Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/g23t8mJrmKlkkIEyNbYXGLvIMOI.roa
File: g23t8mJrmKlkkIEyNbYXGLvIMOI.roa (raw, json)
Hash identifier: xd/7aJfH8ZLdiFLIidGbfzAvk+q7kjRo9sB/1e0Rr2s=
Subject key identifier: 83:6D:ED:F2:62:6B:98:A9:64:90:81:32:35:B6:17:18:BB:C8:30:E2
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 09B4
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/g23t8mJrmKlkkIEyNbYXGLvIMOI.roa
Signing time: Wed 06 Jul 2022 02:03:39 +0000
ROA not before: Wed 06 Jul 2022 02:03:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131632
IP address blocks: 103.123.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Jul 6 02:03:39 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=836DEDF2626B98A96490813235B61718BBC830E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:87:7a:ea:87:19:74:d6:06:23:ab:86:a6:
58:0c:0c:04:16:9b:aa:ed:85:80:25:92:80:bd:23:
57:cb:31:bd:a5:b2:82:6a:2a:23:69:ce:54:d5:62:
a9:54:3f:c1:81:72:4a:ba:06:20:bd:50:39:fc:37:
d1:aa:93:84:e7:93:ac:66:9a:4e:e7:14:07:be:b8:
59:21:d8:1b:71:19:be:00:cc:21:97:76:9e:24:13:
fb:1f:99:ac:53:e3:bf:8e:4c:00:2a:84:ff:a5:8d:
56:c1:38:99:14:1b:d5:29:b3:c0:52:b6:ab:dc:e2:
e9:17:c9:e0:77:2b:47:d2:3c:ec:44:be:f4:d3:ff:
17:37:0b:68:c8:d1:f5:af:d9:0a:a0:28:c4:40:5e:
2b:d0:80:b5:0a:cb:da:99:73:9a:63:3b:9c:c5:36:
94:3a:ad:6c:20:42:06:30:e6:6e:4d:e6:1f:e5:82:
49:2b:bb:5a:e1:4c:ac:f4:93:71:7e:68:62:99:ff:
27:91:98:79:d4:b5:32:bf:fc:a1:e5:a4:1e:a8:0e:
28:f5:ea:9f:d3:14:70:16:79:5f:ec:d8:ef:86:23:
4c:6d:93:79:a5:77:86:a4:37:6a:f5:f5:04:f4:12:
4a:79:bc:24:f6:04:52:ee:81:96:e2:a9:f7:29:0c:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6D:ED:F2:62:6B:98:A9:64:90:81:32:35:B6:17:18:BB:C8:30:E2
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/g23t8mJrmKlkkIEyNbYXGLvIMOI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3f:d6:bf:98:b4:d5:29:55:75:c1:4d:84:d6:ea:92:ee:3b:
c3:c3:c4:f8:96:cc:84:62:d2:35:d8:9b:af:9f:63:3c:74:8a:
a9:f8:9c:50:21:24:a5:8a:fa:c7:35:b5:aa:a1:3b:67:1b:d4:
3f:ae:1e:d5:55:22:98:65:22:a5:1f:c4:c4:61:2a:e8:78:c6:
da:d4:8a:e5:ba:9a:b7:d3:72:21:f1:fa:d1:11:90:09:65:78:
80:5a:e0:a5:f6:03:f8:f3:ea:68:0a:72:11:aa:65:01:cc:02:
5b:50:c0:f4:7c:de:e5:71:27:79:55:45:a6:21:4c:68:60:82:
8e:78:ee:d1:13:c7:d0:ad:61:5f:80:da:09:c0:b5:30:30:6e:
9b:38:94:60:3f:8b:cd:24:e1:7f:6f:e4:aa:39:2e:c2:26:f0:
ad:89:34:e1:c5:62:d2:21:b1:9d:85:53:6a:e8:81:59:de:28:
68:b9:3e:a5:8e:c3:47:65:5f:f5:df:cf:d7:9a:2f:55:08:9b:
5e:21:3c:dd:95:28:ce:d5:26:94:1c:c3:9a:68:53:e9:2d:0b:
bf:7c:58:05:7d:69:08:e2:ec:97:f3:96:de:8b:61:83:46:85:
dc:2c:28:c5:79:49:0e:b9:69:65:fc:b5:bb:8e:78:4d:29:87:
5a:f2:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org