Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/DXM54Q_WEJWlmTNe7SX_CK3gAis.roa
File: DXM54Q_WEJWlmTNe7SX_CK3gAis.roa (raw, json)
Hash identifier: md3vVXPJyCgaCgw5FMTLIvTdSQ4KsFJbfyYKBsOwIxc=
Subject key identifier: 0D:73:39:E1:0F:D6:10:95:A5:99:33:5E:ED:25:FF:08:AD:E0:02:2B
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0112
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/DXM54Q_WEJWlmTNe7SX_CK3gAis.roa
Signing time: Sun 06 Dec 2020 16:23:27 +0000
ROA not before: Sun 06 Dec 2020 16:23:27 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 212279
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Dec 6 16:23:27 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=0D7339E10FD61095A599335EED25FF08ADE0022B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:71:9e:13:32:99:8c:06:f4:1a:f9:16:97:
69:af:2b:1f:9a:55:d9:c3:ed:71:76:a8:00:b3:fa:
a3:36:86:7e:5a:67:bd:22:0a:b6:c3:1c:db:1e:63:
a1:29:98:87:a0:14:74:5d:2d:fd:ab:71:48:44:6c:
3f:f8:5d:a8:e6:00:5f:02:8e:78:ce:a7:6b:a5:95:
6d:7e:d5:9d:31:8c:37:d4:03:92:b2:07:85:77:7b:
46:3f:d5:00:74:0a:97:f1:80:2a:0d:5b:6d:cb:2f:
17:0b:71:50:f1:50:da:d7:86:71:75:87:a8:99:f4:
20:38:17:4e:06:44:a1:0d:e0:77:4d:fc:73:1d:f1:
27:fd:85:3f:08:55:dd:38:1a:e7:30:73:8b:61:aa:
9d:eb:e2:8a:c5:29:60:2f:7f:1e:ed:30:b6:c4:a8:
ac:5e:58:89:ac:6b:5d:08:1c:b2:48:c5:3d:58:ad:
d7:4c:4f:e7:55:b6:98:51:84:b9:05:ae:40:f7:65:
a9:e3:24:bc:12:bb:f9:93:6a:e7:83:35:ad:54:39:
f9:1e:5b:bc:56:f2:f7:ee:84:3e:7f:d5:b6:16:3b:
eb:04:d4:14:cd:68:b2:d9:44:ec:de:c3:52:9e:77:
49:1e:9e:c0:9f:bd:e0:1a:38:b9:3e:bc:fe:76:61:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:73:39:E1:0F:D6:10:95:A5:99:33:5E:ED:25:FF:08:AD:E0:02:2B
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/DXM54Q_WEJWlmTNe7SX_CK3gAis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c0:5b:27:97:3e:0b:a1:12:79:67:b7:c9:81:1a:96:ec:cb:
12:3c:22:c6:a8:dc:a1:52:71:95:d3:02:92:eb:45:f4:4f:d3:
e3:17:3c:25:2d:e0:85:00:0c:1a:e1:ec:ce:c7:0b:83:b9:12:
94:b3:08:6c:76:4a:69:d1:09:c8:ad:49:63:d0:d0:d8:55:10:
08:fd:47:20:a9:77:97:b8:41:ca:50:40:b4:dd:f4:94:38:10:
fb:0c:26:1d:7b:c7:9a:b9:a0:cb:69:a6:52:57:87:f3:f6:b2:
a9:65:c9:87:c7:5d:73:2c:14:6d:6d:47:f0:93:b6:b0:84:81:
88:f0:61:f9:ec:31:97:b2:d8:b4:15:0c:d2:4f:54:0d:03:d1:
26:f7:e4:c4:ca:85:df:03:0a:b1:ee:ee:e1:0b:5c:30:b0:a7:
c8:42:33:52:e9:e0:3c:23:e2:84:2a:bf:62:a1:66:ea:7a:55:
a6:fd:ac:5d:de:39:21:60:36:e6:c6:eb:4c:45:53:fb:0e:60:
2d:44:a6:47:8b:4e:d0:7c:b0:82:29:f5:cb:54:19:6f:be:66:
e2:0d:d1:ff:fc:97:c9:ca:31:08:d9:60:fd:38:7a:82:58:03:
be:03:e7:bb:f1:4f:fc:57:df:92:2f:63:22:cc:b5:0d:aa:d8:
c7:a5:54:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:43 2023 by rpki-client on console-ams.rpki-client.org