Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/oGYJ0GJPudAg4ttxC813CGCNnQM.roa
File: oGYJ0GJPudAg4ttxC813CGCNnQM.roa (raw, json)
Hash identifier: lhofKOyWOKhtmuMKRVCoSc9Rr/NCCwCTLmb7JAF+lyM=
Subject key identifier: A0:66:09:D0:62:4F:B9:D0:20:E2:DB:71:0B:CD:77:08:60:8D:9D:03
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 30
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/oGYJ0GJPudAg4ttxC813CGCNnQM.roa
Signing time: Mon 12 Oct 2020 14:10:07 +0000
ROA not before: Mon 12 Oct 2020 14:10:07 +0000
ROA not after: Tue 05 Oct 2021 04:04:36 +0000
asID: 17413
IP address blocks: 103.156.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Oct 12 14:10:07 2020 GMT
Not After : Oct 5 04:04:36 2021 GMT
Subject: CN=A06609D0624FB9D020E2DB710BCD7708608D9D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:a0:d3:61:0d:0e:af:07:ea:a0:30:0e:d5:
e7:8c:ba:95:b7:5b:73:f5:60:0e:e6:da:42:1a:01:
ed:cf:e8:2d:80:4c:6f:d1:49:0b:38:67:c4:81:09:
34:5c:92:2b:b4:ea:db:ae:a6:8f:d2:de:ab:d8:0d:
1f:cc:9e:24:2a:c1:02:56:2c:a8:e4:c4:2f:7f:67:
d4:39:72:51:72:de:f9:10:e0:dd:1e:f3:92:26:56:
64:b2:17:e6:32:ef:a7:60:5a:28:e4:c3:dd:d9:ee:
8c:ba:0f:3c:8d:79:c3:c8:1a:c7:99:56:e6:d7:3d:
e9:4c:1e:c3:88:4f:06:a3:8c:40:97:d4:65:24:b4:
58:80:6d:00:6a:49:5a:f7:fa:8c:59:05:9b:1e:a4:
6c:ec:6d:1f:51:91:e0:75:47:56:7b:06:fe:b1:ed:
65:9e:76:01:db:a5:22:fb:4a:62:d9:80:41:a0:4b:
1c:31:c7:1a:ff:d1:97:60:67:25:f5:a9:42:55:f6:
22:b5:71:a6:ab:6e:cc:63:73:17:cd:eb:9c:1b:2c:
87:73:69:89:0b:cf:41:d8:d9:36:d7:8b:87:59:b6:
58:75:7a:ca:c8:30:4b:97:1a:04:10:c3:bc:56:81:
e3:2d:91:8d:c8:30:fc:b5:61:dc:b5:ad:19:3f:b1:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:09:D0:62:4F:B9:D0:20:E2:DB:71:0B:CD:77:08:60:8D:9D:03
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/oGYJ0GJPudAg4ttxC813CGCNnQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:d6:f1:05:ed:c5:e1:af:f2:af:ed:16:0c:eb:09:43:79:07:
b0:d7:23:51:57:af:ff:48:e9:36:2f:81:39:a5:74:29:82:d6:
98:4f:ff:2d:75:fc:c3:8c:75:09:44:81:5f:50:61:7a:a6:f2:
d7:6d:ec:03:87:0c:97:7a:6e:e1:fe:79:eb:0d:62:dd:76:e8:
72:ea:be:c3:e7:66:df:11:a6:31:8c:c5:4c:95:92:23:6b:c6:
f0:c3:f6:2e:c1:c1:8f:07:b3:89:5d:53:43:d4:c2:2b:90:27:
05:f3:fd:3a:0a:bf:7b:68:ea:22:58:9c:af:a6:de:93:d4:ed:
68:1a:c8:18:68:7f:8b:75:e8:62:c8:5b:f3:cc:d1:c6:0a:e2:
de:2d:c7:6a:af:9b:b7:dc:7a:91:30:64:62:ef:14:bf:22:b6:
36:cd:2c:63:02:44:0a:a2:ad:d0:cb:16:61:77:8b:75:e4:ce:
82:f3:21:2c:0d:1c:48:6d:65:57:bc:b2:d9:c9:ef:da:12:12:
ff:7d:12:13:80:00:81:96:c5:bb:09:ae:d6:f0:10:6a:9b:92:
b5:ac:29:bf:bc:8b:c6:06:bf:a7:a2:f6:cc:a6:be:64:0b:a3:
86:ae:9b:29:70:1d:d2:48:54:46:be:1f:a8:cf:36:8d:9a:a3:
a0:6a:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:43 2023 by rpki-client on console-ams.rpki-client.org