Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/jlEhFlm1zqHdD9a_iUZF6rdgA18.roa
File: jlEhFlm1zqHdD9a_iUZF6rdgA18.roa (raw, json)
Hash identifier: K2d1tBa7udvc++TpgKBBQWCnELDhn5DavLqBSEc4pX4=
Subject key identifier: 8E:51:21:16:59:B5:CE:A1:DD:0F:D6:BF:89:46:45:EA:B7:60:03:5F
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 078C
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/jlEhFlm1zqHdD9a_iUZF6rdgA18.roa
Signing time: Tue 29 Sep 2020 09:59:43 +0000
ROA not before: Tue 29 Sep 2020 09:59:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.234.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Sep 29 09:59:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8E51211659B5CEA1DD0FD6BF894645EAB760035F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:3a:24:28:05:4a:e4:ca:44:07:ab:91:d6:
0c:c7:f5:23:1e:e4:1a:f5:6d:f0:1b:22:96:da:b9:
c3:96:68:47:30:b7:82:ff:cc:66:7c:b7:31:24:9d:
86:1a:8b:46:1f:34:fb:f6:6f:bd:01:30:ea:e0:ad:
0a:d8:b6:55:1a:da:9e:41:32:69:40:8e:d4:ce:cd:
dc:a4:de:e3:14:88:ed:24:f4:d9:f0:22:75:3c:06:
9f:e1:1c:3b:f7:ac:6b:97:b0:a8:18:53:71:a0:15:
7d:77:05:26:af:8c:a4:46:29:5d:27:02:a9:56:90:
3f:1c:a2:2e:95:c8:97:41:82:9a:bc:82:29:32:f0:
f2:5f:2a:c9:ba:c2:d9:0a:f5:5d:46:f3:7f:0f:00:
2d:68:a2:4c:ae:e7:df:15:0a:10:6b:62:73:b7:05:
ea:8a:3e:3c:93:9c:56:59:23:ac:18:8c:31:31:fe:
6d:13:09:97:d8:cc:40:c0:24:37:82:23:a1:df:5c:
9b:f8:0b:ce:ef:e0:4b:32:5b:c2:2c:89:74:3b:d8:
8c:37:4d:96:0c:91:1e:45:60:9d:03:34:80:ab:20:
06:07:7b:75:39:34:52:81:aa:01:93:78:07:30:df:
d0:45:5b:e2:23:11:d2:e7:4d:63:7a:41:7e:5c:bb:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:21:16:59:B5:CE:A1:DD:0F:D6:BF:89:46:45:EA:B7:60:03:5F
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/jlEhFlm1zqHdD9a_iUZF6rdgA18.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.224.0/22
Signature Algorithm: sha256WithRSAEncryption
02:2e:fe:80:85:78:76:97:5b:ad:1c:86:5b:7c:4c:94:88:93:
90:17:f8:2a:9e:8e:96:7e:2a:cc:c1:06:69:d7:7f:42:7d:c1:
15:1e:ba:5b:08:de:88:c9:73:b2:b2:2d:c0:38:41:c3:69:44:
57:d8:a0:41:3c:89:57:23:91:85:c7:61:69:bb:4c:2f:93:dd:
10:b2:49:28:99:6b:b9:9a:91:21:2e:9c:5f:8c:59:64:46:38:
a7:8f:0e:29:58:da:1d:f2:67:90:03:a5:b2:75:4f:46:13:9c:
9b:0a:6d:10:72:f9:7b:a8:28:a4:76:91:ab:31:ed:88:9b:39:
9b:10:e4:a8:6f:90:23:85:42:c2:af:b6:ca:18:53:65:ef:f0:
a3:4b:16:01:1b:ab:a6:76:a0:df:73:f3:9b:c6:0e:4f:80:66:
b4:32:ea:e4:d6:0f:b2:b3:9b:d4:da:01:d3:02:7d:b9:3f:31:
b0:42:b9:5b:f3:7d:1f:b5:b0:58:be:c0:24:fd:09:75:d3:79:
46:be:44:ca:5e:6e:0b:8f:4a:3f:5a:4e:d6:ac:5a:00:5c:70:
a9:c4:b2:9f:e1:dd:b8:ee:b5:b7:70:8c:83:32:f4:41:f6:24:
a0:e7:c6:4f:e7:cb:86:95:da:e5:68:e6:21:b5:3b:48:e8:1f:
37:70:5c:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:49 2023 by rpki-client on console-ams.rpki-client.org