Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/trInzc-tdA0SE6FSWpDBg2ISgXs.roa
File: trInzc-tdA0SE6FSWpDBg2ISgXs.roa (raw, json)
Hash identifier: Pn47hMapTWbDV8Ou5dZZcN4fMqn+IWZNzsxiwk9t1OQ=
Subject key identifier: B6:B2:27:CD:CF:AD:74:0D:12:13:A1:52:5A:90:C1:83:62:12:81:7B
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0A3F
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/trInzc-tdA0SE6FSWpDBg2ISgXs.roa
Signing time: Thu 15 Sep 2022 02:50:57 +0000
ROA not before: Thu 15 Sep 2022 02:50:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18179
IP address blocks: 103.16.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 15 02:50:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6B227CDCFAD740D1213A1525A90C1836212817B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:3f:2b:da:af:f7:22:85:d6:12:d0:ca:46:
20:2f:4d:8a:a7:0f:19:21:43:32:3f:3f:56:af:21:
b1:41:dc:80:9a:40:76:66:99:d5:5a:00:98:7e:f9:
b6:dd:a1:4a:44:30:d8:ab:9e:16:7e:a3:02:62:ce:
5f:16:a3:25:c6:79:9f:d9:52:95:8f:5f:30:d9:e2:
f2:12:94:31:7b:77:39:e0:fe:de:6c:55:38:79:fa:
69:65:21:c5:b7:15:73:f1:50:12:ef:bd:80:38:86:
bd:a4:f1:fd:7f:60:ec:65:ef:be:87:02:70:ab:53:
2b:71:f4:35:f7:58:ad:43:ba:78:96:3b:84:75:0a:
ab:0f:30:83:2f:ed:c7:76:50:00:45:86:9e:44:ff:
83:0c:7f:8c:f8:d5:7a:d7:96:96:96:02:78:22:b8:
fe:1c:64:93:8e:7c:c7:20:09:29:b6:74:a0:65:ac:
29:4a:6d:47:1a:09:37:9e:a3:6d:be:c4:82:79:e8:
eb:d6:4e:d9:1d:f3:b8:ad:6f:f2:b4:f1:fc:be:05:
0f:80:05:22:b5:3e:1e:26:b5:ee:98:a3:5c:ef:f6:
7b:d5:a7:18:d8:3c:db:7d:34:d9:dd:51:6c:ee:57:
e6:86:bf:f3:d6:c8:23:84:c7:f4:bd:11:1a:84:bc:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:27:CD:CF:AD:74:0D:12:13:A1:52:5A:90:C1:83:62:12:81:7B
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/trInzc-tdA0SE6FSWpDBg2ISgXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.244.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d5:53:79:e4:3c:82:b5:0c:85:a5:0a:3a:d9:86:45:57:7a:
5d:4e:77:ff:42:c3:d1:a0:ea:ad:63:86:b4:e6:f3:98:52:8b:
24:d1:f8:c2:da:ed:4a:f3:fa:8c:76:8b:ab:72:ff:a3:f6:dc:
94:49:ca:11:87:79:4d:75:03:19:e3:c5:63:d5:2d:3c:1b:24:
b5:a3:11:fa:70:68:74:42:dd:21:fc:67:ed:25:1c:98:54:50:
2a:a9:eb:da:b6:08:43:4f:9f:7e:71:fa:d2:0d:11:e2:97:98:
13:17:ef:db:ee:e9:92:8d:25:27:f0:a1:b7:da:f5:d7:16:f8:
a4:d4:3e:bf:69:20:ce:c3:9d:76:c5:40:9a:a1:7a:85:f2:f8:
06:2d:30:3a:b9:41:08:bd:71:9c:02:da:7d:59:b1:94:ab:64:
4a:df:82:95:f8:c6:0a:37:d2:8e:c4:66:f8:be:f9:bc:52:7d:
4f:a7:ff:eb:08:89:22:7f:e4:8d:84:fb:f5:b6:af:23:46:ca:
73:a9:f4:6b:89:55:47:ac:2f:2b:66:03:fb:66:36:3f:3e:e3:
78:6a:5a:ff:08:b9:6a:22:5b:4d:be:ba:29:fd:a9:dd:30:f8:
cc:52:8c:77:a5:00:16:3f:19:94:ae:82:d7:78:77:e8:92:33:
23:ea:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org