Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/WwLctagFNwsRiGQZFAj-O__bHr8.roa
File: WwLctagFNwsRiGQZFAj-O__bHr8.roa (raw, json)
Hash identifier: cX6o5iPfXFAPqbfObD6Ttvo9aBuCvP6KdAsFdlyhOf8=
Subject key identifier: 5B:02:DC:B5:A8:05:37:0B:11:88:64:19:14:08:FE:3B:FF:DB:1E:BF
Certificate issuer: /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial: 7C
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/WwLctagFNwsRiGQZFAj-O__bHr8.roa
Signing time: Thu 13 Jan 2022 04:01:44 +0000
ROA not before: Thu 13 Jan 2022 04:01:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131618
IP address blocks: 103.170.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Validity
Not Before: Jan 13 04:01:44 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5B02DCB5A805370B118864191408FE3BFFDB1EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:bf:48:6c:b9:95:bd:44:d9:0b:67:6a:a5:
73:72:f9:9a:f0:62:f0:77:d0:8d:e5:05:22:7e:e5:
da:65:c2:89:d9:c3:4c:7a:69:59:e6:2c:9c:e1:00:
17:d5:c3:4a:3a:62:f4:6c:db:00:c7:91:a4:7d:8d:
12:af:df:05:f7:07:fd:a8:f1:aa:2c:37:13:15:6d:
35:8d:71:07:63:b2:ef:c2:96:eb:73:fc:b5:ec:23:
15:02:14:7e:ed:6b:41:b7:0e:e3:f9:41:76:5f:4d:
f4:b4:ce:d0:61:2e:43:d6:71:e8:23:7d:bf:74:1f:
f8:05:08:f7:70:c1:3e:f6:b5:fa:75:53:c6:9c:d9:
f9:b0:7a:0f:64:c5:93:32:a3:b9:3a:74:21:8d:3a:
f9:58:56:33:0f:0d:59:8a:f0:a8:ca:ae:b4:d3:57:
8f:df:af:84:00:c7:1e:a2:e3:8f:ae:e3:75:9d:7b:
02:36:40:8c:7d:a9:21:f2:73:9c:80:7d:44:8d:9a:
8c:d2:26:f5:87:d6:bf:b4:91:ae:2c:32:b9:f1:69:
b8:85:66:54:d6:c5:40:ad:84:a6:49:ca:bc:fd:29:
f8:71:08:07:64:45:fb:0e:ca:6f:f6:7d:47:c0:19:
d5:4c:06:e2:7e:c2:6f:6d:f2:72:e7:62:1e:2c:46:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:DC:B5:A8:05:37:0B:11:88:64:19:14:08:FE:3B:FF:DB:1E:BF
X509v3 Authority Key Identifier:
keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/WwLctagFNwsRiGQZFAj-O__bHr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:49:5e:ae:38:1a:9a:94:a9:16:e4:84:65:49:bc:fb:5d:08:
6c:a4:ba:50:7f:34:e5:6c:da:f6:95:88:22:9c:81:9a:90:5c:
5f:6b:cb:da:70:78:30:bf:49:e7:d6:ba:57:20:14:0e:3b:75:
91:0f:c5:f3:75:25:56:7a:f1:8f:dc:97:c4:83:f3:16:e1:1f:
42:40:6b:d2:01:ae:59:04:e3:45:30:b7:78:01:bf:46:d1:e5:
4a:7a:64:64:19:69:09:ea:1d:a2:42:dd:48:17:eb:65:6e:0c:
7a:f1:d6:2b:5e:3a:1f:08:b1:a3:21:cc:47:01:b1:dc:d6:70:
76:90:95:97:89:3f:f9:cd:53:6f:c9:d2:f2:3b:9e:7f:f2:01:
f4:44:f8:99:40:64:04:34:6e:01:71:de:91:87:c4:b1:a8:d9:
79:08:2d:60:2e:63:0c:93:13:12:e6:12:de:5a:e1:ac:55:eb:
89:91:03:b6:f1:14:14:c0:2a:7e:a6:43:2f:db:79:70:e2:fe:
4d:6d:6b:37:a6:63:75:60:98:db:83:bc:55:82:ac:5b:50:46:
4f:06:37:0b:5e:81:90:04:09:ec:11:a9:6a:48:9a:05:e5:55:
eb:10:e3:58:72:96:1c:73:fb:97:28:ba:05:db:a8:22:ff:94:
3c:b2:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org