Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EHHKY/L80FNoVtTZwQ2pYJImiLYnc0_H8.roa
File: L80FNoVtTZwQ2pYJImiLYnc0_H8.roa (raw, json)
Hash identifier: Zvk1s668zN5JOciD0q4VlxSUIXxWbp9UA/eGujf+mKA=
Subject key identifier: 2F:CD:05:36:85:6D:4D:9C:10:DA:96:09:22:68:8B:62:77:34:FC:7F
Certificate issuer: /CN=8302DE193598EDC36222D929FAD6678367D62E21
Certificate serial: 0F6E
Authority key identifier: 83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/L80FNoVtTZwQ2pYJImiLYnc0_H8.roa
Signing time: Wed 29 Sep 2021 02:52:14 +0000
ROA not before: Wed 29 Sep 2021 02:52:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131607
IP address blocks: 103.130.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3950 (0xf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8302DE193598EDC36222D929FAD6678367D62E21
Validity
Not Before: Sep 29 02:52:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2FCD0536856D4D9C10DA960922688B627734FC7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:14:01:02:10:d6:91:21:57:cb:ea:68:d7:
b5:a3:6a:7f:c3:65:32:1d:af:96:79:9f:8c:18:67:
dc:98:38:34:cc:e2:65:2e:19:e7:b8:08:e8:f8:3c:
e9:fb:75:7d:4b:f7:9d:85:0b:79:ae:16:a1:ec:98:
a8:f1:ee:1e:17:79:ab:26:77:b3:1a:da:9f:69:97:
ae:d2:42:02:1a:cf:57:01:d6:4a:4b:6b:19:b0:18:
64:6e:81:ba:e3:cd:98:a0:3e:61:50:d1:e8:b8:b7:
67:cd:3c:4d:64:3b:4c:e3:e1:02:2f:f5:5e:f2:96:
91:ef:90:32:64:ce:b9:4b:c4:02:e1:74:b3:d0:9b:
38:24:48:a8:cf:35:9d:8e:80:78:7a:77:2f:75:07:
62:7e:b1:0b:88:0e:3e:6d:a9:d5:68:1f:03:b1:51:
d9:cc:86:c2:4c:28:5e:ee:13:6f:13:cc:2d:dd:a5:
bf:fc:19:91:79:63:ec:57:d9:53:5b:22:24:46:4d:
c4:4e:75:e9:55:a2:52:92:e4:5d:9c:62:33:0e:ea:
32:27:07:9c:0f:90:d2:0b:a3:55:ae:c6:4e:4d:7d:
df:37:dd:4a:53:a8:ce:b5:9d:3d:a9:bb:1c:72:59:
99:8d:46:f3:71:ab:d7:bf:83:c2:b0:f4:7b:51:52:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CD:05:36:85:6D:4D:9C:10:DA:96:09:22:68:8B:62:77:34:FC:7F
X509v3 Authority Key Identifier:
keyid:83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/L80FNoVtTZwQ2pYJImiLYnc0_H8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.84.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ed:b9:1f:79:ac:90:c5:bf:b2:2d:cb:50:db:4c:ce:bb:5c:
73:3f:44:d3:ea:3f:01:31:85:fe:67:b2:7d:91:85:a4:4e:5e:
45:44:60:40:ac:c5:64:44:af:e7:7c:53:c8:d8:29:c9:ff:f7:
88:7a:58:dc:42:7b:36:d5:22:35:fb:7d:9b:29:58:8d:84:79:
03:85:65:f9:d3:13:4e:8d:89:78:18:6b:5b:c5:92:9a:40:06:
ea:b1:4c:51:be:ec:9b:29:07:71:41:16:9c:fe:75:4b:ec:ca:
dc:1e:e6:d8:35:98:cd:4f:4a:dc:f7:fb:1b:39:51:d9:80:ce:
8e:ed:c0:63:b4:ba:36:9d:e4:eb:15:09:ef:8d:13:98:00:d8:
65:94:cf:f4:ec:bc:5c:2c:43:4a:e8:7d:37:aa:50:7b:10:bd:
79:06:4d:63:f6:8c:de:95:b6:84:63:f3:dd:f7:c2:ce:fd:5f:
f5:99:7c:64:83:51:aa:ae:10:38:fa:32:45:36:b9:04:57:12:
37:e9:b5:29:2a:4e:04:f2:92:01:01:47:36:8b:8c:fb:33:b0:
0d:41:ff:92:01:8f:88:71:b2:9c:71:4e:39:76:21:33:f4:8d:
1c:05:bd:f6:52:65:38:f7:0c:dc:f8:27:2c:de:98:61:84:d9:
27:57:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org