Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KSTV/eG5Up5AsVXjSOFDW0gD31qfjFKs.roa
File: eG5Up5AsVXjSOFDW0gD31qfjFKs.roa (raw, json)
Hash identifier: zbOqD1h2uzKR7jYRXqmEhN+/A4MppYHtxZ20+2M8YFo=
Subject key identifier: 78:6E:54:A7:90:2C:55:78:D2:38:50:D6:D2:00:F7:D6:A7:E3:14:AB
Certificate issuer: /CN=9EEBB531831504906C0086DB42969683D64BBAC8
Certificate serial: 102A
Authority key identifier: 9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/eG5Up5AsVXjSOFDW0gD31qfjFKs.roa
Signing time: Wed 29 Sep 2021 02:55:57 +0000
ROA not before: Wed 29 Sep 2021 02:55:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 103.130.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4138 (0x102a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EEBB531831504906C0086DB42969683D64BBAC8
Validity
Not Before: Sep 29 02:55:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=786E54A7902C5578D23850D6D200F7D6A7E314AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:95:76:ff:25:0e:7e:30:8d:e1:d2:63:48:
27:e1:dc:28:71:be:bb:83:71:97:a5:24:30:8f:4c:
99:fe:73:c8:90:d5:d5:70:25:59:86:0d:85:f9:28:
89:38:65:56:94:03:3a:d8:97:58:c0:7a:de:84:20:
e1:e3:c8:66:f8:d2:e8:4a:11:3c:f1:06:a1:d4:cb:
fe:46:29:5b:6a:6a:7b:13:ba:02:5a:7d:3e:98:3a:
72:30:7a:9e:e8:de:4d:12:ca:76:74:e5:55:80:be:
38:6b:e1:98:35:22:75:15:2c:3f:45:b8:e7:4a:41:
93:65:66:46:28:aa:13:58:20:7b:f5:8c:42:17:e0:
83:7f:c7:f6:87:b8:39:c1:99:6d:ed:96:23:cd:80:
4c:e5:41:68:2a:40:28:9a:af:05:96:1f:c5:e7:a6:
76:0a:01:3c:92:12:0a:5f:9f:55:25:69:3b:bf:ca:
ea:6c:83:b2:bb:79:0c:c4:ea:0b:4c:eb:e0:eb:03:
21:2f:6f:5f:78:42:9a:6b:53:38:59:30:26:45:70:
95:35:57:9a:45:36:92:06:5d:3c:0f:36:b6:80:41:
f4:29:b9:5b:90:b2:02:37:80:1a:4c:05:00:6a:c0:
f9:40:33:35:b4:13:04:1d:88:99:eb:fd:3d:3b:af:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:54:A7:90:2C:55:78:D2:38:50:D6:D2:00:F7:D6:A7:E3:14:AB
X509v3 Authority Key Identifier:
keyid:9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/eG5Up5AsVXjSOFDW0gD31qfjFKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.24.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:63:67:fc:2c:41:2a:a5:61:d4:b0:44:b4:f7:53:ce:fb:1a:
9b:3a:89:f0:58:ea:03:b5:f1:f6:24:96:a9:0b:c2:67:7f:cb:
4d:b8:01:05:04:59:ab:6a:fe:53:d3:da:00:eb:f9:83:82:11:
51:89:58:c5:75:81:6b:88:be:fd:0d:7b:6f:7b:e0:23:6f:4d:
7e:3c:04:66:67:00:47:7f:f7:49:f1:2c:1b:db:d9:0b:4c:31:
8d:cb:d7:b3:41:ba:5c:80:91:c5:37:e9:3a:15:90:9b:b2:d5:
39:c9:49:fb:92:a1:8a:28:e2:5c:89:6e:c1:0a:73:5b:a7:6b:
40:a6:ea:33:95:e4:db:de:9a:94:1e:02:a4:b1:09:d5:3b:97:
13:2a:0e:1b:73:9b:50:f8:e1:f9:ac:84:ae:b6:ee:64:20:fb:
aa:bf:13:59:1b:c6:a7:24:0e:69:a2:64:53:3b:a0:f0:00:f2:
bb:3d:dd:15:23:5d:e6:99:23:61:12:df:43:3d:55:01:30:30:
6d:71:23:77:8b:55:70:a2:9b:6d:d9:9f:78:78:9e:b7:ed:76:
91:d7:62:67:42:ab:16:4f:b3:dc:d6:33:e6:bc:c4:f6:34:d7:
7c:f5:f8:bb:41:2d:3a:e9:d2:c2:fd:38:11:a2:09:df:fb:df:
8c:68:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org