Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/Zch3vTpwdDUvUI0IzavMI8CO_vA.roa
File: Zch3vTpwdDUvUI0IzavMI8CO_vA.roa (raw, json)
Hash identifier: OaRlvR9CPusVsUFRn0yzpL5428VowtrwJZH5fGrUBaI=
Subject key identifier: 65:C8:77:BD:3A:70:74:35:2F:50:8D:08:CD:AB:CC:23:C0:8E:FE:F0
Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Certificate serial: 0CB9
Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/Zch3vTpwdDUvUI0IzavMI8CO_vA.roa
Signing time: Thu 15 Sep 2022 02:44:34 +0000
ROA not before: Thu 15 Sep 2022 02:44:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 103.136.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3257 (0xcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Validity
Not Before: Sep 15 02:44:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=65C877BD3A7074352F508D08CDABCC23C08EFEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:9d:af:b6:3b:53:e2:44:dd:13:5d:44:b7:
2a:cd:5e:2f:23:01:be:87:5a:72:90:25:f0:b4:dc:
37:69:20:b7:dc:49:fb:4e:09:05:fe:92:86:a8:ca:
cd:7f:cc:98:0d:e2:0d:e2:a6:c9:4e:dd:57:69:55:
41:05:05:c3:48:77:63:fd:ae:c0:9c:f1:e6:aa:63:
a2:b3:b5:da:c4:b2:81:ed:f6:6d:af:72:6e:61:35:
5d:02:e7:95:ac:68:4b:b8:7a:dc:06:09:ec:88:0a:
f7:c7:5b:c0:8c:de:49:62:c3:87:49:46:c4:56:70:
30:d5:b7:5a:c8:11:fd:74:4a:00:92:73:44:cf:05:
2b:bc:c6:1d:c9:9f:0a:1c:0e:a1:77:d8:bb:95:4a:
5d:13:7c:bb:20:eb:a0:9f:e4:cd:52:9b:89:5c:bf:
5d:65:06:13:c2:89:27:19:55:f0:f4:66:df:30:ba:
2e:41:29:9d:d7:f9:91:39:d9:9c:6c:f1:0e:9d:65:
e0:59:46:82:f1:93:ab:10:48:8a:68:fb:0d:57:1c:
91:f2:61:3f:78:ac:4f:cb:d4:e1:91:64:00:29:de:
88:9a:44:7c:e5:84:41:24:e8:26:79:a5:63:32:a4:
a5:59:a1:74:20:35:96:45:9f:3e:70:01:6d:b3:7a:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:77:BD:3A:70:74:35:2F:50:8D:08:CD:AB:CC:23:C0:8E:FE:F0
X509v3 Authority Key Identifier:
keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/Zch3vTpwdDUvUI0IzavMI8CO_vA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
68:94:a5:fb:94:ea:3c:90:bc:af:e8:07:dc:b5:0e:07:60:1a:
b9:d2:bc:2d:d0:55:bd:9d:e5:94:3a:b5:95:0c:60:db:a8:ea:
97:22:3d:3d:2e:af:45:b7:9a:70:ef:5d:ac:91:36:8f:ba:27:
96:16:1e:ee:8b:d8:8a:22:6e:a8:26:3c:ee:86:96:57:4b:f6:
d1:5f:ba:52:63:52:ed:ce:05:26:b5:41:bd:f3:ee:54:b0:b6:
e1:c2:6d:1a:4e:d4:c9:46:43:04:52:86:c2:8f:37:61:42:c5:
99:af:d9:27:33:70:de:92:63:92:c5:43:38:6f:71:6b:c7:4b:
ce:8f:56:85:03:6c:84:b0:31:c5:7b:6b:54:02:69:f4:20:a5:
18:68:96:cd:73:ba:f9:76:94:db:ab:71:eb:99:39:78:6f:b4:
93:92:35:c3:d7:7c:d0:a4:2e:cc:2f:fe:79:b2:47:c4:52:a2:
f4:2e:b2:31:1a:d9:5c:ec:33:72:13:59:9d:57:56:1d:cf:33:
1c:79:57:8b:6c:ef:09:02:e3:32:3a:b5:04:78:0c:82:ca:5a:
ce:75:f6:77:f8:52:14:cf:36:af:d9:a6:3d:15:ec:6a:59:9d:
7d:13:31:7b:c9:7b:68:2d:09:b7:20:8d:7e:d8:e2:22:c9:d9:
69:4a:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org