Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/L5FOs9iXz39EdZGZXanGS5Mgj-U.roa
File: L5FOs9iXz39EdZGZXanGS5Mgj-U.roa (raw, json)
Hash identifier: cp4Bp9zUzJfXUHESXdn5Nh5u1/ZhkKD/4+8rlx6BcV4=
Subject key identifier: 2F:91:4E:B3:D8:97:CF:7F:44:75:91:99:5D:A9:C6:4B:93:20:8F:E5
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 09AB
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/L5FOs9iXz39EdZGZXanGS5Mgj-U.roa
Signing time: Wed 06 Jul 2022 02:01:54 +0000
ROA not before: Wed 06 Jul 2022 02:01:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131632
IP address blocks: 103.123.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Jul 6 02:01:54 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2F914EB3D897CF7F447591995DA9C64B93208FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:aa:d6:7a:13:16:00:50:5c:7b:61:68:47:
e8:29:09:85:1b:35:fb:fa:b5:c3:4f:32:7d:03:08:
a1:b9:30:21:59:5f:5e:0a:6f:85:39:cb:43:3a:ff:
59:8f:9e:79:6c:1f:70:71:9a:65:0c:03:46:5c:f3:
08:22:da:e6:17:80:be:bc:83:ce:cc:28:4f:6f:ac:
37:0b:bf:0e:72:a5:74:6d:84:d8:29:26:e4:30:2f:
32:1e:49:85:6f:30:14:2f:80:fc:55:76:15:e6:c7:
ba:e1:c2:1b:a6:83:3f:0a:44:66:6b:83:5d:ec:a1:
82:a3:dc:74:f1:28:08:28:44:33:67:18:98:7f:a8:
4d:6b:0e:e5:16:0d:c3:35:46:a0:ce:94:48:e8:37:
ce:92:3b:7b:35:32:4c:c1:17:2b:2c:ca:e3:16:d2:
87:49:d2:10:db:9d:d4:12:6e:3d:6b:bc:fc:99:cc:
6f:d2:d1:f1:a1:81:4e:4f:83:98:4e:a0:8b:86:16:
45:1a:5b:d7:4a:e5:cd:0c:41:7b:c8:ed:8f:b7:13:
25:ab:8b:29:db:0f:f7:f9:58:bf:4f:8a:03:7a:2e:
28:3d:f8:d3:73:44:63:29:33:63:2b:f4:f7:45:25:
37:48:c2:c1:29:e0:58:2d:73:3a:af:a8:4e:83:17:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:4E:B3:D8:97:CF:7F:44:75:91:99:5D:A9:C6:4B:93:20:8F:E5
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/L5FOs9iXz39EdZGZXanGS5Mgj-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.0.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a2:e9:0f:27:99:a9:3c:8c:7e:bc:4b:40:8f:e5:9e:df:8b:
b3:0b:99:a1:55:f7:ea:06:ea:19:3c:4a:b8:d2:a0:37:c1:c1:
09:39:cc:10:0e:dc:c3:b6:0c:43:50:89:8e:e1:b5:42:fa:cc:
9c:f2:07:21:51:a5:c5:00:17:ce:d3:27:b4:63:e7:2f:a0:7a:
e5:10:25:ce:f7:3b:c0:06:b6:7c:10:ae:be:7a:24:03:aa:88:
df:4d:68:6b:78:12:5c:5d:22:0b:c5:31:7a:fd:1f:fd:76:c1:
ba:50:bd:08:58:bf:9e:4d:8b:6f:98:30:7b:f7:fa:49:eb:45:
72:ab:03:18:d0:70:10:5a:ca:21:39:e6:3e:a6:44:3b:18:41:
69:74:2d:9e:c7:a5:39:a1:11:b8:e2:d9:03:e8:9d:5e:57:7a:
ba:5e:61:86:1f:63:90:72:df:7c:b7:cb:92:c0:cf:e9:15:cd:
fe:d9:14:17:7c:97:c9:46:9f:45:5c:4f:8d:81:06:22:95:a4:
83:21:4c:f7:5b:57:d8:8d:97:c3:8f:fc:ad:ea:d0:39:8e:ff:
a7:76:5e:0a:c3:2c:b0:26:b6:56:77:52:d0:0d:bc:74:c4:46:
13:70:4f:9e:71:90:0f:23:e5:4e:de:59:9d:8a:90:c2:2a:66:
8e:f9:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org