Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/fMMP8DVCEA0uAbELpET39rnhr2k.roa
File: fMMP8DVCEA0uAbELpET39rnhr2k.roa (raw, json)
Hash identifier: QCgGMy2jEp+Eo9tYtkhx4AIL6e1AH+n++9/lBYWfik0=
Subject key identifier: 7C:C3:0F:F0:35:42:10:0D:2E:01:B1:0B:A4:44:F7:F6:B9:E1:AF:69
Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial: 11
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/fMMP8DVCEA0uAbELpET39rnhr2k.roa
Signing time: Wed 07 Jul 2021 07:03:40 +0000
ROA not before: Wed 07 Jul 2021 07:03:40 +0000
ROA not after: Thu 07 Jul 2022 02:16:35 +0000
asID: 38846
IP address blocks: 103.169.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Validity
Not Before: Jul 7 07:03:40 2021 GMT
Not After : Jul 7 02:16:35 2022 GMT
Subject: CN=7CC30FF03542100D2E01B10BA444F7F6B9E1AF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:e0:75:29:e4:f6:71:01:2e:08:e9:dc:16:
e3:15:cc:2e:c8:bc:88:be:3f:51:39:65:f6:36:eb:
1f:7f:b6:17:71:e7:06:5c:85:20:e7:5a:34:ba:7a:
9d:e2:ee:e2:69:14:10:93:f6:5e:20:77:c7:de:58:
4b:8d:0f:d1:31:c1:66:35:29:d7:14:05:77:6d:80:
0e:3b:ae:e8:12:9f:ad:ae:78:20:9f:69:6e:c0:34:
7e:bb:ae:d5:bd:cf:7a:52:5e:d1:92:7b:d7:2e:08:
ef:4b:2d:fb:7c:9c:57:06:ae:71:5a:33:d3:ab:c1:
51:3f:81:47:49:03:4a:27:31:48:9a:04:fe:72:0d:
07:bc:cb:30:58:ed:cc:7f:da:ba:cd:ad:e7:d9:5d:
71:95:57:2c:c5:78:8a:24:15:82:7c:2f:c9:34:d1:
53:e2:d1:97:cb:c4:16:66:bc:3c:44:1b:e8:51:3e:
71:67:7e:60:83:1d:82:c1:7d:73:cf:ea:a5:4f:d0:
f3:c3:b4:ee:d9:c1:eb:97:32:90:fe:17:6e:e5:6b:
9e:20:9b:01:dd:eb:64:85:47:b3:a2:4e:f5:cc:a5:
19:b0:5a:48:3a:71:47:3e:00:80:12:f5:1b:ed:e7:
fb:40:ff:e3:3e:77:99:0a:b1:2d:bf:5f:21:e9:52:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:0F:F0:35:42:10:0D:2E:01:B1:0B:A4:44:F7:F6:B9:E1:AF:69
X509v3 Authority Key Identifier:
keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/fMMP8DVCEA0uAbELpET39rnhr2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:22:23:93:c9:cc:5f:2e:13:c6:4c:03:59:08:61:58:52:2b:
83:d1:83:5d:0a:bd:24:30:60:c7:a0:04:16:f3:9e:fc:67:e1:
36:ac:13:a9:7a:17:7c:57:d9:b6:35:d3:e6:66:a7:3f:5c:01:
f2:00:e8:b1:cc:f3:91:87:7e:3e:42:8a:1b:04:3b:2f:55:5c:
a7:b8:97:90:c9:25:dd:d4:e7:45:6d:74:2d:f9:8d:77:4c:c5:
b2:60:c7:dd:12:60:b7:2f:42:dd:7d:08:b1:90:87:82:68:bb:
df:b1:3f:ed:aa:1f:22:3c:27:94:59:86:fd:3d:4a:74:6e:9f:
20:16:64:79:c5:cb:c1:77:57:f0:a7:97:a8:33:95:a1:89:72:
46:49:45:30:9a:cb:ca:6e:66:05:91:0e:c8:c0:bf:91:75:6d:
fb:ac:d7:ce:e6:06:ca:3f:8c:98:e8:09:05:3c:26:6b:04:87:
79:ec:e7:4b:41:2a:91:db:04:40:ff:44:bb:0f:64:38:fa:2b:
e7:0d:05:56:83:76:e4:47:99:49:12:0b:46:ce:b2:b2:be:7f:
3f:96:68:47:c1:30:a5:d6:bd:65:df:a1:cb:b9:d5:3f:a0:2f:
6c:49:0f:bf:65:90:14:7e:24:7e:86:27:e1:df:80:ae:75:d1:
c8:62:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org