Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/wbMIy_SHE2nk4MvYaT3BhfhtqEg.roa
File: wbMIy_SHE2nk4MvYaT3BhfhtqEg.roa (raw, json)
Hash identifier: wtIbq21Ib1m8ul5bi3PPhv1HUxYlw4Ac05Lsps3Mecc=
Subject key identifier: C1:B3:08:CB:F4:87:13:69:E4:E0:CB:D8:69:3D:C1:85:F8:6D:A8:48
Certificate issuer: /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Certificate serial: 17
Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/wbMIy_SHE2nk4MvYaT3BhfhtqEg.roa
Signing time: Tue 22 Mar 2022 00:12:38 +0000
ROA not before: Tue 22 Mar 2022 00:12:38 +0000
ROA not after: Tue 21 Feb 2023 08:34:15 +0000
asID: 63893
IP address blocks: 103.180.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Validity
Not Before: Mar 22 00:12:38 2022 GMT
Not After : Feb 21 08:34:15 2023 GMT
Subject: CN=C1B308CBF4871369E4E0CBD8693DC185F86DA848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6a:1f:77:25:e1:44:2d:9c:d9:be:6c:54:77:
66:2e:0f:40:ec:9c:90:4d:46:41:bb:ba:32:ed:f7:
c9:0a:12:88:a2:2b:a9:90:4f:77:a5:b4:0b:1d:fc:
86:39:9e:f0:1d:c3:6d:f8:6a:91:61:44:58:df:2c:
a2:bb:9f:93:60:58:61:25:de:2a:d8:17:26:db:d7:
91:2c:eb:03:73:35:75:36:76:b1:13:2c:a7:3d:19:
f2:63:26:3c:a1:27:73:93:f3:b8:0a:e5:1e:b2:4b:
92:cc:ff:de:0f:a0:a8:90:ad:5f:c1:26:08:e6:74:
6b:3b:a0:2a:db:6d:39:73:0f:6b:6e:37:9e:63:48:
73:d3:25:d3:19:5e:77:df:81:7c:ae:13:4c:72:3c:
09:65:dd:0c:c0:4b:96:26:cb:09:8c:05:c6:b7:c8:
14:ba:08:c2:76:71:b0:24:a4:3a:92:2a:53:0a:37:
6a:a4:35:66:ad:0f:2a:82:cd:29:ea:6c:f2:06:f0:
5b:97:e2:2a:cc:d3:79:d7:06:b9:ea:f5:ad:eb:d0:
ec:2f:42:73:1a:53:13:6f:b7:5c:34:ab:93:d0:25:
33:f1:dd:a3:04:a2:c3:82:36:c6:31:4b:0f:ff:59:
a9:52:b5:ab:53:9c:ad:1a:31:31:75:58:fd:b9:de:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:08:CB:F4:87:13:69:E4:E0:CB:D8:69:3D:C1:85:F8:6D:A8:48
X509v3 Authority Key Identifier:
keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/wbMIy_SHE2nk4MvYaT3BhfhtqEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:d6:7c:14:a7:92:8e:33:9f:1d:42:41:d5:23:35:c0:02:46:
6e:e5:de:1f:a0:a0:70:31:1d:5c:28:49:02:6e:94:34:77:cc:
64:26:68:d5:ea:2d:7f:f1:da:f9:a1:a6:af:8d:ff:ff:5b:aa:
60:24:8f:9d:f4:74:99:c6:c1:04:98:39:80:60:b2:0d:c2:48:
e9:b2:6b:ba:d7:a7:78:70:64:9c:c8:74:11:d4:0c:2a:4b:6a:
30:82:e9:ea:03:55:1c:cb:a5:38:e0:bd:6d:de:9b:24:71:8c:
9a:de:bd:fc:3e:87:78:fe:1b:19:08:e2:e8:f2:5f:56:e9:c9:
49:3e:49:07:d7:97:a4:0e:9d:c6:15:75:44:23:74:79:5e:4c:
60:91:ce:91:c0:4d:f8:87:32:b9:1d:bd:5a:ab:1c:71:34:78:
fa:a5:91:9a:49:26:4c:f3:fd:0c:45:a0:f5:45:4e:d5:1e:87:
40:2b:14:b3:43:83:06:e0:2a:85:49:de:71:af:64:7b:d1:7d:
fa:61:ad:a6:0c:7a:ea:fe:c9:dd:dd:d7:7e:c3:37:82:3c:52:
1b:fd:b8:81:00:f0:62:26:34:a0:ac:c8:54:5c:25:46:8f:29:
53:23:dd:49:82:e3:e0:b3:5d:2b:ea:ff:46:4c:cf:33:31:5d:
d2:33:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org