Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/r8eEBOo14Y6LxSGiWTakE1zAGns.roa
File: r8eEBOo14Y6LxSGiWTakE1zAGns.roa (raw, json)
Hash identifier: 1xS7dACRVDYGdrcTa1D5vVVLrPdjEH/+0Hfw9EXT2po=
Subject key identifier: AF:C7:84:04:EA:35:E1:8E:8B:C5:21:A2:59:36:A4:13:5C:C0:1A:7B
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: ED
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/r8eEBOo14Y6LxSGiWTakE1zAGns.roa
Signing time: Sat 30 Oct 2021 17:07:49 +0000
ROA not before: Sat 30 Oct 2021 17:07:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38042
IP address blocks: 103.158.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Oct 30 17:07:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AFC78404EA35E18E8BC521A25936A4135CC01A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:d4:f6:c1:c8:e2:ca:09:dc:62:62:6c:51:
ec:05:e6:31:fd:f8:2d:2e:68:ed:2c:28:bc:18:df:
02:f9:9a:8c:9b:d6:af:36:77:29:6a:85:a6:fd:a4:
d6:f1:cf:76:ba:08:3d:84:fd:28:35:3a:11:f8:36:
78:59:20:2a:7a:f4:90:2d:cd:d3:ce:fc:71:25:2f:
48:0b:20:1a:30:31:e5:54:74:1e:67:60:83:94:24:
76:e1:be:6a:83:37:c0:dd:cc:1c:40:c7:f3:2e:c8:
dc:30:5a:9d:7a:d5:e4:16:dc:86:db:60:c5:be:0a:
60:13:b0:db:01:12:70:33:39:7a:bb:63:84:26:e6:
f7:e7:3a:fb:b4:5c:0c:5a:4b:80:a9:fb:b4:ab:31:
ac:5b:cc:94:58:6a:c3:1a:69:8e:4f:ce:be:dd:0f:
2d:37:a5:7d:d6:05:0d:30:e1:42:be:80:26:91:46:
ba:74:de:8b:f8:50:8b:2e:0d:70:7c:6e:09:ac:52:
e1:0d:8d:38:69:a4:2e:8c:7b:cd:11:a8:c8:2d:eb:
c3:18:e3:ed:2a:8e:52:b3:5c:9a:4b:77:90:a2:c3:
02:7b:8d:3c:9a:51:b9:dc:57:e4:13:ba:b6:93:12:
0d:29:64:0c:6f:10:15:91:04:c4:0b:92:57:ff:af:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:84:04:EA:35:E1:8E:8B:C5:21:A2:59:36:A4:13:5C:C0:1A:7B
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/r8eEBOo14Y6LxSGiWTakE1zAGns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.228.0/23
Signature Algorithm: sha256WithRSAEncryption
58:73:06:3c:63:56:ce:b8:86:d8:7d:46:0e:3b:c4:d6:a2:d4:
c0:18:2e:a9:cd:dd:d8:63:da:98:45:ee:6a:c4:97:3e:46:cd:
4d:01:19:b1:1c:e5:4b:19:9b:38:8a:a9:bb:03:d6:46:6f:7a:
59:56:75:18:3d:06:df:6a:0e:71:b8:23:37:7c:8c:dc:89:36:
9d:41:7a:d9:7b:6f:11:b2:97:c5:ba:2a:7d:7d:c2:d9:3e:96:
57:33:a5:34:4d:c5:f7:2f:df:9a:9f:be:8e:4b:50:2a:c2:de:
46:f6:5c:61:4b:dc:c4:1c:f2:44:89:38:f3:81:47:af:d6:8c:
ef:ea:9e:46:f9:83:70:ca:df:8e:05:c2:dc:93:cb:b3:7f:34:
0a:6d:ab:23:8b:b8:4e:59:15:c7:1f:e2:2b:5c:b6:c4:43:87:
89:ef:41:d6:ea:e6:d6:7d:0f:3e:70:3e:c5:6c:79:f0:85:c6:
8d:e3:02:8c:9d:61:3d:53:22:dd:c4:3b:ab:75:d5:d3:06:72:
2b:cd:74:52:4b:93:d8:72:61:d9:79:46:7e:d1:a9:7a:b7:9d:
18:3c:65:f8:af:38:9c:32:55:7d:dd:ee:f7:7b:4d:a8:18:fa:
7b:58:e9:6c:55:d1:85:ce:7f:43:6d:6f:01:cf:84:a2:d6:f2:
33:9b:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org