Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bRrw80y83cvVsMAXf0C7I7Y9MSQ.roa
File: bRrw80y83cvVsMAXf0C7I7Y9MSQ.roa (raw, json)
Hash identifier: elTnFkAhTSJ+bAoSROXSFypRR4RffBMr6pfVk+KLvSo=
Subject key identifier: 6D:1A:F0:F3:4C:BC:DD:CB:D5:B0:C0:17:7F:40:BB:23:B6:3D:31:24
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0795
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bRrw80y83cvVsMAXf0C7I7Y9MSQ.roa
Signing time: Tue 29 Sep 2020 09:53:06 +0000
ROA not before: Tue 29 Sep 2020 09:53:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 103.106.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 29 09:53:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6D1AF0F34CBCDDCBD5B0C0177F40BB23B63D3124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:9e:9d:9a:d5:6f:72:8e:73:ed:bf:8f:1d:
6a:32:0a:68:83:57:c6:7c:9d:6d:70:ca:df:48:91:
f4:9c:6a:d7:73:84:15:ff:e2:b5:a7:ff:eb:9e:9b:
84:14:30:d0:51:82:11:50:f7:55:ef:93:37:b7:c4:
d2:2c:4c:09:cf:59:88:02:42:1a:d3:30:b4:b8:20:
c4:05:93:46:d8:b0:88:32:f1:4f:9c:cd:a6:fd:fd:
ac:ed:e3:d4:bc:e0:d0:af:94:8e:56:5e:52:39:08:
5d:24:7a:8c:4d:46:50:54:fc:10:f9:9f:d5:a8:be:
13:19:0e:4e:1c:8f:68:21:f5:64:1e:12:04:42:87:
dd:90:af:4d:17:b4:9d:50:e6:cd:fe:d2:f7:b1:63:
08:81:d8:0e:4a:d3:9b:f5:1e:91:59:3f:29:15:39:
be:d9:d3:72:b0:4b:33:8b:82:d0:0f:c6:b8:e5:60:
d2:99:27:11:12:c2:5a:97:70:8f:2f:2a:93:8e:a9:
49:30:4c:45:58:70:70:6b:b8:6a:ca:25:35:7c:38:
bc:8c:ec:fb:d5:db:77:7e:f0:06:1c:3e:06:29:95:
42:85:45:12:52:f4:18:22:49:51:57:5e:a9:f8:c9:
7f:f2:95:14:02:d5:b3:bf:e8:50:93:53:f4:d9:ff:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1A:F0:F3:4C:BC:DD:CB:D5:B0:C0:17:7F:40:BB:23:B6:3D:31:24
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bRrw80y83cvVsMAXf0C7I7Y9MSQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.55.0/24
Signature Algorithm: sha256WithRSAEncryption
86:48:a1:99:90:44:a5:f2:ad:27:d1:0d:d7:19:cf:21:74:45:
62:5e:19:25:f3:b7:3e:7d:84:6e:8b:e5:81:a9:04:e6:e1:29:
cc:fd:95:a3:8c:16:9f:db:a2:fb:ab:8f:10:e0:e4:43:cb:87:
95:fb:dc:45:1c:e3:9b:72:8a:3d:cb:c8:86:cf:71:f3:9f:df:
d8:46:6e:15:49:9e:76:dd:9a:59:d6:b9:15:71:2a:82:1e:44:
ff:cd:35:59:03:57:b7:ed:00:23:d1:98:65:11:ee:b8:0c:83:
45:9e:8e:f9:f9:b7:51:4f:d1:b8:f0:ef:9d:52:47:fb:c7:6a:
a7:63:bf:0e:15:a0:6b:42:37:9c:fb:fb:e0:07:28:b3:d5:27:
ff:30:51:20:14:02:43:c2:2e:cd:be:3d:e9:a4:4c:93:45:71:
db:e4:bf:88:3b:de:07:8d:d2:f3:91:b5:79:be:fc:55:ed:da:
e5:bb:54:aa:c2:94:40:ed:3d:4e:14:49:db:6b:45:bf:d0:b0:
d6:40:de:1c:4e:c5:ce:59:06:7a:c3:52:a1:a5:33:ea:54:f8:
c9:db:47:d3:a5:7d:71:96:a6:0c:20:e3:0c:91:21:04:34:5e:
8a:97:8f:f3:1e:27:da:4f:e2:5f:98:71:e7:e5:d3:3d:5d:91:
cc:c6:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org