Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/VEUwlugbbvU1iiU3kkgTfdNcMwI.roa
File: VEUwlugbbvU1iiU3kkgTfdNcMwI.roa (raw, json)
Hash identifier: HDUsICTyOrQ8lqJkghJgbDoAHfc2II6ZRs1Fpe0ztYc=
Subject key identifier: 54:45:30:96:E8:1B:6E:F5:35:8A:25:37:92:48:13:7D:D3:5C:33:02
Certificate issuer: /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial: 09DA
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/VEUwlugbbvU1iiU3kkgTfdNcMwI.roa
Signing time: Tue 29 Sep 2020 10:04:19 +0000
ROA not before: Tue 29 Sep 2020 10:04:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 103.137.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2522 (0x9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Validity
Not Before: Sep 29 10:04:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54453096E81B6EF5358A25379248137DD35C3302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:c5:f2:af:50:86:3c:97:2f:22:49:33:f9:
90:46:e1:61:63:42:4d:2f:02:ef:33:7a:c6:fa:22:
59:47:f1:f8:c3:13:75:09:b8:07:5a:7b:fe:2d:ca:
ff:20:98:54:f8:75:1f:b8:5a:20:a3:17:57:b7:ed:
43:7d:24:e6:a2:c2:e6:6a:de:c2:d3:f0:5d:1e:8e:
d7:ee:30:85:c0:8b:1d:cd:fc:03:a0:95:fe:5e:10:
0c:dc:94:26:ad:9f:dd:13:7a:df:a5:3d:c6:bb:97:
ef:c2:a1:40:b6:6d:c8:4b:3e:18:76:ec:99:b9:a0:
da:6e:c9:23:04:ad:85:de:77:93:43:e2:fb:37:cb:
e5:e0:83:04:47:41:0a:20:5b:02:f0:08:19:e4:03:
ea:34:df:63:03:31:52:92:db:78:20:5c:e7:01:f3:
30:c3:6f:7f:0e:12:e4:e5:e7:fb:82:99:36:c7:8e:
4f:26:86:ed:72:6f:27:ee:cc:ec:9f:43:69:92:8f:
e7:da:17:cb:0b:ea:ad:77:7f:98:75:45:7d:51:6c:
8d:6b:21:72:a9:17:9a:7c:7d:11:97:66:f0:28:18:
af:57:70:d9:6f:3b:56:2a:ae:ca:ee:92:bc:cf:23:
d1:24:10:95:d4:dd:52:f0:6d:09:02:14:ab:82:85:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:30:96:E8:1B:6E:F5:35:8A:25:37:92:48:13:7D:D3:5C:33:02
X509v3 Authority Key Identifier:
keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/VEUwlugbbvU1iiU3kkgTfdNcMwI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.22.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b7:e5:e4:34:99:a7:71:b8:b1:18:3a:4e:d4:5b:20:c8:0d:
6b:cb:10:fb:60:aa:a4:a9:72:9a:f5:08:ce:f5:ee:b6:75:9d:
dc:4d:12:f1:19:70:9a:39:a4:63:a4:ee:74:e9:02:09:72:86:
35:8a:57:4f:d2:11:bf:f2:7d:33:12:9f:0a:60:b3:0c:9f:3a:
52:94:39:73:65:15:ce:ea:5c:05:2a:37:f0:9c:1c:a9:f6:2a:
18:1e:48:db:2a:01:b5:3e:d8:6b:71:a0:7f:3b:32:4b:ed:45:
c6:31:3d:75:4c:82:d9:ca:d0:d4:30:5c:38:2c:ef:10:d1:2a:
7d:cb:72:c0:f4:9a:14:21:b8:d0:c5:12:9b:fd:b7:82:2c:66:
89:9c:72:6c:9b:0f:98:52:79:5a:0d:eb:c5:2c:8d:9b:66:2e:
a2:09:d7:c9:22:8f:fc:ea:e9:ce:61:e8:8b:60:0b:4a:32:57:
02:bf:79:1a:29:63:09:f7:7a:6c:98:8b:13:fb:4c:67:d3:ba:
70:85:db:5e:31:f5:a2:fe:2a:e0:d4:c2:cd:49:09:b6:f2:ee:
3e:f6:c2:7f:7f:82:c7:c5:fa:16:60:7b:4d:ac:2c:b4:d2:10:
40:a0:bf:4e:f6:32:e9:55:e7:d6:a3:90:cd:a6:72:02:c1:b0:
0d:a4:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org