Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/3ixLLB5aFCGGMMgMXqQy08Uk1XM.roa
File: 3ixLLB5aFCGGMMgMXqQy08Uk1XM.roa (raw, json)
Hash identifier: DCH3zUcEHVDo6ZPIJ69jqKM7i4ntRHIf+DtkN9wGUNs=
Subject key identifier: DE:2C:4B:2C:1E:5A:14:21:86:30:C8:0C:5E:A4:32:D3:C5:24:D5:73
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 10AD
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/3ixLLB5aFCGGMMgMXqQy08Uk1XM.roa
Signing time: Thu 15 Sep 2022 02:49:17 +0000
ROA not before: Thu 15 Sep 2022 02:49:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131636
IP address blocks: 103.130.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 15 02:49:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE2C4B2C1E5A14218630C80C5EA432D3C524D573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:ae:cd:63:80:3f:fb:8e:00:05:a5:1b:a4:
be:dd:38:de:83:54:1b:e3:b8:39:fb:43:59:de:e1:
16:a6:c1:26:7f:3f:10:dd:7a:ad:4d:60:63:c8:f8:
bb:bf:d2:0b:02:bc:85:4e:aa:5b:1d:12:89:91:8c:
5b:66:f6:89:8c:bc:3b:bf:72:92:8f:ad:3d:b6:8c:
58:5c:11:52:a9:40:bb:df:22:96:6d:fe:74:13:72:
a6:d8:fc:bc:91:4b:23:6b:37:1d:fd:f5:73:7c:fa:
ed:20:c3:50:6a:7b:bf:e5:41:1f:2c:f0:20:b4:cd:
87:05:87:c7:8e:78:1d:0f:d0:17:6f:5e:f4:95:c8:
cc:4d:e8:80:e6:05:a5:2b:b1:f6:b6:fe:ef:a6:f2:
28:8d:2e:06:cd:19:cf:00:4f:11:08:f7:38:35:79:
dc:e7:95:4f:2d:01:ba:b9:27:fd:36:6b:de:e9:14:
21:89:0b:0f:32:d7:63:8d:e4:66:26:5a:b0:58:3a:
62:a6:4c:15:83:99:8f:8f:7b:e5:18:76:3c:b0:eb:
53:8d:ad:7e:18:82:2e:72:47:0a:ba:63:af:85:00:
1d:76:31:37:a2:2e:04:b4:37:e6:a5:e3:bc:82:43:
e4:04:9a:f6:22:98:81:88:a8:b1:20:88:38:ed:bd:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:4B:2C:1E:5A:14:21:86:30:C8:0C:5E:A4:32:D3:C5:24:D5:73
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/3ixLLB5aFCGGMMgMXqQy08Uk1XM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e9:fb:2f:57:a1:dd:b9:25:3f:44:e8:39:b5:c9:0c:f7:15:
35:d9:3f:b1:18:97:df:08:85:9c:07:ea:be:c3:0f:97:47:0a:
7a:01:a1:6a:e7:e8:c0:0a:4f:5d:69:fc:79:e2:3d:a2:04:a5:
ef:8c:20:5f:94:ff:20:3a:4d:d8:a7:0e:b6:cb:ef:fc:0b:00:
c2:b9:b6:80:39:c0:85:f1:34:7f:5c:af:2b:ff:a0:b9:4b:17:
23:a6:98:f9:32:95:11:12:cb:96:60:80:9e:d0:aa:87:cd:06:
59:4c:d7:53:fa:d6:32:b1:b2:47:76:b5:3c:cc:0c:5d:a5:8a:
91:e4:9a:f0:4e:87:47:32:48:dc:c9:aa:e4:e2:05:e2:03:e9:
cc:a7:b4:b7:58:c2:df:2d:a3:5c:26:67:c8:b0:bf:fd:0d:a5:
f9:78:ee:88:8a:fd:d2:3d:ea:f6:fb:f2:19:37:0d:8f:31:ae:
b3:90:0e:0a:85:7a:d6:47:01:d4:dc:24:c6:c3:46:52:64:de:
73:9d:75:05:82:01:73:0c:8c:c9:b4:55:f1:f5:55:31:51:8d:
9d:ff:7a:9d:45:c9:80:63:c1:2b:b2:71:16:c0:a3:78:dc:01:
c3:29:39:a0:ff:93:cd:4a:70:21:de:db:35:c1:da:b5:6e:fe:
56:83:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org