Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYVC/E6-LZP2B4t6V7VnlQGofYK463NE.roa
File: E6-LZP2B4t6V7VnlQGofYK463NE.roa (raw, json)
Hash identifier: 3nv4w4coFAj+htW6DA9cjfk9M+Lih7E+ql7Y8O4maK0=
Subject key identifier: 13:AF:8B:64:FD:81:E2:DE:95:ED:59:E5:40:6A:1F:60:AE:3A:DC:D1
Certificate issuer: /CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Certificate serial: EE
Authority key identifier: 37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/E6-LZP2B4t6V7VnlQGofYK463NE.roa
Signing time: Tue 07 Mar 2023 07:05:23 +0000
ROA not before: Tue 07 Mar 2023 07:05:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 45102
IP address blocks: 103.183.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Validity
Not Before: Mar 7 07:05:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=13AF8B64FD81E2DE95ED59E5406A1F60AE3ADCD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:20:36:9e:85:a6:79:c6:68:3c:95:a1:45:
ee:09:4d:e8:92:80:75:7b:0d:21:a2:07:1c:d5:3e:
f0:10:88:61:65:46:5e:7a:fe:b8:57:81:b1:a9:24:
ca:e0:da:58:d3:ce:76:c7:6f:c4:f2:1c:5e:d3:c9:
27:10:77:5a:fa:76:9c:5c:78:cf:da:9f:11:53:64:
d4:60:b6:89:5a:42:20:91:af:a8:85:4f:56:ee:d1:
f3:64:4e:af:d3:6f:01:d2:67:9c:e0:00:cb:91:4d:
ad:a2:db:90:c1:02:b2:9f:40:69:ed:25:19:f9:7f:
7c:a7:92:01:30:cf:ce:1d:c7:97:1a:9c:a0:0d:ea:
13:8a:a9:73:07:c8:68:c5:9f:8f:c9:ff:35:25:9b:
fc:41:ff:bf:7e:fe:f2:bc:ee:56:59:28:aa:97:ab:
17:7e:59:95:42:d9:28:67:38:06:05:d4:d8:7f:f9:
40:1e:73:d0:f7:e0:4d:3e:75:7e:e5:34:0e:99:55:
f7:cd:dd:33:c7:4b:6d:70:5a:ed:c0:3d:68:84:b3:
5b:66:ea:20:0c:8d:dc:81:3a:37:22:e1:51:25:9d:
97:54:86:ed:89:c2:eb:19:e4:c4:90:56:72:4b:03:
f3:b5:9a:60:38:68:9e:bf:4c:16:75:da:4b:e9:db:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:8B:64:FD:81:E2:DE:95:ED:59:E5:40:6A:1F:60:AE:3A:DC:D1
X509v3 Authority Key Identifier:
keyid:37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/E6-LZP2B4t6V7VnlQGofYK463NE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.154.0/23
Signature Algorithm: sha256WithRSAEncryption
97:33:20:e6:30:64:fb:eb:78:4d:18:8d:80:ac:12:60:f1:f3:
fd:65:fd:f7:65:3e:a4:54:d8:65:53:71:28:74:97:d3:8d:c7:
fc:3e:6f:15:ab:88:03:4b:5f:92:7c:f0:53:e8:d2:26:ea:e4:
16:77:fa:c0:43:e8:bf:95:10:9e:bf:43:3a:14:fa:4d:22:04:
ea:2e:40:b7:85:c1:2b:67:b7:ab:2f:c1:f4:86:5e:ac:b6:91:
9c:25:60:5a:79:b5:74:f2:3e:e7:f4:32:3e:89:38:d3:5f:12:
53:06:48:91:75:e0:41:9e:49:fa:cb:21:f8:c2:1e:7a:d0:de:
63:1a:3d:6f:97:10:f2:20:a8:36:b5:84:9d:60:11:ae:49:3f:
00:ea:32:13:50:1b:6b:02:09:ca:90:7f:3a:fa:61:61:61:9e:
9e:38:75:95:b9:58:98:5b:df:e0:f4:ef:7d:94:af:ab:3a:bf:
16:0e:c2:30:ca:30:51:da:9d:d9:f6:0b:a0:22:f2:8e:3e:d9:
36:5e:b4:36:e2:42:25:49:34:31:ff:85:0a:48:d1:7f:d8:11:
76:63:1a:cd:48:68:e1:cb:9c:1e:c3:fa:f9:39:15:ab:fd:a4:
c7:b9:54:ee:a6:d5:f9:9f:51:2e:e5:b2:e6:a3:fa:fc:9f:74:
b4:6d:15:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org