Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/jiJhBemsXZgdWra4SibWDiCCVS4.roa
File: jiJhBemsXZgdWra4SibWDiCCVS4.roa (raw, json)
Hash identifier: Z23Fmvi/DEmx9keZvxm9bSEYkeTEgDTPRIoN1ZG4lyE=
Subject key identifier: 8E:22:61:05:E9:AC:5D:98:1D:5A:B6:B8:4A:26:D6:0E:20:82:55:2E
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/jiJhBemsXZgdWra4SibWDiCCVS4.roa
Signing time: Thu 15 Sep 2022 02:44:10 +0000
ROA not before: Thu 15 Sep 2022 02:44:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 103.106.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 15 02:44:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E226105E9AC5D981D5AB6B84A26D60E2082552E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:ca:c4:86:39:02:d1:ea:6d:33:a4:a4:0d:
61:19:14:d7:8e:22:53:ef:26:49:ed:73:1c:e3:21:
4a:61:3e:a7:bb:66:ed:23:2c:42:df:4a:bc:40:fe:
e3:15:c6:ae:1d:86:0a:7c:85:8a:65:8a:cb:35:1e:
ab:00:56:bd:f4:dc:3f:e6:7f:76:16:1c:f2:09:86:
aa:3d:f3:d6:c3:22:78:40:cf:2a:8e:5d:14:7b:be:
3e:12:17:61:19:27:b0:75:f5:e3:7c:8b:ae:8d:06:
82:ef:82:72:c7:cd:7a:ac:6a:f6:3f:7a:37:df:54:
02:36:9a:88:7c:d3:c6:31:10:1e:68:5a:39:97:12:
03:eb:92:39:15:78:20:5c:5e:de:3a:9f:e3:ce:6f:
8a:b9:7e:db:b2:f0:d9:e5:f7:a4:8e:7c:86:3b:b4:
0f:b0:47:c8:7f:fa:3b:c1:cf:5a:a9:b9:63:d8:45:
ff:3a:71:e5:4b:54:e8:a6:ec:33:ba:2d:c3:7e:c7:
48:2a:11:00:b4:08:53:dd:08:18:00:ba:20:f6:0a:
e9:e5:77:d9:2e:56:09:7b:28:2f:8c:24:8f:3c:5c:
1d:a9:6a:ba:61:fd:21:37:2c:39:f7:fa:d9:7b:ac:
dc:da:35:a9:a9:b1:6f:5f:bd:ac:e5:4e:a7:8d:7f:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:61:05:E9:AC:5D:98:1D:5A:B6:B8:4A:26:D6:0E:20:82:55:2E
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/jiJhBemsXZgdWra4SibWDiCCVS4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.54.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5e:8c:1e:f6:2d:24:74:fa:e6:15:b0:99:0e:9c:95:93:42:
64:5a:4f:ba:39:6e:b9:53:a9:98:8f:bd:d1:b8:06:65:bf:2d:
01:cf:7b:21:01:05:09:a6:8c:45:ca:77:e9:0d:da:a8:80:4c:
1a:b1:bb:be:34:de:b7:09:13:fa:1a:d8:fd:82:c3:4e:f6:e4:
15:0b:ee:6f:f7:be:21:d6:fb:cc:4c:04:46:eb:8f:69:17:d0:
73:10:d4:75:72:c1:f1:ec:bd:36:3d:6c:0e:3c:1c:9e:8d:5f:
c7:a3:f9:4d:20:34:4f:28:82:51:d4:1f:9f:f0:29:d5:35:9b:
4c:8f:25:79:42:cc:9b:3c:6a:2a:28:06:02:8f:c7:1d:5f:eb:
84:94:10:b4:04:a7:dd:bf:75:69:4d:c1:69:28:13:ae:c0:9f:
c3:f8:46:d7:70:9a:52:d6:6d:5e:10:b7:15:44:94:10:f6:21:
21:c2:27:c9:dc:77:33:a9:08:dc:c1:70:a5:b6:00:fb:c1:a9:
1b:a9:c9:8c:72:88:eb:78:7b:cd:e2:20:92:22:e1:ec:19:dd:
b1:8b:17:e3:20:72:f6:60:ef:49:e4:81:39:8d:e4:80:35:42:
34:4c:83:a6:43:f0:00:84:3e:3d:9f:19:a9:e1:bc:2a:61:aa:
eb:7a:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org