Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/irbEuO2Tvgok1OklgyEpWTf3aw4.roa
File: irbEuO2Tvgok1OklgyEpWTf3aw4.roa (raw, json)
Hash identifier: q4a5HtVmB6mRb+FZauz35SjM/2t48yjKtsHubMUnMeY=
Subject key identifier: 8A:B6:C4:B8:ED:93:BE:0A:24:D4:E9:25:83:21:29:59:37:F7:6B:0E
Certificate issuer: /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial: F8
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/irbEuO2Tvgok1OklgyEpWTf3aw4.roa
Signing time: Thu 15 Jun 2023 03:09:19 +0000
ROA not before: Thu 15 Jun 2023 03:09:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 56850
IP address blocks: 103.160.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Validity
Not Before: Jun 15 03:09:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8AB6C4B8ED93BE0A24D4E9258321295937F76B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:b1:00:2d:78:ec:4c:2b:f4:39:4c:c8:15:
92:31:af:01:72:3b:95:b1:f8:7f:71:d1:e8:a4:c7:
10:87:33:ce:95:b3:7d:71:74:7a:19:38:01:46:ee:
9f:33:83:12:7d:a5:00:92:27:4c:68:8e:b6:f6:f2:
3c:cd:e2:17:f4:c8:d4:5a:cd:ab:35:89:fa:79:1b:
aa:83:d7:64:a1:08:c6:89:0f:6e:bb:c0:f7:46:70:
6e:96:f6:18:a2:4f:cd:f1:b4:d8:b0:fb:68:b1:d5:
e4:14:5f:89:e0:06:d0:18:d8:c9:f7:70:e7:6c:b5:
7d:71:b9:02:ef:bb:45:61:fb:68:e6:33:24:c0:bb:
0d:f2:b7:25:de:91:82:9e:73:53:ce:f5:a1:59:a2:
69:4a:e9:11:8e:97:c8:20:2f:5d:c9:ef:c9:44:ef:
6f:89:48:6d:5f:02:d2:8a:4c:d7:aa:51:9f:e8:1a:
fa:4f:f0:a6:44:06:c2:21:a2:9f:2a:8a:3d:3d:68:
af:04:c1:db:31:ba:43:f6:a4:65:76:05:e3:70:65:
74:55:e1:02:98:ce:71:17:02:6d:8d:14:72:97:3b:
ae:27:a7:0b:ce:4a:5a:02:69:4a:32:40:e1:81:9a:
1f:fa:30:b6:4f:1b:66:76:3e:d3:82:7a:8a:b3:7a:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:C4:B8:ED:93:BE:0A:24:D4:E9:25:83:21:29:59:37:F7:6B:0E
X509v3 Authority Key Identifier:
keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/irbEuO2Tvgok1OklgyEpWTf3aw4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.180.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:1a:c9:ac:ae:a6:08:a9:29:2c:1f:3d:12:3a:72:da:2b:ed:
18:9a:30:d1:98:4b:7a:0e:6b:7a:0a:60:0b:63:d0:da:af:b3:
28:ec:cc:70:31:be:72:82:7c:5f:7a:d2:84:d5:12:4f:59:6f:
c6:ba:57:21:06:81:ed:d0:e5:44:8f:69:96:01:09:33:8e:a4:
e5:04:de:9a:1f:46:43:c1:61:94:43:d8:4f:19:a4:d5:83:6d:
67:77:c8:99:f7:b8:7b:78:7b:11:8c:82:45:65:93:98:78:d3:
68:b3:c4:1d:c8:7f:f9:4e:e6:45:5f:fc:05:57:21:b4:32:a2:
8f:c6:63:db:d1:c4:1e:07:09:42:26:ba:2c:80:ef:0b:63:b8:
46:f4:eb:e6:24:7e:67:0d:f3:57:4c:a0:3a:f6:f6:74:69:aa:
12:a0:dc:4c:60:f1:70:d0:dc:fc:ce:1f:41:79:6c:88:b7:28:
5b:92:f0:2f:05:55:d2:50:08:ca:ec:1f:59:00:74:95:25:76:
06:1e:b1:3e:91:a0:a2:b7:2d:08:9d:fd:cc:11:95:de:ad:ff:
31:dd:47:39:65:18:30:3f:96:73:02:f1:55:96:0a:e3:32:97:
ab:d3:66:24:1b:cb:b9:b6:65:e0:15:e3:f9:5d:1f:75:ca:85:
97:70:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org