Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VmzkWM0EOpV0ieNxQw0tdHyaB8w.roa
File: VmzkWM0EOpV0ieNxQw0tdHyaB8w.roa (raw, json)
Hash identifier: uVLz36vz+vhW2A9f90Ol5EzgnlVF9tyvHlVAAxq9WTQ=
Subject key identifier: 56:6C:E4:58:CD:04:3A:95:74:89:E3:71:43:0D:2D:74:7C:9A:07:CC
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0858
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VmzkWM0EOpV0ieNxQw0tdHyaB8w.roa
Signing time: Tue 29 Sep 2020 10:02:21 +0000
ROA not before: Tue 29 Sep 2020 10:02:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 103.5.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=566CE458CD043A957489E371430D2D747C9A07CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:45:fe:c8:dc:20:50:3a:52:7d:f1:ce:be:
04:01:a0:e7:f2:d2:ac:b1:fc:86:c9:7e:42:fa:42:
02:4d:b5:5a:b0:40:08:55:75:b5:e1:fb:e4:af:27:
86:77:69:03:0e:6a:a4:31:1e:8b:c9:9f:de:6e:e3:
03:c7:b0:8d:37:8a:f7:94:25:a2:56:73:b1:a1:cf:
71:84:d6:a5:ae:dc:28:de:66:ac:a8:55:52:bc:8b:
c0:a2:de:ef:86:70:54:e8:cd:02:88:3f:c6:d9:e2:
e0:34:fb:9d:dd:d4:98:e2:32:35:2c:ac:4e:a3:a2:
5b:75:9b:d8:84:22:3b:46:22:ef:a0:4a:6f:04:03:
eb:af:41:56:f5:c0:dc:b3:15:f4:71:f4:bc:2b:19:
d1:26:84:32:fa:97:fb:46:22:6a:88:6e:2d:33:f3:
10:62:c7:ad:ba:1f:ef:c6:86:01:ed:f7:9f:87:aa:
d1:73:57:ee:a8:c8:e1:dd:ca:62:81:d3:b4:9c:4e:
f7:4d:80:4b:27:d8:47:57:35:1d:ab:f1:f4:b7:23:
a0:dc:58:9a:5e:f9:8b:86:55:0f:a6:86:08:ca:26:
a2:28:ce:a5:f9:44:8b:2e:ad:17:c3:33:ce:83:2c:
e5:20:79:70:ce:cd:ed:8a:fd:c1:30:a2:b4:c5:e9:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:E4:58:CD:04:3A:95:74:89:E3:71:43:0D:2D:74:7C:9A:07:CC
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VmzkWM0EOpV0ieNxQw0tdHyaB8w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.100.0/22
Signature Algorithm: sha256WithRSAEncryption
56:08:50:70:e1:84:19:04:f6:30:58:a8:54:a6:5b:8d:78:5d:
49:1e:31:ab:30:a0:37:28:32:00:d9:6d:ce:09:79:3a:43:0a:
65:13:19:63:55:b2:94:e4:fc:4a:27:27:06:e9:a6:16:e6:b8:
cf:0d:10:29:2d:a1:ed:d5:da:c5:a1:dd:aa:64:4c:f0:ec:f2:
d9:49:19:fe:ce:53:29:50:60:b8:f1:80:21:16:53:a8:f9:43:
e3:f7:e5:3e:20:e7:77:01:8d:2f:5d:b1:a1:4e:87:4e:ae:a6:
ed:53:94:72:24:27:ac:1b:20:20:01:30:5c:78:78:03:6e:2c:
72:a1:1a:26:f7:11:ef:83:32:26:b6:d8:18:37:f5:5c:f3:89:
e9:d0:95:e1:04:83:a4:e2:ad:44:b4:6b:94:7c:98:91:70:05:
c8:38:42:48:d2:7a:89:54:8d:fc:13:7b:37:2a:31:26:fb:f6:
95:6e:8a:eb:9f:7c:ca:94:7e:5d:66:38:17:9d:f0:6d:d8:4a:
8b:8c:52:d7:d0:1f:f2:bc:50:38:97:e6:fb:67:06:6c:49:cf:
42:96:dc:28:a3:f4:ad:f7:76:ea:06:11:3d:c0:8a:8c:35:fa:
33:1f:6d:13:12:31:13:a6:19:f0:ff:e4:ff:47:33:a6:91:06:
66:e8:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:03 2024 by rpki-client on console-ams.rpki-client.org