Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/66r9bj9qgTlTiPLQ9dg50oWvREA.roa
File: 66r9bj9qgTlTiPLQ9dg50oWvREA.roa (raw, json)
Hash identifier: OzLMRA1fE3qmufx2REwUrZoM0GrjdFdKW2zs7UAvhVY=
Subject key identifier: EB:AA:FD:6E:3F:6A:81:39:53:88:F2:D0:F5:D8:39:D2:85:AF:44:40
Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Certificate serial: 0BEA
Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/66r9bj9qgTlTiPLQ9dg50oWvREA.roa
Signing time: Wed 10 Nov 2021 12:31:29 +0000
ROA not before: Wed 10 Nov 2021 12:31:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17502
IP address blocks: 103.136.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3050 (0xbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Validity
Not Before: Nov 10 12:31:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EBAAFD6E3F6A81395388F2D0F5D839D285AF4440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:af:5e:d7:ed:3a:2d:16:4d:a6:77:2b:b7:
fc:96:ad:4c:23:73:b5:63:7a:89:5b:38:c8:a5:d4:
f2:a1:66:77:64:9a:18:4a:0c:78:ef:fa:13:c9:53:
cd:73:00:e1:50:b8:1e:77:35:3a:fb:e0:e7:1a:aa:
ee:cd:22:b7:66:29:f1:2f:bf:5a:03:6c:70:6d:1e:
e4:72:f2:56:29:8b:a0:c7:1e:0b:9a:43:f4:d3:46:
6f:ca:e2:ec:d5:cc:d1:f5:93:56:4d:a2:bc:98:11:
db:32:dc:da:34:7c:de:b1:d6:5c:71:6c:9d:e5:c9:
09:19:6f:1c:fb:ca:84:eb:b4:15:56:d8:02:e5:71:
1a:55:b8:0b:16:18:62:e5:d1:e0:a7:e6:ea:3e:21:
38:cd:52:99:9a:1b:a1:dc:79:11:d3:8b:7c:2f:e8:
33:fc:eb:5a:ed:1e:3b:96:86:04:c2:02:ca:36:62:
65:e6:7a:92:64:4b:b5:d1:8d:da:23:3f:86:5c:7b:
87:2b:6e:25:71:e5:b9:e4:83:cf:9a:81:09:a7:c8:
8c:07:07:95:a7:f5:7b:96:44:c4:21:51:fb:b9:ee:
5e:c6:5c:2d:81:cc:3f:04:26:7e:00:af:b5:e4:d5:
0e:b0:a7:75:bc:70:0b:3f:97:0a:ab:ac:68:b3:55:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:FD:6E:3F:6A:81:39:53:88:F2:D0:F5:D8:39:D2:85:AF:44:40
X509v3 Authority Key Identifier:
keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/66r9bj9qgTlTiPLQ9dg50oWvREA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
11:01:ab:6a:d3:30:54:5f:8b:05:6b:f1:71:c8:87:de:42:71:
f3:b2:54:76:85:10:aa:af:e7:2f:af:ea:51:11:f0:a4:fc:19:
9c:6c:f5:46:06:94:80:f7:1d:26:56:be:73:cd:e0:ca:81:a7:
bb:45:f7:e1:fd:2a:ec:a6:d1:2f:2f:a0:c7:16:f8:9b:c8:92:
88:88:ed:bf:28:3e:2f:cc:2d:ca:bc:75:b2:68:59:04:0b:f7:
85:51:ff:1a:4d:38:68:7d:31:08:e4:38:3a:e8:cc:d3:6c:7b:
93:37:d4:55:4c:d4:1e:9d:60:05:49:8b:e9:69:9a:bc:3b:b8:
d6:8a:0b:57:92:46:e8:aa:d0:7a:d9:b2:61:a8:c2:57:82:cf:
5b:6f:ee:de:6c:f7:65:28:2e:1b:29:11:cd:47:37:85:b2:01:
75:62:b8:9f:92:af:55:88:30:35:57:62:98:e7:c3:8d:32:7a:
7c:82:fd:51:26:a5:e9:ca:ef:57:e6:21:ef:9b:ce:01:9c:a1:
45:c1:89:a9:e5:ef:78:49:f8:40:27:16:28:5f:46:4b:c9:aa:
b3:ec:47:32:f2:b2:d4:51:c2:f8:39:8b:8b:67:a7:c0:e9:8f:
44:fa:cd:16:28:f8:95:3f:34:c6:2a:0b:47:83:06:16:19:18:
e9:87:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org