Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/GhM2YybVa3RPSI-uH6_FoiPTz3w.roa
File: GhM2YybVa3RPSI-uH6_FoiPTz3w.roa (raw, json)
Hash identifier: Wy9f9PLgOxLCUPXqPpToeju4c1dQiz8DihszaKq5N4s=
Subject key identifier: 1A:13:36:63:26:D5:6B:74:4F:48:8F:AE:1F:AF:C5:A2:23:D3:CF:7C
Certificate issuer: /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial: 0858
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/GhM2YybVa3RPSI-uH6_FoiPTz3w.roa
Signing time: Sun 07 Feb 2021 13:15:12 +0000
ROA not before: Sun 07 Feb 2021 13:15:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.16.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Validity
Not Before: Feb 7 13:15:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1A13366326D56B744F488FAE1FAFC5A223D3CF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:1f:39:da:3d:0e:7d:5d:3c:84:db:91:dd:
28:b0:17:82:b2:3f:d6:f4:b0:25:eb:8f:47:0c:66:
39:d8:da:f5:22:af:78:ca:e3:a2:08:24:23:56:82:
54:c5:38:83:2d:5a:9a:7d:05:a9:c0:89:55:5c:59:
b9:d2:3e:14:6e:cf:6c:8a:58:3b:8c:17:a2:00:06:
79:d9:9d:7e:80:27:33:bc:39:27:73:91:ff:c1:e4:
31:60:dd:61:ff:05:bf:c8:33:0b:d3:a5:bc:f4:ac:
55:47:aa:81:84:b6:d3:1d:63:1d:76:f2:ab:a4:60:
ce:27:bd:bd:c3:31:c1:3e:19:df:6c:58:a2:56:5b:
82:1b:54:13:ee:2f:30:f7:ac:4b:03:f9:74:32:f8:
44:5b:66:b8:7a:b9:84:27:84:06:7e:c2:bb:f9:f4:
44:01:17:f6:95:ff:6d:80:7b:f4:90:75:4f:c3:7f:
35:f8:d6:a6:27:95:40:aa:39:84:e8:be:c7:fd:74:
c6:95:34:c2:8d:41:21:3b:70:be:a1:19:91:4b:7b:
c2:20:7c:73:79:71:2d:85:26:37:c8:7b:1a:aa:0a:
58:19:02:b9:7b:7d:8c:07:72:f3:db:9b:6e:02:65:
57:8b:37:b4:19:34:91:bb:5d:54:cb:c8:16:0b:3b:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:36:63:26:D5:6B:74:4F:48:8F:AE:1F:AF:C5:A2:23:D3:CF:7C
X509v3 Authority Key Identifier:
keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/GhM2YybVa3RPSI-uH6_FoiPTz3w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.240.0/22
Signature Algorithm: sha256WithRSAEncryption
77:2f:9f:fa:9f:df:24:cc:2c:ab:22:0c:04:36:9e:78:d2:0e:
f2:18:fc:27:ca:cc:e8:11:81:26:12:3c:b8:08:34:c9:ed:4b:
e4:f3:27:e8:61:d7:0d:5f:78:a1:71:ba:27:85:aa:14:e2:98:
44:96:4e:82:6a:ad:e3:7d:07:53:01:eb:6c:48:64:1e:ef:6a:
79:51:f6:96:f5:55:40:86:6e:be:d4:2c:03:72:be:81:2c:bd:
fe:91:e9:41:80:f4:a2:4f:11:17:c1:a9:69:16:6c:9f:47:a1:
c1:2b:e0:6f:8b:69:41:2f:58:eb:de:46:10:9f:31:39:de:41:
96:4c:52:b5:94:22:51:d6:a4:cb:07:51:4c:51:99:24:2c:f2:
5e:86:77:35:79:56:91:d3:1a:72:a1:8c:f0:92:a5:69:4d:67:
7a:bd:cf:51:fc:a7:d2:a2:58:21:49:9d:3b:65:2f:a9:78:da:
40:99:86:98:36:a8:65:91:b3:d0:0f:9b:89:37:e6:95:2e:12:
79:c8:18:4e:b2:b7:bf:41:be:d1:d3:27:37:cb:b6:21:59:b8:
92:a7:ac:65:63:83:1c:cc:ad:81:3b:96:51:69:af:ae:58:d8:
00:db:b4:40:ed:b7:32:4b:b6:31:25:92:06:68:85:d5:10:66:
ed:8b:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org