Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/65XE7134BugbRAgv_4My-r_RVKg.roa
File: 65XE7134BugbRAgv_4My-r_RVKg.roa (raw, json)
Hash identifier: ZAbyfoa9Q+J08+lI/sPkyExMiWR3/a+puCO/Ykyfj0I=
Subject key identifier: EB:95:C4:EF:5D:F8:06:E8:1B:44:08:2F:FF:83:32:FA:BF:D1:54:A8
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 08BA
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/65XE7134BugbRAgv_4My-r_RVKg.roa
Signing time: Thu 31 Dec 2020 02:51:06 +0000
ROA not before: Thu 31 Dec 2020 02:51:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.106.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Dec 31 02:51:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EB95C4EF5DF806E81B44082FFF8332FABFD154A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:1b:23:e4:93:51:2d:c3:17:12:3c:14:63:
6f:20:a9:a1:fb:b9:54:39:bd:0c:ce:15:ba:b8:bc:
0e:8f:cd:77:e6:1f:8e:5c:f1:a8:fc:56:63:bb:87:
ab:d8:57:7e:ab:7a:8f:98:34:59:b2:a8:44:74:56:
fc:90:46:ac:fa:c7:c6:1c:0c:4c:78:cc:89:ab:f2:
ae:15:82:a1:87:78:eb:bc:2e:3e:03:00:65:13:c9:
19:fc:60:c8:bb:64:4f:d6:f0:33:4f:a7:de:6f:04:
19:79:ef:12:77:04:79:ee:88:27:e0:40:63:f6:d4:
7c:b5:70:ff:78:b6:56:d6:8b:52:19:ce:12:24:35:
f8:58:6f:3e:8d:99:7a:75:2b:11:5f:da:67:ae:19:
f4:11:7e:e1:ff:48:d0:c6:cd:4b:d7:5c:9f:9a:f7:
09:a9:06:9a:41:4c:d5:6c:b2:cc:d5:77:f7:7f:2a:
51:c8:ed:fe:ed:d6:bd:ac:82:95:fe:bf:41:30:2e:
1b:58:d5:cf:81:cf:8f:4b:8e:9e:7e:bd:b5:23:61:
32:da:30:34:95:fa:0b:a2:fd:79:01:76:6b:f7:f9:
b3:ed:fb:e4:4a:b6:d3:ea:2d:f2:39:0d:17:b3:6d:
6b:ae:01:97:82:4a:44:97:0c:d9:0f:ba:77:f1:07:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:C4:EF:5D:F8:06:E8:1B:44:08:2F:FF:83:32:FA:BF:D1:54:A8
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/65XE7134BugbRAgv_4My-r_RVKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.54.0/24
Signature Algorithm: sha256WithRSAEncryption
47:74:dd:dc:17:07:f3:64:b3:bf:b4:fa:5e:8f:0c:37:5d:b7:
76:bb:fc:6f:d7:1f:d5:ed:78:61:c1:25:92:72:b7:5d:f2:8f:
64:32:96:e3:3b:17:4f:5a:b3:38:d5:88:b7:79:d3:63:6f:db:
bc:0b:d6:f9:b2:b0:d9:b3:f6:1e:27:0d:fc:83:d1:43:f3:16:
2e:b6:a4:5f:a6:b3:2e:cf:fb:b4:49:7f:e6:77:78:f7:af:9d:
bc:1e:02:9b:8f:21:8b:2a:44:4d:67:4e:b4:5f:3e:c7:47:a5:
88:5a:1c:99:ff:b9:df:c7:1d:6c:90:52:bb:9c:16:e4:14:b4:
21:fa:0e:2e:74:4a:2b:91:ab:c0:c6:aa:3a:f0:85:01:3e:37:
bd:ed:fd:56:1b:6c:2c:b8:e9:77:bc:c7:25:c0:aa:e0:59:3d:
be:5a:7b:68:b3:37:53:a9:10:7c:44:9c:47:7d:26:94:56:d6:
19:66:80:0a:4d:99:46:b5:a3:4a:b4:cf:b4:25:6c:d3:8a:ad:
47:44:5f:44:01:8c:d6:08:0d:a8:9f:01:f0:4f:df:bb:f2:2b:
d4:c3:92:aa:a3:e1:23:ef:f7:33:59:2e:b3:1d:49:21:51:18:
25:75:1a:ce:dd:04:ed:72:a6:86:fb:60:e8:eb:24:ac:04:62:
ab:52:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org