Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/iOIAbFwd6hOpiDuRR0tkBk5XCoU.roa
File: iOIAbFwd6hOpiDuRR0tkBk5XCoU.roa (raw, json)
Hash identifier: /aYFJpcQz3n3vzDqxffXSGlBSy96dJK0I4BKHD5xAJs=
Subject key identifier: 88:E2:00:6C:5C:1D:EA:13:A9:88:3B:91:47:4B:64:06:4E:57:0A:85
Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Certificate serial: 08B5
Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/iOIAbFwd6hOpiDuRR0tkBk5XCoU.roa
Signing time: Sun 07 Feb 2021 12:59:20 +0000
ROA not before: Sun 07 Feb 2021 12:59:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 103.122.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Validity
Not Before: Feb 7 12:59:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=88E2006C5C1DEA13A9883B91474B64064E570A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:3a:55:0a:d8:9a:92:df:d0:5f:b5:0f:25:
9e:88:76:df:ad:97:c9:af:83:00:e0:79:66:69:dc:
b6:4f:c7:a7:e8:f5:0e:46:59:36:2b:71:e0:33:45:
b1:70:b1:6a:8b:5e:ff:a3:04:a3:86:e7:84:08:a5:
4d:55:38:36:ca:ab:d2:72:f2:fc:43:81:6f:e8:78:
6b:96:7a:47:be:21:97:f5:d4:40:cf:61:fd:f1:ea:
24:1c:6b:c9:a8:b8:f7:f4:33:a8:a9:96:01:75:dc:
0d:cb:c7:eb:d1:17:ad:ac:2b:87:92:b3:1f:38:32:
c8:20:c4:27:21:96:f7:b2:6f:20:05:26:45:19:9a:
59:f8:99:05:b0:24:5d:54:d9:51:f8:2f:22:25:d1:
c6:a4:01:1e:3b:af:f6:5c:f6:64:9c:e5:4c:91:96:
2e:10:08:8a:2b:ac:ce:32:21:e2:15:75:18:82:9b:
ed:f6:4d:6b:d8:9b:ba:2f:13:f2:af:5d:cb:fd:7e:
6b:fc:99:f8:73:75:ae:46:71:96:5d:26:ac:69:ee:
f7:a9:07:f1:8a:62:3b:49:4e:43:a5:e6:ee:3f:c7:
7c:9c:ba:63:50:d8:00:49:65:28:0b:d4:5e:11:e0:
e1:78:1f:3b:db:6b:35:37:01:70:e0:75:a4:dd:89:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:00:6C:5C:1D:EA:13:A9:88:3B:91:47:4B:64:06:4E:57:0A:85
X509v3 Authority Key Identifier:
keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/iOIAbFwd6hOpiDuRR0tkBk5XCoU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.226.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dc:fb:90:b1:82:fd:9d:b1:14:0c:d1:05:ed:76:42:dc:c6:
bb:34:60:48:7e:21:89:11:7e:e1:86:f8:b3:2b:fc:9b:03:f1:
c9:61:6b:bc:fb:de:cf:77:5a:c6:4e:63:6f:44:ef:a0:bf:0b:
f6:35:4c:a7:38:c0:0b:b2:28:da:a5:75:48:ae:70:0d:39:fa:
2b:eb:3e:7b:33:e3:bd:94:b5:e1:81:6f:a0:91:13:22:65:b1:
c1:e8:57:34:4e:69:48:4f:24:f7:44:d9:34:74:b1:a0:ea:47:
7c:61:31:08:58:53:01:82:24:43:8b:f5:7b:11:4f:27:db:07:
57:f1:8e:bd:5e:5a:67:26:9e:b5:3b:25:20:19:cb:64:c4:ff:
0f:e9:dd:d3:a6:72:db:47:2c:d8:d2:23:86:28:74:bc:99:a4:
c9:7d:bc:c5:ed:06:2c:d1:17:60:ea:34:d0:12:dc:6c:fd:df:
78:f0:34:b8:4c:75:4e:59:37:53:81:e2:0a:75:08:58:a4:07:
62:eb:0e:0f:a2:05:92:54:7b:20:2a:26:4e:f7:cc:8a:20:ed:
38:ca:fe:66:fa:e5:1a:19:de:fc:cf:9e:43:39:cd:1b:9e:fb:
29:b9:81:ba:30:ec:a1:94:39:f2:69:ac:ee:a6:2a:83:15:aa:
b0:59:11:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org