Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VHadn8pAr1KBSot8153hye5HL90.roa
File: VHadn8pAr1KBSot8153hye5HL90.roa (raw, json)
Hash identifier: v3j+WXVSLM4ur4psuIe/DMQksXfwn3fGBavLtHSTswI=
Subject key identifier: 54:76:9D:9F:CA:40:AF:52:81:4A:8B:7C:D7:9D:E1:C9:EE:47:2F:DD
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0AE3
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VHadn8pAr1KBSot8153hye5HL90.roa
Signing time: Wed 08 Feb 2023 03:31:04 +0000
ROA not before: Wed 08 Feb 2023 03:31:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131596
IP address blocks: 59.102.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 8 03:31:04 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=54769D9FCA40AF52814A8B7CD79DE1C9EE472FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:05:74:ab:2c:4e:e2:82:53:0b:51:a4:c4:
4b:60:95:de:2f:ee:be:8d:0f:79:34:b2:ec:6f:9a:
b6:74:af:c1:c8:ef:75:35:88:cc:ad:ad:fd:f4:db:
4d:a4:4a:d7:56:ad:9a:49:4d:27:0a:e5:e6:b4:69:
d6:3f:bc:58:c7:5b:84:c8:89:8b:a7:8b:db:03:65:
70:9a:21:79:3b:6d:42:77:b9:26:ff:2a:b4:11:68:
6d:8e:c0:93:9c:e4:78:4b:e2:c0:d6:18:30:5c:0a:
57:b3:fd:9a:31:0a:de:54:fb:c5:d3:80:d0:af:41:
7e:d2:74:37:48:1e:0f:7f:2e:93:c5:ae:98:a2:e3:
eb:56:fd:34:60:64:8c:07:07:21:a6:5f:49:f9:c6:
6d:22:fc:19:7c:f7:0a:de:57:b2:ce:c5:33:ed:ed:
6f:1f:cd:d5:cf:5c:7e:29:c9:8e:48:75:03:e0:ac:
0a:ee:72:fa:3b:c6:29:69:50:26:13:a5:8a:0d:e5:
0a:8f:68:1a:b3:d7:41:ae:4d:8e:2e:59:4f:49:62:
cc:71:fc:35:13:28:bc:9c:cf:15:2a:a3:de:5c:47:
9c:90:3f:4a:2e:c1:83:22:ee:56:30:67:35:ce:43:
0b:bf:4a:95:e3:27:4a:25:7c:28:11:22:35:8a:48:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:9D:9F:CA:40:AF:52:81:4A:8B:7C:D7:9D:E1:C9:EE:47:2F:DD
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VHadn8pAr1KBSot8153hye5HL90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.102.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:51:66:d9:cc:65:03:ad:79:4b:58:65:07:c7:f4:07:27:de:
8f:0b:2e:77:96:98:94:95:2c:02:8b:8f:10:82:86:35:9f:cb:
be:1b:f1:d7:5a:dc:e7:b6:6e:60:51:b8:be:c9:df:b5:98:77:
79:a4:e0:45:6d:c2:f0:f0:35:8b:04:69:93:d1:eb:6c:f5:03:
15:e4:41:84:b2:66:02:e2:a7:04:5a:91:95:d5:6c:a3:11:db:
c4:b4:09:76:9e:22:63:e7:92:ea:cf:f3:11:12:0d:59:91:24:
1c:39:a0:90:b9:22:a5:e4:51:fb:00:20:9e:cd:46:cb:eb:c5:
7f:11:99:46:58:d6:af:2c:a7:67:ef:fc:f2:cc:28:62:3c:1d:
45:e8:b4:93:62:c2:c6:f1:55:a0:b7:25:e9:c8:f8:bd:b8:80:
16:6b:26:ae:b4:26:a9:70:ee:da:c5:60:2d:fd:6c:ea:68:2d:
d3:50:a7:31:59:7f:13:f4:f3:e7:d6:0f:32:79:7b:ba:2c:be:
ab:7f:96:f2:ba:33:ed:5e:22:84:42:a9:94:49:c6:fa:4e:e5:
fb:20:32:0b:2f:a1:8b:3b:cf:d0:48:29:3c:08:27:99:93:3a:
bf:a1:db:98:8e:58:cd:9a:ef:1b:01:ad:05:8b:15:ee:41:d2:
30:09:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org