Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6s1YcbSsFQZd0e9VfxZkixGzdSA.roa
File: 6s1YcbSsFQZd0e9VfxZkixGzdSA.roa (raw, json)
Hash identifier: 1mXvBal/0u3IwEydqtQtajxtxXMigwSsuHrMQXesI2g=
Subject key identifier: EA:CD:58:71:B4:AC:15:06:5D:D1:EF:55:7F:16:64:8B:11:B3:75:20
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6s1YcbSsFQZd0e9VfxZkixGzdSA.roa
Signing time: Wed 07 Oct 2020 03:17:58 +0000
ROA not before: Wed 07 Oct 2020 03:17:58 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 141173
IP address blocks: 103.156.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Oct 7 03:17:58 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=EACD5871B4AC15065DD1EF557F16648B11B37520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:7a:b5:01:aa:c2:66:a5:32:02:23:6f:1e:
55:0b:17:a4:06:6f:f6:85:7f:14:ae:4a:3d:60:97:
0b:73:32:d5:76:3b:21:96:d3:8c:17:48:59:ca:e2:
22:6b:ab:1c:a5:06:f1:b5:40:c8:8e:cf:b4:c0:99:
1f:6c:3b:5c:28:de:88:fc:d0:25:a9:2f:17:5b:0c:
c1:53:8f:b9:13:71:7d:a1:6d:4f:2c:db:37:fd:ac:
a4:7c:c7:2e:d6:2c:e0:a7:f5:b2:2c:17:b6:47:2c:
5c:40:c8:37:56:d1:12:6b:a0:84:0b:14:f9:39:7a:
16:eb:50:9a:d1:47:94:ed:e5:22:ea:e3:a1:d1:4b:
90:91:1d:26:16:11:f9:6a:11:13:80:83:19:5a:8a:
a5:f8:6a:f7:49:f2:5c:71:8b:b3:cb:dc:fe:99:a2:
6a:ed:7d:87:5c:f4:69:83:7f:e2:77:e4:40:87:94:
8e:53:6c:12:bd:a5:6c:bf:63:80:42:19:51:87:ad:
33:4f:14:71:0f:a7:8d:44:27:a4:27:7b:46:da:1b:
63:f4:cc:49:14:71:dd:03:66:1e:3d:83:08:43:b0:
82:9d:48:2a:01:3f:39:9d:46:b7:5a:8b:59:2c:c4:
7d:f7:91:de:aa:cd:1d:4d:1f:7e:d6:b4:e1:39:3b:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:58:71:B4:AC:15:06:5D:D1:EF:55:7F:16:64:8B:11:B3:75:20
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6s1YcbSsFQZd0e9VfxZkixGzdSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
de:6e:80:2b:ef:6e:df:37:62:60:90:fa:b9:08:12:2e:4d:07:
2d:4d:9e:87:19:2b:d5:75:29:ca:b7:47:d4:16:4c:38:bf:49:
31:b5:92:35:dd:0a:70:d4:82:42:10:8e:f2:eb:89:9a:c7:9e:
44:42:4c:fa:4b:d8:99:09:fa:a0:e1:47:52:3e:2f:29:be:b3:
9c:13:21:ae:69:6d:0e:dc:57:3f:30:ac:e7:03:80:a4:94:95:
d4:9f:fd:f7:8d:94:dc:40:c4:e3:50:fd:38:4e:5e:35:b4:f0:
46:05:f6:82:3d:d7:5b:b9:a7:7e:19:63:01:ea:98:94:d5:3f:
a8:bc:53:45:af:22:7d:67:14:85:3b:51:37:56:e7:20:08:b6:
90:e2:29:8f:cc:a9:5f:f3:3f:c8:c2:02:a4:9a:63:be:e5:26:
48:d1:31:b4:40:5d:19:db:e6:c9:25:62:4e:50:3c:54:cf:09:
d2:94:b1:3a:56:9a:ba:69:3b:5b:02:10:3b:d9:6a:87:81:89:
25:d2:c2:35:4b:86:16:30:67:6c:fe:ce:a2:c3:65:23:3e:b8:
23:d9:c5:71:f8:dc:7b:86:59:71:99:1f:12:56:cc:9e:f0:a6:
db:e8:25:b0:7d:18:5d:a9:44:13:9e:c2:1a:63:74:29:ea:48:
af:b2:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:43 2023 by rpki-client on console-ams.rpki-client.org