Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/SS37EKzPqYyu9I0j6Vo1Zq_RF9A.roa
File: SS37EKzPqYyu9I0j6Vo1Zq_RF9A.roa (raw, json)
Hash identifier: /KUATyLcQePRgJvMVsoOlelpXfg+4dFs0oEIYM5l2s8=
Subject key identifier: 49:2D:FB:10:AC:CF:A9:8C:AE:F4:8D:23:E9:5A:35:66:AF:D1:17:D0
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0D05
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/SS37EKzPqYyu9I0j6Vo1Zq_RF9A.roa
Signing time: Thu 15 Sep 2022 02:37:07 +0000
ROA not before: Thu 15 Sep 2022 02:37:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131641
IP address blocks: 103.136.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Sep 15 02:37:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=492DFB10ACCFA98CAEF48D23E95A3566AFD117D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:62:53:e6:0a:c5:3b:86:a7:cf:77:76:ee:
f8:3d:a8:fc:7d:48:f3:ad:ae:fe:9d:d0:b3:95:14:
a2:b8:40:e1:59:2a:ea:3e:b4:c9:28:be:c8:fe:80:
1b:70:d4:3a:52:7b:87:84:b7:a7:21:39:b8:3b:06:
b4:13:1d:7f:8f:5c:b4:d9:7a:d8:33:03:68:99:74:
48:cd:16:73:2f:ca:8d:dc:3f:2d:90:af:02:b8:da:
f8:17:fe:76:b0:63:ad:26:d7:f6:3f:08:b2:71:aa:
8f:65:e2:64:cc:2b:bd:64:85:5c:e5:43:fc:18:2b:
91:90:b3:53:ad:4e:9e:b8:ce:09:e9:27:2e:a0:0b:
53:e3:9e:35:68:37:8f:74:ab:68:4b:0f:3b:4f:d2:
c5:f1:b7:96:a3:fc:9f:a9:c3:06:1d:6c:f1:62:23:
ad:1e:d4:c4:ec:02:83:0c:ba:45:42:e4:1b:aa:ca:
91:52:ff:3f:51:2e:71:79:8f:86:cd:4a:da:b2:97:
81:50:82:c2:c8:5f:98:fc:41:6e:63:54:47:e7:f8:
1d:26:83:73:fe:5d:cf:df:89:b5:89:f6:94:e6:a3:
6c:3a:0f:a0:2d:b0:65:da:1c:ae:e3:07:96:8c:4c:
f8:98:6b:eb:f9:96:98:2e:66:70:a9:28:d0:c1:e0:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:FB:10:AC:CF:A9:8C:AE:F4:8D:23:E9:5A:35:66:AF:D1:17:D0
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/SS37EKzPqYyu9I0j6Vo1Zq_RF9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
12:96:7b:1b:9e:98:52:f2:2d:1a:86:8f:2c:79:6d:04:55:aa:
f5:63:b9:8e:0f:17:b4:9a:ec:3b:08:b6:05:16:9f:b9:7a:f1:
0a:54:ea:3e:59:93:d7:3b:14:94:e9:b0:17:43:3d:3f:63:43:
a0:40:02:84:dd:59:ea:61:d8:63:4d:b5:31:f8:26:00:91:7e:
25:36:d5:e7:bc:a0:c7:3c:c3:9b:87:54:2f:27:2f:78:6c:a4:
99:cb:d7:04:10:9b:d1:9f:af:e7:47:71:a0:60:49:b4:fe:95:
eb:a2:77:f1:e9:c9:93:75:c1:fd:63:89:78:57:43:5f:32:9b:
e1:71:a5:ef:3d:2b:94:4e:36:52:e8:74:5a:93:7e:73:10:2e:
6d:40:0c:d6:1d:71:f4:6e:ae:e5:a7:b9:15:04:1b:06:82:b2:
43:de:3c:9b:0a:3f:23:6f:ab:ea:27:4c:4a:15:be:fb:f3:52:
9c:f7:4a:d6:dc:4d:33:a5:5d:a7:4f:ae:a1:c8:8a:39:be:8e:
08:e8:85:11:32:63:3c:ce:9d:48:ad:ea:dd:d3:9d:8e:e9:72:
50:58:7f:69:01:78:f1:f7:04:5f:8f:9c:20:24:3c:3c:4b:dc:
bd:62:ca:e4:e2:57:5c:3c:bc:a0:d7:9c:24:b9:cf:da:54:15:
ad:ca:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org