Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/6jWntE7oaabISH27UsG4GN51-Y8.roa
File: 6jWntE7oaabISH27UsG4GN51-Y8.roa (raw, json)
Hash identifier: 5qI32PTfB6kN72hr5f9isEvHHSi2HI035Pr53nOCvOI=
Subject key identifier: EA:35:A7:B4:4E:E8:69:A6:C8:48:7D:BB:52:C1:B8:18:DE:75:F9:8F
Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Certificate serial: F5
Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/6jWntE7oaabISH27UsG4GN51-Y8.roa
Signing time: Sat 14 Jan 2023 03:39:23 +0000
ROA not before: Sat 14 Jan 2023 03:39:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18178
IP address blocks: 103.180.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Validity
Not Before: Jan 14 03:39:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA35A7B44EE869A6C8487DBB52C1B818DE75F98F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:ff:8b:bb:97:da:bb:42:44:8c:17:35:26:
22:da:69:ef:3d:e3:b3:ec:ff:08:9a:e7:31:f9:be:
49:51:65:25:eb:62:1f:47:68:70:2c:11:16:9d:d5:
38:5d:67:78:53:a6:47:b5:37:6f:61:4a:02:6d:bb:
6d:87:ad:44:c8:7a:43:62:55:ac:91:7a:9a:4d:c2:
e2:1f:f4:e5:b6:11:94:85:bb:86:a3:9e:c9:28:de:
4e:88:0d:cf:1c:48:b0:12:6d:ac:9e:a7:e1:38:9a:
5c:d0:8d:3f:b6:a4:db:b7:4e:8b:b9:87:79:d6:45:
c2:0b:8c:a1:38:3a:81:c2:99:02:ba:22:54:8e:f6:
36:ca:1d:ac:72:83:00:e0:74:a8:66:bc:c9:19:a6:
01:79:a3:41:46:8b:b8:70:1c:49:87:82:a5:88:c0:
08:6c:74:e1:cb:94:3b:6b:9c:7a:2e:1d:f4:78:0a:
aa:70:79:75:71:5c:0a:c3:e9:d0:1f:18:eb:d2:6a:
d2:34:9e:17:a4:62:4f:35:05:4e:16:96:0c:54:ca:
52:f0:a5:b2:af:1c:2f:7a:77:26:ab:35:8a:54:d6:
27:da:9a:b5:ed:0e:79:11:88:98:ba:0f:d9:80:c9:
1c:bb:11:19:95:84:9f:ba:03:03:60:66:e8:5b:e0:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:A7:B4:4E:E8:69:A6:C8:48:7D:BB:52:C1:B8:18:DE:75:F9:8F
X509v3 Authority Key Identifier:
keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/6jWntE7oaabISH27UsG4GN51-Y8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.20.0/23
Signature Algorithm: sha256WithRSAEncryption
42:73:70:02:d6:20:d7:1e:23:87:51:6c:49:08:2e:f8:1f:d7:
21:0f:d6:86:ca:05:1e:c7:e5:73:20:cd:58:37:5a:90:e3:80:
5b:de:a5:56:dc:01:b2:c7:2f:5a:f5:67:06:6f:63:92:b0:ca:
b7:06:3b:a1:84:52:65:88:5d:7c:04:58:8e:c8:8a:f3:96:65:
8e:bd:d5:cd:f3:9a:fe:9a:fb:22:73:20:7d:fe:8e:2b:3e:66:
64:6d:36:84:7f:5a:9e:73:d1:f2:d4:92:c4:53:1a:7d:28:79:
9f:5e:b6:35:14:2d:a0:8e:ba:4c:28:66:c2:6f:14:09:d6:11:
e5:fd:38:b5:87:a1:54:85:d8:91:20:ad:ee:3b:28:7d:ec:21:
03:2f:ba:c4:d2:df:48:5c:9f:2b:d0:3f:a1:09:c2:83:11:5f:
a0:a8:30:37:3b:20:1a:94:e8:12:88:49:ba:f2:ad:33:e2:72:
1e:d4:63:84:02:68:88:ba:a5:21:47:44:b7:e2:58:1f:13:48:
32:ac:97:03:38:b4:2f:56:13:08:b4:40:8a:00:41:94:80:63:
6f:6f:97:b9:96:7a:87:cc:0e:ec:b1:c8:31:3c:02:2d:96:c0:
d9:d2:f0:eb:74:ad:a1:23:b7:36:e0:76:6e:79:00:bb:d0:fd:
26:8a:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org