Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/1-MY01DYb5Ef4RR-zNWJETFSuUs.roa
File: 1-MY01DYb5Ef4RR-zNWJETFSuUs.roa (raw, json)
Hash identifier: 22CtcB6hF+rcEHp2Rf0wRXZNIazid+sRTAEdO6uf5W0=
Subject key identifier: D7:E3:18:D3:50:D8:6F:91:1F:E1:14:7E:CC:D5:89:11:31:52:B9:4B
Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial: 0DB8
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/1-MY01DYb5Ef4RR-zNWJETFSuUs.roa
Signing time: Sun 07 Feb 2021 13:04:32 +0000
ROA not before: Sun 07 Feb 2021 13:04:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131633
IP address blocks: 103.127.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Validity
Not Before: Feb 7 13:04:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D7E318D350D86F911FE1147ECCD589113152B94B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:22:d0:36:05:75:0c:1c:5f:9f:d8:d0:fa:
ba:2b:49:a0:4a:3c:8a:5f:6a:01:88:2a:73:95:1b:
52:98:93:91:bb:69:30:fb:5b:16:70:53:03:74:d8:
be:15:4e:c3:2a:2e:f9:be:7e:f1:55:da:84:27:36:
a5:f2:9d:52:94:1b:12:fb:f0:2c:4c:b4:71:67:fc:
60:94:d8:77:31:ef:67:38:d9:4e:95:d7:bb:aa:55:
c2:2c:c5:71:fc:3c:40:55:0f:d6:a0:40:83:d1:fb:
e1:f8:29:84:a7:58:52:a2:fe:27:2c:aa:3c:4a:f0:
43:a3:4e:6b:ef:e1:6a:91:96:43:30:ad:c5:76:7f:
66:de:8e:fb:ef:47:b1:c1:09:1c:d2:b4:2d:73:1b:
d6:3d:c4:8b:9a:ad:7e:60:4f:47:f2:13:e1:15:06:
b8:d9:74:f4:b9:3e:c1:8d:76:d3:5e:52:38:3e:d1:
a4:d1:ce:dd:cb:d0:f4:cc:da:9e:e3:8e:fa:c7:47:
34:34:c9:66:a7:9e:7e:0b:ec:ad:6c:18:83:cb:d7:
38:be:25:a8:8d:3d:3f:95:0b:bb:bb:a6:e2:70:d5:
7f:c0:b7:32:e9:54:48:eb:5a:08:5a:d4:1f:42:08:
43:af:90:87:a4:b2:e4:63:6e:7c:ff:b3:92:38:03:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:18:D3:50:D8:6F:91:1F:E1:14:7E:CC:D5:89:11:31:52:B9:4B
X509v3 Authority Key Identifier:
keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/1-MY01DYb5Ef4RR-zNWJETFSuUs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.236.0/22
Signature Algorithm: sha256WithRSAEncryption
34:a6:e9:83:02:93:87:a7:32:25:20:92:e6:6b:21:f4:1d:36:
b7:b2:71:58:67:56:97:f4:ec:9c:c6:bc:57:43:35:75:7e:ce:
c7:e6:53:32:e3:38:c6:f3:b8:94:ed:9c:9a:8c:0f:01:4d:d7:
7e:77:55:aa:0b:f9:e6:5e:dd:90:e3:38:e7:3b:49:50:2f:95:
ab:b7:82:66:1a:54:2d:1a:75:c1:fa:c8:0d:53:9b:8c:0b:9c:
db:fa:e4:3c:0a:63:71:c5:d2:f0:de:0e:1c:88:30:6e:18:58:
95:c3:05:44:17:97:39:be:c4:2d:ad:8b:5e:65:80:04:17:b8:
bb:e2:24:69:d9:9f:82:88:ff:c2:cc:e7:30:dd:7a:40:b7:2a:
b8:8f:d6:2c:01:5f:e2:e5:47:ad:aa:a1:f5:8c:6d:b0:29:39:
f9:a8:81:44:b9:2f:df:88:54:2a:94:29:45:02:9a:4a:74:98:
51:4d:8e:36:a1:cb:51:86:50:26:24:e2:cf:2c:4f:8d:a2:88:
46:8f:db:da:14:7b:c2:51:f0:9d:b9:df:7b:a3:3c:02:92:f2:
73:b8:18:18:e4:0c:cc:85:fe:ac:6b:ea:af:52:55:e0:99:03:
11:9a:43:75:de:19:f3:61:55:62:fc:11:e0:26:e3:a5:00:70:
a3:17:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:17 2023 by rpki-client on console-fra.rpki-client.org