1pI=
Subject key identifier: 9D:89:21:11:0B:0E:C2:48:8D:66:6E:02:95:23:57:7E:B2:68:A1:A7
Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial: 0A95
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/nYkhEQsOwkiNZm4ClSNXfrJooac.roa
Signing time: Thu 29 Dec 2022 09:05:12 +0000
ROA not before: Thu 29 Dec 2022 09:05:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 103.123.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2709 (0xa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Validity
Not Before: Dec 29 09:05:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9D8921110B0EC2488D666E029523577EB268A1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:17:ac:d0:43:e2:e6:85:9d:56:36:43:6c:
16:13:ba:0b:d3:0f:52:0f:d9:5e:15:74:7a:4d:a9:
4f:54:42:59:95:39:dd:b7:11:ec:e5:9d:fb:81:53:
df:bc:33:b8:3b:4a:e4:48:cd:2e:83:18:ee:f8:b5:
39:d7:6e:76:b3:62:57:ac:b3:05:92:bd:25:47:84:
6d:12:73:4a:39:65:1d:ce:44:16:c7:37:ae:22:a0:
ed:5a:67:43:fa:f7:bf:24:a0:5c:dd:9a:76:3e:91:
66:2f:d4:ad:8b:1a:30:12:af:00:ee:4f:29:a5:ec:
82:cc:de:de:92:1d:ef:3e:df:d8:fd:c4:9f:a8:a2:
f2:98:9e:28:a9:e5:a7:ec:48:94:12:22:a1:d8:6b:
84:93:11:d2:96:e1:20:78:4c:75:02:75:52:0b:08:
e0:52:9c:20:d7:23:c6:f1:ef:1e:7d:b8:6f:a4:ca:
5d:3c:80:23:a8:1a:1e:17:5f:da:58:bc:51:7c:92:
cb:ff:5d:a5:e1:e7:8d:ec:b8:5a:e6:5d:72:25:b1:
05:af:a6:88:3c:ef:70:cd:36:ea:a3:ce:78:f2:e3:
4f:24:2e:aa:f1:3f:d0:7a:90:b8:a0:fb:c3:05:9f:
b9:25:19:bc:af:29:7d:fe:53:8d:79:fd:ae:d8:e8:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:21:11:0B:0E:C2:48:8D:66:6E:02:95:23:57:7E:B2:68:A1:A7
X509v3 Authority Key Identifier:
keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/nYkhEQsOwkiNZm4ClSNXfrJooac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.140.0/22
Signature Algorithm: sha256WithRSAEncryption
37:8a:2d:49:0a:45:ec:4d:a9:87:a4:69:53:a3:30:78:a4:51:
39:c0:59:63:db:55:22:64:b8:a4:82:e5:ba:80:92:eb:de:17:
e9:42:cd:ae:58:85:df:e1:d2:47:44:34:8e:c4:20:7e:19:21:
6b:ea:d8:de:28:b0:d4:c2:7c:26:4b:80:43:01:ca:f1:9f:df:
c1:73:35:74:a5:25:07:d0:03:87:f4:4c:70:4c:ed:59:f3:55:
9f:ca:e4:57:70:9f:b9:d8:d3:24:55:1e:44:12:b5:31:70:26:
09:df:8a:a3:22:69:b6:07:46:b7:b1:59:7d:66:bc:0e:79:86:
6d:02:03:0d:78:4e:68:ba:58:b6:b4:0b:0f:64:52:74:f0:7c:
61:f3:b5:3c:fa:ee:a0:99:bb:86:77:a9:63:4c:e9:e5:1f:39:
4b:db:83:5b:ea:92:50:85:41:fe:53:d8:a9:49:38:28:5d:af:
df:4b:47:da:c7:ae:50:10:d6:6b:99:d2:33:57:00:2a:9e:c5:
8d:3b:98:50:04:e3:19:75:39:40:4e:8c:cd:5b:ec:44:4d:10:
91:90:85:b6:1d:b3:a7:48:68:7d:03:96:0a:d7:4e:79:63:95:
39:a8:20:21:2f:a0:9c:34:00:a3:bd:1d:13:20:b2:19:56:36:
27:1c:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org