Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/ebC6VBckLgJimI989Z9ri694v4E.roa
File: ebC6VBckLgJimI989Z9ri694v4E.roa (raw, json)
Hash identifier: VLjD2FZnDHjBu9BhGNz+U4OpdAMa+01QzeJODa2bYzI=
Subject key identifier: 79:B0:BA:54:17:24:2E:02:62:98:8F:7C:F5:9F:6B:8B:AF:78:BF:81
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 010D
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/ebC6VBckLgJimI989Z9ri694v4E.roa
Signing time: Sun 07 Feb 2021 13:04:48 +0000
ROA not before: Sun 07 Feb 2021 13:04:48 +0000
ROA not after: Sat 16 Oct 2021 04:29:56 +0000
asID: 18178
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Feb 7 13:04:48 2021 GMT
Not After : Oct 16 04:29:56 2021 GMT
Subject: CN=79B0BA5417242E0262988F7CF59F6B8BAF78BF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:9a:67:91:6a:20:f6:5f:9a:e5:6e:b0:2d:
2d:bb:62:4f:c8:08:5b:55:a3:0a:a9:66:f7:47:83:
c1:65:54:36:7a:ad:f0:24:f1:33:1e:70:3a:4c:7c:
47:a5:4e:af:9c:7e:96:1f:bf:9c:65:35:fb:39:b7:
3a:e0:bf:a2:c4:ee:68:06:1a:c0:0f:b2:ae:5d:6d:
1b:70:f1:25:99:97:96:61:e1:19:03:01:e2:66:25:
75:6e:89:54:b1:60:95:36:d2:fa:1d:91:d1:61:50:
99:e7:b0:a9:dd:59:80:9a:5e:32:25:f2:33:a2:f7:
d7:3e:4b:22:5e:9f:74:80:c4:4c:75:75:56:43:dc:
19:89:fc:7e:89:fd:a3:b4:55:b2:8f:e5:e3:da:30:
68:82:8c:3a:01:43:32:c8:ba:4f:68:f0:54:f4:42:
d8:5e:84:02:1c:c9:f0:e7:03:b2:72:07:7b:62:59:
50:60:69:22:6a:13:a8:bd:0d:50:4a:d2:da:01:9d:
80:ac:66:3f:02:d6:15:d7:10:4c:ff:bf:1d:15:69:
e0:d8:d9:76:5b:fb:60:e9:28:cd:4e:90:8f:76:aa:
84:5e:ac:0a:30:c3:c3:f9:c0:e7:ab:5b:89:72:45:
4c:d0:70:c9:f1:ee:36:e2:f4:b6:19:04:66:98:15:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:BA:54:17:24:2E:02:62:98:8F:7C:F5:9F:6B:8B:AF:78:BF:81
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/ebC6VBckLgJimI989Z9ri694v4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
00:99:0e:82:81:a3:21:84:97:32:71:e2:96:2a:40:19:25:d2:
a5:6f:46:23:b3:0e:34:07:12:c3:b6:ed:d0:33:a1:4e:62:49:
c1:d9:81:db:b3:bb:fe:9d:3b:92:85:b0:30:2b:27:bd:77:f1:
d9:3d:04:29:dc:51:44:80:97:5b:6a:cc:f8:ce:57:19:c3:60:
98:a9:b4:d2:a0:01:79:9a:f9:26:e1:01:f6:23:29:98:e8:be:
af:c2:e0:24:29:ae:7e:86:10:11:93:7a:8c:79:95:77:cb:77:
60:73:a1:24:d8:96:43:a3:05:f6:7d:9f:5b:19:65:24:2c:f0:
43:ff:0a:5d:54:1b:0a:c5:06:30:9b:ba:17:da:11:30:f2:aa:
67:69:bf:40:07:71:c3:cc:30:09:e1:b5:54:dc:08:ad:9e:8a:
6f:f6:51:fa:44:07:71:f5:5a:b4:c3:cb:af:e3:9c:a7:70:ff:
3f:d7:fa:11:b1:e5:0e:23:18:c2:36:18:85:66:49:19:20:a8:
ca:ae:dc:57:26:75:b5:67:1f:e0:b7:ed:13:da:8f:c9:8f:3b:
b2:31:be:91:3f:ba:7f:9d:81:5b:5f:ae:6b:c3:80:35:fc:e4:
41:2f:04:74:28:4e:54:3c:d7:a7:ae:ab:f5:22:73:fa:a1:4a:
15:81:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org