Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CWTW/1_kvjxeb9obdYLRmOZek1f6Qq9o.roa
File: 1_kvjxeb9obdYLRmOZek1f6Qq9o.roa (raw, json)
Hash identifier: PL9JzrNpWGXSI9bw7ARB1fAqJYMxLS1u3TygUzkoADE=
Subject key identifier: D7:F9:2F:8F:17:9B:F6:86:DD:60:B4:66:39:97:A4:D5:FE:90:AB:DA
Certificate issuer: /CN=996D67023ED27754ACB1B568433D4376C88200F5
Certificate serial: F3
Authority key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/1_kvjxeb9obdYLRmOZek1f6Qq9o.roa
Signing time: Fri 04 Mar 2022 08:29:05 +0000
ROA not before: Fri 04 Mar 2022 08:29:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131273
IP address blocks: 103.161.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996D67023ED27754ACB1B568433D4376C88200F5
Validity
Not Before: Mar 4 08:29:05 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D7F92F8F179BF686DD60B4663997A4D5FE90ABDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:7b:20:c9:53:29:ff:5e:c1:08:a0:23:e7:
6b:6d:f8:d4:49:91:1c:98:32:1e:66:3f:a7:b9:6f:
6e:cd:7e:b9:1c:e4:a0:6d:f3:49:80:5a:19:b7:73:
b6:8e:f4:61:75:02:a0:61:41:52:1d:d7:cd:41:ce:
9b:8c:65:9f:9c:ff:12:a9:12:c6:13:c5:6b:d5:61:
f3:fb:67:fb:a5:27:b4:e2:92:cb:f5:c4:7a:4d:17:
bf:0a:76:28:1b:0c:a6:48:7e:a6:9b:40:47:5f:f2:
b9:8c:db:02:1f:b8:4b:27:f8:29:96:96:df:28:75:
60:5f:58:92:da:28:2d:70:89:ff:7c:cb:8d:16:1d:
d1:a9:17:be:bf:97:67:53:d7:6a:18:43:d6:c0:55:
7c:0a:92:e3:28:d9:8b:59:61:9c:cf:6f:4c:2d:cc:
1e:59:93:49:ef:a8:00:c6:e3:18:b3:da:1c:d7:ee:
a0:ef:de:51:fd:c2:0c:17:a8:d8:40:e3:22:c6:68:
53:e1:0e:72:59:43:4b:80:35:be:41:8f:fc:61:06:
fc:59:3e:86:73:f3:47:50:0d:71:56:6b:3d:41:7a:
b7:62:0f:68:27:0c:e2:40:69:f2:7a:ff:02:3b:00:
27:10:fc:c5:74:5e:99:24:48:a8:fb:47:90:7e:ae:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:2F:8F:17:9B:F6:86:DD:60:B4:66:39:97:A4:D5:FE:90:AB:DA
X509v3 Authority Key Identifier:
keyid:99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/1_kvjxeb9obdYLRmOZek1f6Qq9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:79:16:2b:32:be:f1:3e:4e:15:8d:79:d9:56:2e:1e:59:a6:
98:de:83:1b:0f:d2:81:53:80:b9:8d:a2:77:dd:73:d6:fb:79:
34:20:e9:03:25:99:ce:b5:ec:a0:7d:bc:e5:1c:af:a9:89:2e:
10:4a:e7:31:04:aa:1c:e8:d4:87:b1:9b:4a:a3:96:71:e1:3a:
5c:46:63:e0:af:b3:8b:b2:e2:ee:39:17:69:c7:55:a8:78:a6:
0f:bb:51:f6:4c:4a:3c:58:82:f0:59:55:0a:9a:df:d0:b7:a8:
d7:17:d4:7e:da:a4:33:cf:4e:58:32:f9:4a:93:f2:84:8d:1f:
ec:a6:5b:61:dd:19:dd:80:5f:1e:16:42:13:b6:20:26:da:20:
bb:87:c0:4b:79:9c:0e:76:83:ac:1c:47:43:03:6a:55:41:9b:
17:a0:ae:66:b0:a7:ac:98:40:b5:10:70:0d:69:0c:6b:b6:81:
99:5d:d1:6f:fc:58:4c:22:2d:74:ec:82:f6:b8:5c:b2:cd:ff:
2f:6f:0d:70:44:31:ec:38:83:6e:9a:bf:4d:29:87:97:f0:7a:
4d:5a:f0:0b:9c:27:19:22:17:61:c9:08:06:25:a4:ff:28:35:
71:96:0a:16:d0:00:57:44:97:29:c3:03:ec:54:69:9f:d4:6b:
7c:32:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org