Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Vc6D3k1bY-sFX7slZ9e98jO1J_E.roa
File: Vc6D3k1bY-sFX7slZ9e98jO1J_E.roa (raw, json)
Hash identifier: 91LCV+xRFl25387p6Xv7zIGy5ji1c7MJ/bW9XUS3cus=
Subject key identifier: 55:CE:83:DE:4D:5B:63:EB:05:5F:BB:25:67:D7:BD:F2:33:B5:27:F1
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Vc6D3k1bY-sFX7slZ9e98jO1J_E.roa
Signing time: Thu 15 Sep 2022 02:34:58 +0000
ROA not before: Thu 15 Sep 2022 02:34:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 103.153.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55CE83DE4D5B63EB055FBB2567D7BDF233B527F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:58:fc:81:54:a2:0d:7b:cb:03:5a:07:3a:
2d:f6:16:b2:c1:8f:46:73:4d:fe:5f:bc:0f:6c:5a:
a4:af:96:8d:91:a5:0c:91:08:6f:4a:9f:36:c9:47:
ce:94:02:5f:84:32:3f:60:05:de:ec:35:37:01:6c:
f4:e5:50:c0:f7:2a:de:d2:da:4e:30:0f:f1:ba:be:
c3:f4:c7:a2:ca:a0:2a:d9:ff:e0:2c:35:ae:45:7f:
e8:1a:8e:fe:a8:ba:b6:fc:7d:81:0f:c7:25:f4:b9:
0c:e7:1e:33:0f:fd:5e:e1:cf:9d:3d:78:ad:e6:09:
c5:ac:35:2b:41:fc:fa:f5:14:d7:33:cd:9d:3a:6e:
7c:ed:10:7e:a7:61:9a:db:92:f2:77:9f:68:ff:6a:
c8:56:9e:9e:31:33:7c:43:fc:19:8d:ae:9a:35:a3:
25:12:3e:69:4a:c7:63:13:a8:fa:0a:62:07:6a:da:
25:8a:dc:cb:73:f0:eb:a8:bc:76:52:76:5f:6b:bd:
83:de:d2:8e:82:78:3a:66:30:54:45:81:f1:bb:69:
51:f3:19:e6:72:f4:d8:59:7f:e6:e3:62:e7:11:d7:
70:43:74:c3:b5:f8:32:dc:99:b0:b1:38:9b:b5:0f:
34:f8:fd:35:83:7e:43:5c:39:c9:ad:63:23:6b:b0:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:83:DE:4D:5B:63:EB:05:5F:BB:25:67:D7:BD:F2:33:B5:27:F1
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Vc6D3k1bY-sFX7slZ9e98jO1J_E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/23
Signature Algorithm: sha256WithRSAEncryption
73:7c:a2:29:b3:69:2c:37:0d:57:85:2b:5f:91:3f:0a:5e:08:
e5:80:84:90:42:86:12:8d:22:86:64:a1:8b:ac:03:80:6c:19:
79:99:2d:3f:d7:a1:9a:35:b7:45:fc:07:f8:5b:e8:90:f5:7a:
82:a6:4e:d8:98:6e:79:30:64:34:0a:fa:a4:d0:29:64:cf:6d:
0d:93:c3:b3:f1:60:c9:d4:84:88:16:c6:d1:d3:f2:17:ec:3f:
84:d7:72:0c:59:43:e1:55:11:27:01:04:44:6c:74:f5:f8:ea:
5d:ea:90:76:9c:9f:c6:45:e6:05:97:e3:0d:86:0c:92:a0:00:
82:a3:dd:4c:d8:4e:98:92:39:35:82:d9:f1:1c:7d:4b:2d:a8:
84:34:00:c5:7c:1a:1d:f8:64:1c:eb:4b:bd:54:23:0a:c3:2a:
9e:c1:a8:6e:5c:d9:13:08:32:a6:6a:a1:79:0c:0a:9f:a9:93:
75:ae:b8:a5:fc:2e:37:e4:7d:61:88:15:d9:e1:42:a2:7a:35:
65:06:1d:e5:80:f3:0d:f6:a6:c2:c0:da:37:94:0b:09:51:94:
1b:b2:72:a6:88:67:30:a0:66:1d:96:55:8d:85:89:3a:f7:b6:
a0:9b:ad:e4:fb:bc:ba:96:27:50:d8:9e:19:45:f2:bb:e5:29:
3c:4b:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org