Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/A-x79JFo-ZxHtQikJENUB63K2Jk.roa
File: A-x79JFo-ZxHtQikJENUB63K2Jk.roa (raw, json)
Hash identifier: PJ6WEXRj9bchSfprY9FoWiwmXX2zfLEuKwcmEfXEbsM=
Subject key identifier: 03:EC:7B:F4:91:68:F9:9C:47:B5:08:A4:24:43:54:07:AD:CA:D8:99
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0B2E
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/A-x79JFo-ZxHtQikJENUB63K2Jk.roa
Signing time: Wed 29 Sep 2021 02:56:06 +0000
ROA not before: Wed 29 Sep 2021 02:56:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 103.138.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 29 02:56:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=03EC7BF49168F99C47B508A424435407ADCAD899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:5d:b9:54:e7:20:b0:ab:24:11:6f:38:bd:
aa:2f:21:85:5a:53:66:19:43:e8:7f:09:ff:3b:87:
b7:e4:dd:77:2a:5d:62:ec:78:06:31:1b:d6:45:56:
be:93:e7:d7:c1:31:b2:f7:8b:a2:b6:85:32:54:68:
58:42:91:e1:66:11:04:f4:74:cc:5f:1f:b1:1a:6d:
27:ba:8f:1e:a9:98:3f:a8:fd:fd:e1:c2:08:d9:eb:
d9:53:ef:5e:91:36:4c:82:b7:0e:b4:20:76:82:31:
8e:ae:de:0c:fc:da:8b:a9:74:19:96:98:34:18:69:
f7:cf:14:ef:fb:4d:00:b7:a3:75:43:4f:68:50:9e:
97:80:41:f3:ac:8d:08:ff:c6:7b:42:03:9e:1c:69:
ae:2e:31:4e:14:bd:e6:4d:27:41:5b:b8:9a:c8:2f:
18:4a:3c:7a:c2:7a:1a:7f:b0:05:59:41:c7:9a:2f:
54:5f:67:1e:68:b6:b4:f5:00:01:af:6b:e9:1f:45:
f6:5a:8f:61:4e:64:3d:d9:42:4b:46:bf:e2:54:4e:
dd:69:8a:5a:eb:21:b9:42:61:b8:69:f7:6b:ba:4f:
6c:e9:1d:7a:ac:e9:26:c1:12:6d:9b:ac:d7:ea:ae:
70:a3:7a:87:ec:1e:64:b0:22:38:56:16:e7:36:a6:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:7B:F4:91:68:F9:9C:47:B5:08:A4:24:43:54:07:AD:CA:D8:99
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/A-x79JFo-ZxHtQikJENUB63K2Jk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fc:1b:86:60:2a:2d:53:40:8d:8d:b8:33:e8:ad:90:18:eb:
97:60:fe:d7:ca:6b:3b:08:51:8d:e9:a8:54:7d:09:34:85:d4:
c9:1b:af:c0:4c:ce:ab:98:13:8d:0e:29:50:ab:fa:5a:8e:11:
6a:ca:e7:1a:a7:cb:df:b6:08:a3:81:f3:e7:ee:b2:de:b1:4c:
c0:44:da:cb:ea:99:72:8d:3b:6b:00:73:ba:ec:ee:25:91:b7:
53:9a:a7:f5:4f:cf:b0:e7:b2:75:01:6b:da:1d:2c:89:5d:58:
fe:4f:b2:5d:67:dd:7d:bc:f9:95:30:11:2e:37:a8:fc:a9:22:
b7:a7:47:a2:3b:70:ff:e2:27:fd:11:4d:84:da:48:70:fb:8d:
ec:2b:bf:6c:99:ed:81:a4:8d:24:c4:5e:05:8f:03:24:72:51:
69:c4:38:4f:cd:64:2c:60:21:4a:5b:9f:8b:b8:79:c6:13:29:
56:94:b5:14:c9:a5:d2:9d:b3:c4:d7:06:f3:80:13:0e:b6:ad:
8b:a9:0c:47:d2:d8:26:24:b1:ce:70:fc:10:5c:97:f2:b6:dd:
ed:02:e7:99:dd:57:8e:e9:4f:f5:c8:78:ac:d6:6a:ae:d2:31:
06:4a:8d:5f:3d:e9:81:30:7a:19:bb:8b:7e:f2:ce:33:cd:55:
00:71:73:e6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex
QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yMTA5Mjkw
MjU2MDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDAzRUM3QkY0OTE2OEY5
OUM0N0I1MDhBNDI0NDM1NDA3QURDQUQ4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtIl25VOcgsKskEW84vaovIYVaU2YZQ+h/Cf87h7fk3XcqXWLs
eAYxG9ZFVr6T59fBMbL3i6K2hTJUaFhCkeFmEQT0dMxfH7EabSe6jx6pmD+o/f3h
wgjZ69lT716RNkyCtw60IHaCMY6u3gz82oupdBmWmDQYaffPFO/7TQC3o3VDT2hQ
npeAQfOsjQj/xntCA54caa4uMU4UveZNJ0FbuJrILxhKPHrCehp/sAVZQceaL1Rf
Zx5otrT1AAGva+kfRfZaj2FOZD3ZQktGv+JUTt1pilrrIblCYbhp92u6T2zpHXqs
6SbBEm2brNfqrnCjeofsHmSwIjhWFuc2pmxdAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUA+x79JFo+ZxHtQikJENUB63K2JkwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc
GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB
U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS9BLXg3OUpGby1aeEh0
UWlrSkVOVUI2M0sySmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ4pqMA0GCSqGSIb3DQEBCwUAA4IBAQBe/BuGYCotU0CNjbgz6K2QGOuXYP7X
yms7CFGN6ahUfQk0hdTJG6/ATM6rmBONDilQq/pajhFqyucap8vftgijgfPn7rLe
sUzARNrL6plyjTtrAHO67O4lkbdTmqf1T8+w57J1AWvaHSyJXVj+T7JdZ919vPmV
MBEuN6j8qSK3p0eiO3D/4if9EU2E2khw+43sK79sme2BpI0kxF4FjwMkclFpxDhP
zWQsYCFKW5+LuHnGEylWlLUUyaXSnbPE1wbzgBMOtq2LqQxH0tgmJLHOcPwQXJfy
tt3tAueZ3VeO6U/1yHis1mqu0jEGSo1fPemBMHoZu4t+8s4zzVUAcXPm
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org