Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/0RtRODHx9_8IcwUwSa91oAjrIBY.roa
File: 0RtRODHx9_8IcwUwSa91oAjrIBY.roa (raw, json)
Hash identifier: cHPWDV03WPJR1tM2AEYqkGAZqZEDQs4x0QCxKvQgCfc=
Subject key identifier: D1:1B:51:38:31:F1:F7:FF:08:73:05:30:49:AF:75:A0:08:EB:20:16
Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial: 0CB3
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/0RtRODHx9_8IcwUwSa91oAjrIBY.roa
Signing time: Mon 12 Oct 2020 06:15:19 +0000
ROA not before: Mon 12 Oct 2020 06:15:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 59598
IP address blocks: 103.127.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Validity
Not Before: Oct 12 06:15:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D11B513831F1F7FF0873053049AF75A008EB2016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:96:40:f1:3a:8d:b8:b5:05:2b:6d:92:43:
c7:ff:08:83:c0:4d:ec:4a:75:38:a6:f1:ed:0e:b8:
0a:26:b1:6d:c1:e7:c2:bd:c3:39:01:90:f8:ea:2e:
ea:35:f8:2e:e2:d6:de:66:3f:18:2c:8f:db:58:1d:
2a:56:51:77:16:3a:b6:5f:bc:58:b9:07:d7:e8:07:
5e:32:27:08:da:50:ab:9c:a0:6e:66:82:53:bd:a5:
68:19:9f:39:8d:58:37:96:b9:7c:25:a0:09:59:9e:
1d:4b:22:49:1e:c7:0d:62:02:25:1e:0c:93:08:f1:
d5:bc:13:9b:b1:64:a8:3b:be:35:f0:e8:67:03:ec:
24:a2:90:30:dd:93:77:80:f3:67:17:22:4e:bf:da:
a5:c9:c7:87:ed:c4:7a:20:cc:20:64:bd:29:61:3d:
e9:32:62:59:25:a8:da:35:b6:71:eb:74:37:e4:1b:
33:e8:63:84:d6:01:09:0d:63:c6:0d:91:15:ba:b8:
f0:dc:a6:e0:db:1a:89:56:d9:00:15:dc:f4:c5:79:
58:36:0d:ae:ea:93:e4:f2:51:5c:06:c0:20:b1:b5:
ca:83:a0:2e:23:d2:fc:5b:be:5f:fd:b8:3a:a7:8b:
2e:d3:e3:a6:b2:f3:f9:f3:26:b7:a5:20:8e:bc:47:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:51:38:31:F1:F7:FF:08:73:05:30:49:AF:75:A0:08:EB:20:16
X509v3 Authority Key Identifier:
keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/0RtRODHx9_8IcwUwSa91oAjrIBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.238.0/23
Signature Algorithm: sha256WithRSAEncryption
28:72:21:f1:0d:99:e2:45:2b:ed:0f:07:ea:0c:f3:c6:a1:a4:
e2:58:0a:c6:8e:1f:b6:2e:75:da:fd:31:de:34:35:d6:68:e0:
04:38:1c:4a:fe:49:c7:89:94:9e:f8:aa:d0:8e:95:ad:71:a2:
cb:87:79:d7:91:5e:b1:8f:84:6c:7a:28:d4:76:c4:93:ca:37:
6c:c7:6d:47:20:a5:89:72:79:2c:c0:0f:49:d1:f3:a0:5e:42:
e9:bd:92:2d:ac:48:f3:91:59:d9:7e:73:a7:fd:14:16:f7:8f:
88:ba:03:3c:af:c3:d3:ba:f7:66:66:a4:71:9f:55:8e:0f:ac:
e3:cc:72:57:dd:1f:77:87:f0:2e:cb:0c:fb:54:5f:c9:9e:d5:
98:2f:d1:94:d1:fb:ab:0d:7c:67:b1:a1:e4:b5:54:66:e5:44:
af:95:46:fb:45:23:22:9c:d5:31:46:14:ee:0b:23:21:de:62:
d3:26:9a:3c:01:71:56:cc:58:4f:90:dd:23:6e:2e:6a:36:25:
98:9f:f9:76:f6:8b:9d:b6:42:56:aa:8d:0f:e4:aa:70:14:18:
43:6e:c5:1f:10:5e:05:5f:29:1a:26:6a:9c:d2:35:2c:03:d9:
ca:e1:ea:8e:fa:e9:62:8b:9e:88:6f:d5:18:f5:c1:d1:19:82:
0c:f9:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:17 2023 by rpki-client on console-fra.rpki-client.org