Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/yEfoBWmFd8s5cks0jX6xP8IdInY.roa
File: yEfoBWmFd8s5cks0jX6xP8IdInY.roa (raw, json)
Hash identifier: vAZCc0PM7oyc2IWUvEGvXjrqeJTU7gx41GsDaq1Tlxc=
Subject key identifier: C8:47:E8:05:69:85:77:CB:39:72:4B:34:8D:7E:B1:3F:C2:1D:22:76
Certificate issuer: /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial: 0DBD
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/yEfoBWmFd8s5cks0jX6xP8IdInY.roa
Signing time: Sun 07 Feb 2021 12:43:19 +0000
ROA not before: Sun 07 Feb 2021 12:43:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.126.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
Validity
Not Before: Feb 7 12:43:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C847E805698577CB39724B348D7EB13FC21D2276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:b1:59:b8:32:c3:ef:9e:c9:50:6a:74:4a:
9e:c4:13:24:d1:5c:17:0e:1c:af:a4:cb:ed:6f:0f:
ce:75:61:ca:15:80:da:57:f1:48:43:be:a3:9f:dc:
34:b0:ca:24:3b:1c:c7:ee:a7:6b:7b:60:31:02:f8:
7c:78:c6:e7:58:bb:cb:37:cc:7e:b2:c7:79:a7:77:
e4:c2:df:d8:91:97:aa:3f:95:e8:77:08:52:76:8e:
78:7b:69:76:39:b3:7f:e8:38:b5:5f:3e:dc:a7:17:
95:65:7f:b9:b9:44:63:33:ac:25:e3:19:49:f4:41:
00:b2:08:f0:a3:d2:2f:40:e2:55:03:d6:89:d2:5e:
33:b3:cf:64:c8:a0:5f:15:51:3b:7f:42:03:af:5e:
ea:38:ad:78:75:ea:59:25:ae:b5:bb:49:d6:d1:7b:
a3:25:2a:b6:85:9f:44:42:1c:04:15:6c:1f:77:a3:
df:53:c9:46:bd:a6:25:1c:45:c0:cd:f3:46:76:1c:
48:bc:b4:64:f3:4e:83:68:e4:82:cc:e3:9a:63:28:
44:50:bf:4d:52:2c:11:21:c6:4b:b3:e3:51:04:5f:
86:43:06:42:59:c8:cb:d9:9f:18:a9:63:9f:37:e8:
82:0f:71:db:35:df:e7:c2:18:77:a2:85:57:a5:e3:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:E8:05:69:85:77:CB:39:72:4B:34:8D:7E:B1:3F:C2:1D:22:76
X509v3 Authority Key Identifier:
keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/yEfoBWmFd8s5cks0jX6xP8IdInY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:30:2a:07:09:6f:01:18:86:6d:0d:ca:2c:ee:61:72:a1:34:
97:21:3c:b1:31:bc:2f:8b:ff:10:3c:65:8a:26:e1:6b:64:8b:
45:3b:78:6b:72:49:0f:60:b4:18:b1:88:eb:79:77:69:e6:4e:
59:d5:59:49:a2:c5:21:7f:62:c6:c5:c4:cd:08:ce:6f:55:12:
b8:6a:78:af:a1:0b:ea:44:a5:7f:ee:a6:22:e2:df:ff:19:97:
b8:7a:76:5f:42:06:49:c5:bd:d8:21:ab:11:3e:bb:a3:8f:d3:
c7:08:99:53:dd:38:0c:00:92:a3:12:23:b3:c6:ff:d5:ff:fa:
20:3c:35:0a:fb:1c:a5:c5:51:ee:ab:ae:95:2c:d7:40:4c:fe:
f3:ee:cd:cf:84:b3:82:e4:be:29:ce:15:33:8f:d8:75:ad:cf:
3d:16:bd:0b:cc:a8:70:d2:86:ce:b7:f1:d7:e4:f4:f1:35:15:
b6:a9:f5:52:b4:e3:65:36:34:ab:63:ef:f2:e7:ae:7a:3f:b4:
4b:25:13:23:67:be:d6:8d:eb:cf:33:47:78:0a:99:e6:7f:1c:
4a:8e:ce:d9:d8:94:2c:19:03:83:a0:a9:d3:54:73:2c:4f:bb:
5f:a3:b2:07:cb:c4:2c:60:0e:1c:97:d2:33:6c:5e:d6:25:9b:
9f:b1:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org