Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/Mvvwed0vsLFCB6PT5N0asidXyMw.roa
File: Mvvwed0vsLFCB6PT5N0asidXyMw.roa (raw, json)
Hash identifier: GaYpohj+9gMZQ+llLSFbaMHx2d0IZCFm6otQWywYjek=
Subject key identifier: 32:FB:F0:79:DD:2F:B0:B1:42:07:A3:D3:E4:DD:1A:B2:27:57:C8:CC
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0D05
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Mvvwed0vsLFCB6PT5N0asidXyMw.roa
Signing time: Thu 15 Sep 2022 02:37:09 +0000
ROA not before: Thu 15 Sep 2022 02:37:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 103.136.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Sep 15 02:37:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=32FBF079DD2FB0B14207A3D3E4DD1AB22757C8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:fc:9f:a2:06:a3:77:b0:0a:1a:0c:ed:85:
ca:ff:9f:81:c3:ba:a0:39:ef:6c:34:b1:24:11:1d:
2d:02:56:d6:22:20:3c:02:87:62:c6:c4:74:33:70:
9b:57:bd:a3:3d:2d:ae:02:bc:b2:15:04:f5:15:3d:
ca:47:38:25:17:fe:d8:0b:31:84:21:fb:d6:a9:de:
fc:57:49:fc:0d:01:ae:a0:ea:88:b5:e2:10:d0:d2:
b8:90:5d:64:25:2d:a0:2c:5c:8a:af:f6:f9:a2:00:
5c:32:03:29:e5:6a:8b:af:7f:85:26:a5:0a:a1:b8:
14:8a:e5:3f:70:eb:d0:aa:d9:54:96:42:0c:ae:47:
b1:a7:32:c8:36:74:58:a4:70:e7:f5:24:a7:08:91:
e3:09:62:74:1b:37:75:58:13:13:88:87:67:d9:ee:
32:6b:b9:df:12:3c:5d:0a:20:47:39:e2:c2:97:d8:
d5:40:8b:ed:da:c0:d7:1d:93:a2:c3:b4:71:68:61:
90:83:86:d6:e8:71:2b:ff:9d:3d:45:72:90:1b:de:
8a:4b:10:d6:ac:6a:01:37:09:7a:b8:67:0f:24:c3:
25:59:60:ee:ce:dc:da:98:04:bb:9a:c9:31:d9:5e:
bc:40:1d:05:d9:de:d8:1d:c0:09:0a:c1:9a:43:01:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FB:F0:79:DD:2F:B0:B1:42:07:A3:D3:E4:DD:1A:B2:27:57:C8:CC
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Mvvwed0vsLFCB6PT5N0asidXyMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
24:87:99:4d:c9:f4:45:1d:8b:af:0e:e4:86:7e:9c:b9:1f:5b:
37:d0:c1:0c:31:35:5b:d3:8b:23:f8:aa:f9:dd:48:3f:28:b7:
91:e2:21:d4:f5:9a:2c:ae:28:82:6b:2c:5b:61:d3:74:c4:9c:
0c:bb:6c:12:b3:a9:4c:7f:f2:e7:72:30:41:e9:fd:e3:a8:ec:
33:54:1c:e0:a2:9b:39:26:e2:67:1e:e1:ff:ec:80:15:09:5c:
9f:67:7c:93:ba:ea:53:81:30:83:03:47:9d:a5:1c:32:8b:8e:
6d:0c:95:d1:98:c2:08:2e:1b:4b:b0:c5:50:e4:09:fd:47:12:
3d:ea:1b:e9:db:b5:55:51:c5:9e:5e:80:70:5a:63:32:67:88:
5e:59:06:27:d7:2e:05:4e:12:93:e2:33:12:91:ab:92:70:62:
b6:d0:85:d8:de:d9:27:76:a6:7d:8a:cc:2c:1e:5d:59:d2:9d:
f0:77:10:ad:ea:eb:a1:28:6e:f7:53:e2:f1:4b:39:82:32:40:
60:2e:65:5e:27:29:73:0c:64:27:af:56:76:50:a9:58:cf:27:
34:23:38:6b:36:71:db:fd:bb:70:f5:b8:37:3d:c8:ae:09:ea:
99:13:28:44:81:23:61:e1:a8:26:10:18:f0:2b:df:53:5c:6b:
ab:df:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org