Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/ieSUrQPSEMjcg7SKOVxI0qm3L3A.roa
File: ieSUrQPSEMjcg7SKOVxI0qm3L3A.roa (raw, json)
Hash identifier: VaP0V1saSwrf4YnUD6lxlK2C9CRw9I3LbmA5p2uAhKM=
Subject key identifier: 89:E4:94:AD:03:D2:10:C8:DC:83:B4:8A:39:5C:48:D2:A9:B7:2F:70
Certificate issuer: /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial: 0A3F
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/ieSUrQPSEMjcg7SKOVxI0qm3L3A.roa
Signing time: Thu 15 Sep 2022 02:40:41 +0000
ROA not before: Thu 15 Sep 2022 02:40:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 103.123.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Validity
Not Before: Sep 15 02:40:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=89E494AD03D210C8DC83B48A395C48D2A9B72F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:cf:c1:6e:09:5f:b5:ef:fb:30:1e:73:db:
a6:9a:ce:51:ff:8b:3f:61:97:87:a4:c7:95:87:51:
e8:df:55:b0:a5:c6:e9:d4:9c:4c:2f:42:29:75:2a:
b3:9b:ab:fb:bd:e6:0d:57:ec:56:ea:af:e7:b8:af:
3d:c3:5c:ad:2c:aa:a0:83:c1:ed:fc:39:ea:fa:2a:
ff:02:1b:81:da:29:4a:d5:49:d3:95:b7:de:f5:0a:
60:81:95:e7:b7:bb:c6:b5:f8:24:fb:cf:a0:e2:0e:
dd:88:ea:c7:54:1d:10:9a:83:2a:a0:aa:7b:89:20:
9d:c1:4e:15:6c:ca:41:3f:c0:93:30:56:00:5b:a0:
9d:d5:10:7f:85:d2:8d:c2:dd:ba:08:4f:92:03:30:
9c:75:4d:df:e4:25:c1:48:23:34:c6:6e:a3:f7:9f:
bc:07:be:0e:fc:0a:d4:3e:e3:a1:ed:d7:97:f0:6d:
1e:4e:12:1c:6c:cd:a8:5f:33:89:98:87:d3:44:fa:
75:67:26:b3:a4:75:58:29:f5:36:5f:7f:6a:60:f4:
31:9d:29:16:ea:6f:14:c4:81:9a:a6:f5:70:c8:7d:
66:6d:1c:75:34:e0:c7:86:89:2f:ba:06:e5:0e:95:
6e:91:87:e5:05:32:85:5d:b0:cb:61:86:50:bd:f9:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:94:AD:03:D2:10:C8:DC:83:B4:8A:39:5C:48:D2:A9:B7:2F:70
X509v3 Authority Key Identifier:
keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/ieSUrQPSEMjcg7SKOVxI0qm3L3A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:98:29:8f:d5:6b:1f:3a:5c:9f:e8:bb:c3:02:d7:ed:67:ab:
a8:f1:8b:d6:56:c5:39:98:e0:f8:34:c4:3e:9e:4b:71:74:86:
b2:b7:4e:ab:3d:ba:f2:bc:e7:81:b1:af:3c:6f:96:be:d4:ea:
44:1b:e0:4f:ec:96:25:53:18:69:4a:06:88:94:60:22:ab:94:
c5:b8:d1:e4:ca:e4:92:c3:92:27:94:35:39:98:7e:f5:42:0b:
3a:19:9e:70:06:4e:7f:cd:7c:8d:e3:2d:18:ad:f5:3a:be:7c:
dc:84:15:79:21:ab:3e:52:e3:e3:95:36:90:1c:e5:d2:be:19:
fc:7a:13:39:23:c4:f4:db:ee:c2:96:70:dc:68:ed:0f:41:e1:
44:d9:a2:24:68:ee:18:08:85:b3:8e:69:82:ff:1c:e5:72:b2:
1b:01:cb:9c:87:bb:2e:2e:cb:04:e2:70:b4:35:49:c0:89:9a:
4a:bd:8b:c7:16:4c:47:87:d0:b8:41:e3:7f:5c:e0:33:63:16:
44:85:ec:8c:f9:55:83:58:96:33:0f:35:cb:6d:fd:2a:46:83:
c4:e4:54:94:50:b3:69:cd:68:f4:bf:2f:4a:53:a9:0d:4c:40:
26:bb:d6:ed:de:53:bf:57:30:4f:6f:46:3c:36:23:4f:32:73:
37:ad:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org