Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/6wNvgActUH_1aoUTzI5iySRgIgs.roa
File: 6wNvgActUH_1aoUTzI5iySRgIgs.roa (raw, json)
Hash identifier: 20uqRgK1+T2xpToPpeT5kfPK/QI0jCjJkFFLRp6WDJ0=
Subject key identifier: EB:03:6F:80:07:2D:50:7F:F5:6A:85:13:CC:8E:62:C9:24:60:22:0B
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0D05
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/6wNvgActUH_1aoUTzI5iySRgIgs.roa
Signing time: Thu 15 Sep 2022 02:37:06 +0000
ROA not before: Thu 15 Sep 2022 02:37:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 103.136.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Sep 15 02:37:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EB036F80072D507FF56A8513CC8E62C92460220B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:44:7e:1a:49:d8:f3:0d:9e:29:34:7b:de:
e9:39:25:72:d7:8c:a7:fc:3f:61:47:5f:b6:61:76:
f1:da:00:c8:45:41:09:c7:43:a2:80:a7:25:99:23:
71:f5:06:80:a7:8d:7d:51:aa:14:43:0f:cd:7e:ae:
aa:70:65:c9:08:b3:29:73:bf:c3:6b:5a:d4:cf:9b:
78:24:9f:07:da:ea:33:9a:7e:95:00:1b:5b:d1:99:
47:45:a0:28:7a:e3:ac:79:83:6b:ff:07:cf:d5:25:
fa:2d:e7:b3:57:7e:5e:bc:58:ba:a0:86:45:53:72:
62:95:3d:15:97:b1:7c:5b:17:94:87:bd:c7:38:5f:
b2:94:ca:31:82:ba:28:0a:98:31:52:fd:e8:de:2c:
c9:6f:b1:15:9a:6d:2d:44:b3:25:97:d8:53:e5:49:
19:14:b7:e3:f3:1e:8c:05:47:26:88:84:02:08:b2:
31:37:c0:79:17:1b:f6:ef:71:c2:40:fb:83:78:c8:
26:3f:35:dc:8d:08:55:ca:49:7a:ae:f5:cb:8e:fa:
e3:cd:c5:4d:1b:c0:e7:a6:8d:f8:e1:52:dc:5f:3b:
36:a1:ad:5b:46:e1:c5:29:30:76:9c:2e:31:a4:27:
2c:84:ce:3e:f3:a7:b1:6e:17:c2:74:a2:ba:1b:b3:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:6F:80:07:2D:50:7F:F5:6A:85:13:CC:8E:62:C9:24:60:22:0B
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/6wNvgActUH_1aoUTzI5iySRgIgs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c9:2d:ab:6a:ea:45:60:af:74:f6:ab:1e:b3:2a:6b:15:ed:
e1:5c:05:c0:66:6d:2e:f8:58:e5:38:59:ea:63:c1:e8:d4:fe:
9e:10:ce:a5:58:38:fd:10:58:ea:bd:a5:e0:2c:5a:6c:6f:38:
98:7b:57:e4:54:9b:8d:3b:37:f1:59:6a:30:93:28:d3:a8:46:
2d:0d:95:ff:2c:65:85:ae:95:7d:4b:87:3d:36:8c:04:83:35:
ec:1b:0c:7b:52:16:03:a7:fb:c1:52:26:c2:e5:b3:40:12:c3:
d1:c4:4e:61:0f:05:d7:d7:cb:27:51:79:8a:23:e8:99:70:d2:
eb:55:7f:5b:75:ec:d0:5b:9b:1d:77:57:68:b2:f6:2b:35:60:
94:8f:51:54:21:9c:46:64:d7:be:4b:c7:df:bd:08:f5:ca:7f:
6c:00:01:58:bb:3c:31:43:07:b0:2d:58:de:33:e6:f4:e7:35:
ac:ff:1b:8a:e3:a1:f8:91:0e:42:1a:ff:5f:5d:64:89:36:73:
49:09:47:47:01:b6:ce:f8:ff:c5:95:b1:17:40:9e:d3:8b:54:
10:4a:17:88:21:85:f2:91:72:a4:68:92:33:5d:2e:9d:bc:99:
2f:ec:16:94:52:99:13:84:55:3c:9a:59:f0:70:75:75:77:24:
23:1a:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org