Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/HSNkk5XM4Dz_Ll1g8mZEeZchwMs.roa
File: HSNkk5XM4Dz_Ll1g8mZEeZchwMs.roa (raw, json)
Hash identifier: I7XdImMUkhL4hwvGcEaSERaGF31O6j5aaxYFMao+UaA=
Subject key identifier: 1D:23:64:93:95:CC:E0:3C:FF:2E:5D:60:F2:66:44:79:97:21:C0:CB
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: 02B7
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/HSNkk5XM4Dz_Ll1g8mZEeZchwMs.roa
Signing time: Fri 01 Sep 2023 08:50:10 +0000
ROA not before: Fri 01 Sep 2023 08:50:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.158.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Sep 1 08:50:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1D23649395CCE03CFF2E5D60F26644799721C0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:6d:bc:a0:05:ad:29:10:a4:83:65:99:b6:
d3:48:fd:62:cf:b5:55:9e:16:e1:dd:a9:fc:71:9b:
a3:53:a7:08:1f:f3:cd:2e:bc:80:5c:97:f5:37:b0:
06:0d:67:45:5d:95:01:31:95:51:1c:b2:90:9b:37:
d4:2c:08:43:61:aa:92:8f:68:9f:5c:11:cb:dc:ee:
34:41:90:07:26:9a:90:38:f0:fc:cc:49:68:7f:dd:
f2:77:81:c2:11:29:cd:9f:ef:47:4b:e9:35:2d:8a:
6a:79:14:8c:25:51:12:27:7c:d5:e6:30:ec:93:e0:
c7:1a:11:d1:2c:74:81:40:b0:7e:8a:47:37:62:c5:
24:56:bd:a9:34:56:1b:f6:af:6d:c1:c2:98:92:c6:
26:4a:48:c3:2c:39:d6:9f:4c:56:a0:08:d0:cc:0e:
68:d7:61:bb:a3:e4:8d:9e:63:da:a1:23:91:8a:61:
9e:88:8e:03:e8:f2:f2:bf:a8:4b:a8:96:e5:15:c9:
3a:c4:62:74:22:a0:ad:60:20:35:fa:05:7f:1e:31:
72:12:27:b8:89:a0:27:68:fa:58:c9:c5:1d:67:3e:
0b:5f:8c:3e:ba:a0:1b:01:5a:93:f3:57:7a:9c:92:
7b:8c:25:83:ec:b2:85:a7:41:6e:46:de:51:03:4a:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:64:93:95:CC:E0:3C:FF:2E:5D:60:F2:66:44:79:97:21:C0:CB
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/HSNkk5XM4Dz_Ll1g8mZEeZchwMs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:a5:1d:77:19:70:7e:d9:24:85:1f:0a:97:95:36:2b:60:48:
63:22:0a:c5:f8:89:0d:99:1a:b8:1f:e1:6f:30:61:84:da:79:
e7:30:87:a8:00:a1:5a:4d:93:3a:f7:30:59:48:f3:dc:31:69:
72:c7:88:35:2b:59:e3:4a:47:c5:09:81:7e:02:e3:3b:57:0c:
eb:fd:6f:03:06:59:8f:65:63:5e:36:31:5f:f1:ef:90:4e:d9:
a0:d7:c2:11:3d:55:01:bd:33:4b:b6:85:f3:e9:7b:57:1a:8e:
41:87:e6:8b:c7:d4:24:3a:61:a5:91:e8:a9:02:34:f6:70:28:
d9:04:03:fb:46:aa:a0:90:bb:59:30:46:6e:b6:3c:5c:ad:74:
05:6e:a3:fc:79:e7:df:d6:06:64:48:a5:47:e9:03:99:81:f5:
f1:cc:cd:46:b6:e7:a0:8b:5a:56:42:ce:49:21:2c:17:4c:52:
79:c7:51:5f:36:86:eb:e5:48:6f:3b:5a:3d:c6:41:bd:16:01:
c3:5d:34:3c:39:54:a5:57:4d:3e:cb:3e:86:30:33:94:33:a0:
1c:c1:8e:66:59:1a:80:ac:79:f1:55:ca:4e:30:a8:80:06:f2:
01:57:4d:3b:7b:27:0d:7f:8f:78:d8:23:3b:18:ad:e2:0d:ab:
fe:d6:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:48 2025 by rpki-client