Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/SHYawXHTNGYeKadPz4bHfHbyC7Q.roa
File: SHYawXHTNGYeKadPz4bHfHbyC7Q.roa (raw, json)
Hash identifier: mGWRZsXJl7Fns6Li07UZkCebmUTpVcONEiJM4S8P14E=
Subject key identifier: 48:76:1A:C1:71:D3:34:66:1E:29:A7:4F:CF:86:C7:7C:76:F2:0B:B4
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 015D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/SHYawXHTNGYeKadPz4bHfHbyC7Q.roa
Signing time: Sun 07 Feb 2021 13:04:29 +0000
ROA not before: Sun 07 Feb 2021 13:04:29 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 209557
IP address blocks: 103.156.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Feb 7 13:04:29 2021 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=48761AC171D334661E29A74FCF86C77C76F20BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:3e:b4:c3:56:3d:83:25:68:df:6e:c9:18:
e4:75:5c:b8:a8:1c:f6:0e:94:44:8b:e3:98:92:9e:
a5:3a:1f:8d:cc:ac:e9:8e:23:ca:a7:c7:74:ec:a7:
58:f3:d7:7a:b8:65:9d:7d:a4:f6:94:2d:9a:5c:be:
71:60:75:26:c7:2d:6c:db:4b:91:7f:61:83:b1:e3:
8d:47:77:eb:00:6d:df:2f:e6:6e:d5:58:2c:79:06:
6d:44:55:ce:85:9d:e4:73:a1:91:ac:74:34:c5:ee:
78:6d:2a:cf:c5:c4:a2:0b:28:61:43:ab:4d:f3:bb:
d9:21:30:bb:c8:36:58:b7:07:f3:9e:78:aa:35:38:
f3:93:24:08:b6:48:60:27:63:a3:83:6f:f8:35:e4:
06:e1:71:b4:1a:c9:24:4d:35:2a:34:d3:48:de:4d:
b9:05:b3:cc:31:a7:d7:17:fb:a7:c3:d0:da:7f:37:
93:c4:7b:5c:80:72:4e:48:8d:4d:09:92:fd:4e:9a:
2d:fc:d4:1d:c7:05:95:fb:63:a7:37:15:17:d3:92:
22:d1:cb:a0:49:f1:b9:4a:5d:b8:ec:a8:ba:76:9a:
9b:9f:20:4b:e0:6d:98:d1:7d:c6:79:a3:c7:8e:1f:
d6:71:e8:20:60:f4:b5:bd:65:b4:5e:63:a6:8e:5c:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:76:1A:C1:71:D3:34:66:1E:29:A7:4F:CF:86:C7:7C:76:F2:0B:B4
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/SHYawXHTNGYeKadPz4bHfHbyC7Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
17:c2:94:ab:ef:a8:20:1a:f3:6d:ba:f1:c0:6d:65:7c:95:24:
0a:dc:5a:a4:08:fb:bc:fc:7a:0a:a9:c9:e4:9f:c8:22:d6:f2:
9d:d5:dd:c9:a6:55:78:9d:a7:e9:a3:3d:cb:4c:d7:0b:51:db:
2f:28:02:a0:f6:43:fb:06:7e:07:f1:74:d3:da:42:2b:f3:ce:
f5:c7:21:e6:9c:0b:bb:db:39:60:77:00:02:a7:91:0f:e1:6a:
77:68:58:26:3b:20:17:80:b0:39:c4:1d:93:08:75:85:8b:55:
f9:01:2f:e7:ed:03:5e:54:48:cb:ad:cf:25:31:34:e5:b4:72:
4e:c7:74:b6:f9:53:8e:66:38:ab:d1:c5:a5:1a:17:a6:f2:52:
74:2b:13:3b:bc:51:dc:e6:28:0e:e1:2c:fe:87:b3:46:2c:7c:
1b:56:57:41:13:bd:1f:80:4c:aa:07:be:bd:f9:07:c7:6e:32:
4f:b7:3c:3d:da:8a:d4:fc:30:43:c8:2c:33:07:94:f0:e0:40:
b9:d9:74:61:9d:c8:a3:0a:3d:ba:8a:b8:6c:60:59:8b:46:56:
aa:ae:47:b2:b9:e0:23:c3:1a:59:cd:d2:ec:cf:2b:21:ad:6c:
41:0a:30:dd:27:ba:ec:06:c5:e0:4e:95:97:71:4f:c1:e2:4f:
b6:5d:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org