Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PncCbtf3qIFv4Q_VGVtpJldTUN0.roa
File: PncCbtf3qIFv4Q_VGVtpJldTUN0.roa (raw, json)
Hash identifier: qWsw1YsLq5znTGbH0sc0ECAd7uKGOSXFbNpLfuvD/hw=
Subject key identifier: 3E:77:02:6E:D7:F7:A8:81:6F:E1:0F:D5:19:5B:69:26:57:53:50:DD
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0854
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PncCbtf3qIFv4Q_VGVtpJldTUN0.roa
Signing time: Wed 04 Nov 2020 08:30:41 +0000
ROA not before: Wed 04 Nov 2020 08:30:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18424
IP address blocks: 103.30.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2132 (0x854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Nov 4 08:30:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3E77026ED7F7A8816FE10FD5195B6926575350DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:8c:88:eb:f8:b0:02:ce:66:2a:87:ce:38:
f3:68:79:75:76:90:e7:2c:50:2e:be:39:54:1a:11:
31:10:2a:31:25:b3:26:24:85:c0:6a:56:28:ab:f6:
74:cb:0a:8e:d0:09:5e:ec:65:f2:47:5a:91:9a:e3:
9f:c2:37:4a:9a:e3:62:aa:5e:48:43:b5:73:fa:93:
aa:77:79:3b:c6:d1:f9:a3:2d:69:3e:4b:87:e3:4d:
33:6f:29:f6:96:f7:14:a1:09:f3:60:9e:fc:d7:bb:
90:54:9e:91:00:9c:04:50:3d:49:ac:37:ee:71:01:
55:7b:12:d8:ab:bd:5e:ca:e8:7c:c5:6a:bb:94:f2:
bf:9c:e0:1c:ad:c4:6d:2e:d2:dd:7c:d5:11:24:3e:
61:f7:0f:66:cb:8c:77:3d:56:d5:eb:b3:43:ea:4d:
48:c8:ed:75:0e:97:7e:2a:08:c3:13:7c:17:f4:6e:
02:98:74:f2:7d:cd:e6:7f:b8:e0:10:3f:02:cd:61:
40:9a:93:30:7b:3b:80:3d:5b:da:af:33:a4:ce:61:
21:ac:22:43:12:3c:e5:8c:c8:9c:86:a8:46:d5:a1:
5d:26:0f:41:68:41:ac:03:d3:b4:ab:46:6f:ba:b3:
5f:ee:17:d7:9b:2e:3c:6f:8a:8d:95:e1:33:95:98:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:02:6E:D7:F7:A8:81:6F:E1:0F:D5:19:5B:69:26:57:53:50:DD
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PncCbtf3qIFv4Q_VGVtpJldTUN0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:83:3b:0f:7a:94:c9:f9:ec:4d:77:59:4d:f8:34:16:e0:cd:
ef:b5:21:2a:07:4d:72:15:58:ce:7c:ca:b5:e3:d4:ab:39:4c:
ca:9b:04:5b:f8:28:b6:57:e1:dc:68:22:27:59:9f:35:ce:e1:
a1:7c:7f:e6:f6:94:64:fa:c2:2f:82:7b:94:5e:c1:60:29:fb:
09:3a:b9:17:53:bf:b1:e0:e4:e4:71:06:ff:2f:27:e9:8b:35:
48:27:99:2c:cd:e1:7c:57:96:98:70:26:99:93:f0:ad:32:a9:
43:32:db:57:39:79:13:68:a8:42:cd:16:cd:9f:5a:0e:06:63:
15:94:9c:f6:09:46:15:2c:48:61:18:7d:69:be:8d:d0:46:56:
d8:9c:3b:c5:23:b0:37:71:70:6f:b8:e4:f3:50:12:bf:3a:69:
a7:39:79:71:ce:47:69:f5:0c:32:87:08:0b:d6:87:ed:32:99:
3d:4c:2e:77:7a:d0:0e:19:14:02:38:23:0e:a0:77:33:6d:57:
64:ee:35:49:e3:fb:19:bf:1e:b4:6d:d1:ba:dd:d4:c0:91:3c:
e9:d0:0e:d2:03:c9:17:72:9f:34:6b:76:ac:32:54:16:4c:48:
9b:77:ba:4f:f2:87:23:9a:d4:b8:e3:9e:bf:d5:84:6a:8e:35:
21:94:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org