Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/C6qpt8Luu-N7OfcnFx0JTMiW9dI.roa
File: C6qpt8Luu-N7OfcnFx0JTMiW9dI.roa (raw, json)
Hash identifier: zdWNLAV5PQGD40GSVRfHh7UNvhl7JvTKBhkWu2RSb0o=
Subject key identifier: 0B:AA:A9:B7:C2:EE:BB:E3:7B:39:F7:27:17:1D:09:4C:C8:96:F5:D2
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0A83
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/C6qpt8Luu-N7OfcnFx0JTMiW9dI.roa
Signing time: Mon 14 Nov 2022 02:35:26 +0000
ROA not before: Mon 14 Nov 2022 02:35:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131149
IP address blocks: 103.17.8.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Nov 14 02:35:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BAAA9B7C2EEBBE37B39F727171D094CC896F5D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:f5:be:99:11:3a:6b:ae:87:f7:d3:5e:20:
41:6f:e9:bd:0b:00:a9:0d:66:22:50:8c:58:84:65:
a0:f3:af:43:3c:f3:58:f9:55:b4:79:e3:ad:76:4d:
01:62:69:e3:07:23:da:31:8b:d2:1a:42:c3:39:8b:
58:e1:b1:7c:27:b0:e9:a2:a3:a5:ef:fa:6a:62:38:
b4:e2:69:c2:67:2f:e6:d0:61:33:5d:bb:4b:29:29:
1a:f0:b0:58:bd:bb:90:04:1a:c6:90:a6:fe:d4:a1:
a4:cc:e9:cf:13:d7:99:7d:3e:50:55:75:11:fe:7c:
80:3b:2a:90:41:27:77:99:d0:1e:6d:e3:77:62:68:
61:9e:5a:c5:a3:c6:99:f8:c0:30:52:fb:97:60:ce:
f6:7f:84:26:19:ff:26:20:0d:b9:5f:b5:90:61:24:
22:3e:d1:58:a1:e0:83:7f:cb:94:42:0d:b5:e7:af:
a2:5c:f1:f0:60:ea:76:8d:5b:4f:f7:ca:0a:de:99:
cd:11:69:f9:18:ea:cc:a5:48:3d:78:ba:a5:f8:b5:
bb:2e:c0:ca:42:24:5d:b6:ac:a3:36:a0:40:3f:7c:
ae:e4:0f:8d:6b:d7:14:ba:a6:01:74:66:63:24:6f:
e0:3e:ec:ac:2b:4f:b3:f9:62:f9:42:2a:8b:8f:8e:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AA:A9:B7:C2:EE:BB:E3:7B:39:F7:27:17:1D:09:4C:C8:96:F5:D2
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/C6qpt8Luu-N7OfcnFx0JTMiW9dI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.8.0/22
Signature Algorithm: sha256WithRSAEncryption
59:12:da:ac:ac:63:bb:c0:e4:8f:38:9b:a9:83:e6:b6:d1:2a:
b5:80:91:76:4d:09:5c:df:68:d2:46:75:e4:f6:35:11:0a:eb:
dd:5a:ad:7e:6f:bf:87:57:19:54:ef:40:de:1a:be:82:cd:70:
6c:1e:f9:0e:1f:ff:0c:35:aa:cd:60:66:11:34:3b:e5:12:16:
13:37:8b:66:36:ef:6c:37:2c:07:96:74:56:d3:be:1a:9d:2e:
e0:b1:e5:20:40:4e:c7:54:e1:78:aa:22:2d:1d:26:a3:c9:1f:
bb:2c:b5:ec:29:14:ab:31:7e:83:57:db:0a:eb:f1:0a:6a:83:
a2:78:3c:8e:1f:ca:f4:ec:90:61:61:3c:af:be:6d:47:fe:36:
72:41:89:e8:77:d4:09:a2:39:17:43:f4:7f:79:a3:5c:7e:14:
64:5f:32:52:52:15:f8:74:5a:23:91:66:36:ce:25:ce:40:05:
af:06:62:10:5d:0c:d2:be:32:30:f6:07:ad:27:e5:b7:28:cd:
36:3d:4f:79:2e:c5:b6:f1:4d:52:48:2e:d9:2d:b8:bc:dc:07:
dd:fa:6d:5d:43:91:e7:ec:b0:a3:6b:7c:31:6d:8d:96:75:6a:
00:12:3a:b4:82:84:9a:35:15:2d:6d:b7:81:95:f6:11:07:3d:
7e:74:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org