Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/WS89R3aPG6QydgsQ1u2afn1uHf8.roa
File: WS89R3aPG6QydgsQ1u2afn1uHf8.roa (raw, json)
Hash identifier: 0945e0JYCZKZzmq+9Ssejhscoxi2VjERH+xESVBD7so=
Subject key identifier: 59:2F:3D:47:76:8F:1B:A4:32:76:0B:10:D6:ED:9A:7E:7D:6E:1D:FF
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 08ED
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/WS89R3aPG6QydgsQ1u2afn1uHf8.roa
Signing time: Mon 08 Feb 2021 16:40:23 +0000
ROA not before: Mon 08 Feb 2021 16:40:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.106.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Feb 8 16:40:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=592F3D47768F1BA432760B10D6ED9A7E7D6E1DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:38:8b:7b:8b:39:93:04:b6:88:cf:97:1a:
34:50:9a:67:11:63:a3:e3:30:53:3d:a4:f9:78:c1:
57:9a:ab:b3:8d:9a:e1:0f:db:44:e6:de:b5:37:d8:
c0:59:99:fa:11:e0:48:aa:da:25:9c:66:8e:d8:af:
47:c1:e1:67:39:13:3d:a6:11:ce:e4:74:1f:a0:73:
c0:b1:0b:73:cc:2a:ce:e6:4d:87:fa:f1:9b:ad:dd:
cd:63:0a:96:27:fe:bf:e0:64:16:33:6f:c8:60:50:
a4:7c:07:b8:7e:c3:a5:b5:cd:aa:67:5e:fe:4c:d3:
bd:72:8e:87:ed:d4:9d:fc:96:eb:8d:87:c2:43:d1:
36:61:e1:a4:71:ec:aa:4b:19:23:a4:9f:18:0b:0e:
b3:b4:9e:1a:55:8f:ae:f3:5f:f3:ce:3d:b3:b7:9a:
6b:dc:a1:34:8d:47:7a:f6:53:64:59:93:5f:a1:0e:
57:67:f4:1d:07:94:06:e9:dc:46:5c:78:2b:84:5d:
99:84:7e:43:0a:96:8d:8b:df:52:c1:83:83:75:c3:
02:b6:7f:32:78:9c:89:5c:e4:22:1d:5c:a0:5e:53:
84:b5:23:01:1e:5d:23:5d:ee:80:79:7a:03:03:ea:
1a:72:db:02:a4:39:eb:05:37:7f:99:2a:4b:a9:d8:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2F:3D:47:76:8F:1B:A4:32:76:0B:10:D6:ED:9A:7E:7D:6E:1D:FF
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/WS89R3aPG6QydgsQ1u2afn1uHf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.54.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:dc:54:a0:80:d8:5f:62:90:35:2f:87:a1:4f:92:62:e1:16:
f1:2a:7e:3b:06:5b:49:9a:92:52:f4:61:10:46:17:62:7f:c9:
da:0e:a1:fb:32:02:bf:79:ba:92:ac:a8:1d:0a:bd:bc:b0:25:
c0:76:a5:9d:c3:86:74:68:81:de:a7:04:cb:0e:68:ec:2e:74:
65:73:ff:d0:6d:62:a8:11:76:1b:e2:d0:66:f8:e8:9d:93:d2:
a6:ab:c9:db:5a:dd:08:fb:68:b4:74:6c:04:db:61:4d:2c:67:
0a:91:42:48:95:6c:38:cc:bf:60:50:f8:bf:01:c2:ea:67:20:
5a:f1:a0:6a:32:5c:a1:a6:5c:f8:b6:ea:10:3e:a7:d2:9c:5c:
5e:3b:6c:17:7d:82:ff:96:91:23:52:7a:47:a1:59:4a:40:89:
6b:05:e4:a3:19:0e:4a:79:36:00:ec:d4:85:c1:78:5f:e6:6b:
11:1c:f6:2b:24:78:16:d6:b0:50:5f:1c:ff:58:f5:29:00:a0:
a1:e5:4a:2f:a6:9a:76:2f:36:ea:ac:1a:7a:50:46:3b:46:36:
2d:b2:94:55:83:57:dd:c6:20:02:49:67:6b:79:db:3d:06:22:
e6:88:68:3c:86:f6:30:5a:ae:06:1a:31:66:88:a5:65:a2:a3:
e7:ae:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org