Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/wEaN9Bv68xEg--RCj9d8qwWKnwc.roa
File: wEaN9Bv68xEg--RCj9d8qwWKnwc.roa (raw, json)
Hash identifier: jGIowTtHAd8lGChrPKVWSu8vPmYWZPbpoY0pG4CeTV8=
Subject key identifier: C0:46:8D:F4:1B:FA:F3:11:20:FB:E4:42:8F:D7:7C:AB:05:8A:9F:07
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 073E
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/wEaN9Bv68xEg--RCj9d8qwWKnwc.roa
Signing time: Tue 29 Sep 2020 09:59:51 +0000
ROA not before: Tue 29 Sep 2020 09:59:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 16509
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 29 09:59:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C0468DF41BFAF31120FBE4428FD77CAB058A9F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:ef:ae:fe:c6:9b:46:ab:70:44:01:cb:2f:
38:9c:28:9e:f5:38:43:c4:21:4e:d7:a1:6b:74:e2:
8a:e1:29:8c:15:22:6e:d3:a4:d5:99:c1:be:df:54:
8a:00:c1:1b:15:6a:bd:01:3a:da:5e:48:c1:40:80:
2b:84:99:59:0f:67:b7:15:07:54:2f:4d:3f:e4:50:
75:2f:9b:d3:2e:f4:7c:28:e1:e1:fc:5f:ab:21:e2:
18:9f:3c:4b:03:64:a5:39:99:07:f9:41:d1:5a:47:
4d:f6:4e:37:65:00:b2:04:17:05:e7:c3:51:1e:0c:
c6:8f:5d:44:32:bb:08:a9:61:7b:c1:6e:64:7b:74:
9d:7e:a8:11:51:e1:ff:20:fc:39:42:63:47:73:34:
18:e1:1e:b6:d2:0e:b6:35:0a:8f:c8:3a:db:8c:0e:
e9:19:00:30:3a:fb:ad:81:6d:ec:13:77:21:6e:d8:
15:23:81:c8:3f:29:21:56:35:7b:0a:11:31:1f:32:
44:33:f9:2e:c4:cc:e0:f4:0d:68:db:ec:c2:32:db:
2c:c2:b4:8c:0d:e6:18:e2:73:0a:f7:9d:f6:8b:fa:
18:af:3a:42:bb:93:e0:a5:82:59:9c:f8:88:c6:a3:
b0:c3:27:ac:85:05:3c:f8:80:b1:31:b3:15:1b:89:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:8D:F4:1B:FA:F3:11:20:FB:E4:42:8F:D7:7C:AB:05:8A:9F:07
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/wEaN9Bv68xEg--RCj9d8qwWKnwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a6:15:85:83:54:ff:5a:ee:a1:37:17:db:b8:1d:08:a1:78:
aa:c4:fc:ce:ef:f9:b0:df:32:eb:eb:94:64:f0:7e:7f:dd:d5:
64:79:12:50:1d:4c:97:b3:f3:ab:90:ea:6c:74:53:44:ee:9f:
6c:8e:80:ee:29:4a:d9:e7:23:a3:8a:a5:bd:b8:6d:48:6a:05:
3b:a9:09:4b:d6:4b:94:58:a8:b4:2d:09:f8:80:8d:22:e5:fc:
60:71:1f:64:02:3e:b4:41:3c:86:11:03:f3:5a:b7:e1:5d:6e:
3b:1b:09:01:fe:47:0e:ee:4e:68:5b:7b:e6:0a:e3:4d:c4:c0:
45:d4:f9:bc:de:ee:f2:d5:a8:e2:4b:d3:01:7a:f4:57:98:39:
12:4a:f4:be:17:c1:7a:4f:82:e7:6d:d1:c0:23:ed:ac:92:e2:
fd:27:79:8e:66:ec:ee:20:0d:7f:45:21:86:da:4b:8a:b9:49:
e1:39:f1:a5:37:ad:51:e7:ad:0b:28:de:cd:f7:8b:99:5a:60:
9f:66:71:ba:d5:da:67:d7:86:40:d2:7e:05:ec:03:16:02:18:
07:8f:e4:10:d2:4e:ca:4e:1f:a2:5d:4f:bc:53:6e:07:0f:dd:
bf:cd:07:da:ec:31:f6:c6:10:b5:69:9b:3d:f5:5a:73:6d:e0:
5e:e0:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org