Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/MNsni8wMeUKkWS2SsuvlpbEmnLQ.roa
File: MNsni8wMeUKkWS2SsuvlpbEmnLQ.roa (raw, json)
Hash identifier: 2nOjRVRGI5Xwct4nFiKqsYZgrrNCEDg3MpVe1XG+bFw=
Subject key identifier: 30:DB:27:8B:CC:0C:79:42:A4:59:2D:92:B2:EB:E5:A5:B1:26:9C:B4
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 09F2
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/MNsni8wMeUKkWS2SsuvlpbEmnLQ.roa
Signing time: Thu 15 Sep 2022 02:50:19 +0000
ROA not before: Thu 15 Sep 2022 02:50:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 103.123.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2546 (0x9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Sep 15 02:50:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30DB278BCC0C7942A4592D92B2EBE5A5B1269CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:a5:33:14:97:94:7f:ce:8a:eb:d1:cc:61:
d1:01:d1:77:db:ee:a9:4a:a2:b7:a3:fa:d6:3e:61:
89:07:d3:1f:6c:b2:0d:26:09:a4:07:cf:23:7e:b1:
f8:5d:d4:0c:84:e8:44:68:1d:be:60:f2:f3:70:8b:
b5:4f:5c:80:f3:2b:5e:af:b9:cb:5b:a9:92:54:1f:
f7:bc:15:1e:4d:99:63:0f:dd:b3:0a:9c:9f:d0:04:
9c:60:d2:2b:da:d8:f9:c2:38:2c:48:d6:ce:b4:b4:
fe:1b:fb:e1:16:09:bd:81:23:04:3b:68:50:1a:a1:
7a:ef:31:ca:de:14:34:f4:96:03:50:1c:d4:22:4c:
3d:2a:2a:dd:4c:9c:4b:b3:9c:6d:63:67:93:25:3b:
fc:b6:77:a9:af:81:d0:7b:6b:df:d8:4b:25:b1:29:
b9:98:7e:d2:6c:1b:b4:b4:07:69:2a:03:09:20:fc:
d6:12:d2:c5:6c:43:8d:25:06:cf:8e:89:d2:85:44:
05:b9:ae:c9:9f:d7:09:0d:83:44:40:cc:49:0c:81:
22:eb:e7:af:24:ad:bf:fa:8e:18:5d:e1:38:3f:50:
10:ef:0a:df:9c:16:38:b4:7e:18:c6:93:f5:89:ef:
57:ff:d2:43:45:4f:bd:a7:6a:0c:e4:03:95:37:44:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:27:8B:CC:0C:79:42:A4:59:2D:92:B2:EB:E5:A5:B1:26:9C:B4
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/MNsni8wMeUKkWS2SsuvlpbEmnLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.2.0/24
Signature Algorithm: sha256WithRSAEncryption
49:01:7f:81:d0:b4:e1:53:e6:a6:dc:32:92:55:1e:f9:b6:69:
ec:d3:a8:d8:32:d4:67:44:ff:b8:ad:0f:aa:44:e4:ed:7d:84:
ec:bb:08:a5:ac:f0:a7:28:11:49:5c:e0:cf:7f:ce:a4:18:1c:
39:4c:e2:32:5b:c4:6a:80:cb:1d:ab:72:4e:b3:cd:dd:87:5e:
e2:a9:50:fb:dd:2e:55:4e:7f:d0:ef:ba:e9:57:ae:af:3f:09:
78:b4:e1:be:1e:05:c2:c0:6f:70:56:8f:bc:94:0b:b3:28:4d:
03:02:7c:0e:fb:ae:4c:28:91:6e:fc:b7:02:27:0c:c8:84:b5:
68:55:80:b7:aa:79:48:82:48:ce:e2:cb:61:3f:17:53:e2:23:
71:77:cf:55:42:6a:0a:7f:cf:c6:bd:0f:51:2f:ef:e4:41:2d:
e7:d7:15:a9:40:a8:28:d3:b6:53:57:e1:12:bb:0f:1a:62:0c:
39:81:ff:b1:d0:a2:f0:e5:0c:18:bf:51:5e:3c:c5:39:13:76:
e8:49:85:a1:f1:f2:0f:40:de:ec:d8:3b:cb:46:d6:20:af:7f:
ce:ba:62:94:b4:ce:53:4c:3d:9a:24:3a:bd:3c:4a:3b:f4:2d:
7e:bc:31:9d:d2:9f:5a:1f:9c:47:11:f7:08:b3:d7:1e:0b:c3:
3b:b8:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org