Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/EQ86pzz6MQ3EvF6O0wTGbwGaIH4.roa
File: EQ86pzz6MQ3EvF6O0wTGbwGaIH4.roa (raw, json)
Hash identifier: 4dXxIaxhWffqTLRHQk8c3JHT/gmQxfZC6hEyqPlNvHw=
Subject key identifier: 11:0F:3A:A7:3C:FA:31:0D:C4:BC:5E:8E:D3:04:C6:6F:01:9A:20:7E
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0A8A
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/EQ86pzz6MQ3EvF6O0wTGbwGaIH4.roa
Signing time: Sun 07 Feb 2021 12:46:34 +0000
ROA not before: Sun 07 Feb 2021 12:46:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 103.138.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Feb 7 12:46:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=110F3AA73CFA310DC4BC5E8ED304C66F019A207E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:d9:b0:6a:8e:80:5f:b7:25:0d:eb:44:3b:
1f:59:40:24:71:04:af:7d:d2:60:06:1b:8c:1f:a2:
b9:ce:1d:cb:83:0d:bf:05:7c:32:9d:58:7b:3f:9a:
28:cf:e1:bd:ab:45:bf:20:e8:6b:bf:44:d7:7c:98:
8b:12:3e:2b:80:56:0a:c9:f1:2d:38:96:b3:63:40:
33:1a:cc:26:26:e7:9b:99:ca:98:20:d6:d4:3a:5d:
60:d5:f3:a7:86:99:49:64:46:bd:1b:e3:8b:dd:23:
fb:2f:f2:cb:ec:84:a0:88:7f:5f:4a:ba:bb:8c:9f:
33:db:cc:85:b9:a8:77:f0:71:2d:08:c0:4c:fd:56:
cb:6a:2b:7f:3d:b1:89:3b:1b:eb:9b:1b:b3:4d:e6:
23:b1:26:ca:c6:ca:94:bc:15:82:62:50:82:84:ac:
ae:7f:f3:41:63:cd:7a:ca:80:f7:2d:70:c4:3a:21:
58:ff:17:4d:60:ff:c5:c3:3b:bb:d8:bb:c8:64:21:
f2:f1:ea:9a:c8:15:d8:e3:86:62:02:5f:e1:e5:78:
d5:ce:27:22:a9:8b:81:be:c6:ac:37:80:4c:4f:c9:
16:5c:98:06:57:b7:3d:50:4b:b8:21:b8:48:20:f3:
9d:44:eb:b8:4a:69:bd:d5:69:7b:e0:e8:da:7a:6f:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:3A:A7:3C:FA:31:0D:C4:BC:5E:8E:D3:04:C6:6F:01:9A:20:7E
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/EQ86pzz6MQ3EvF6O0wTGbwGaIH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c9:0a:e1:32:e1:41:e2:15:4c:80:62:75:34:9d:d3:02:04:
99:6a:24:2f:05:b8:84:f2:d0:a3:fa:95:20:b2:76:49:4f:93:
06:8a:5e:fb:6f:0d:66:a8:9e:8f:2e:24:f8:0f:b0:ad:bc:5e:
41:09:9f:8c:91:5c:a4:b2:33:f5:49:93:a2:53:aa:89:8a:37:
fb:27:04:bf:f3:09:d5:5c:dc:16:79:cc:6c:f6:f3:70:e5:2c:
53:b5:02:8b:d8:84:36:34:e5:bf:ba:f9:88:9b:72:88:da:c5:
c0:47:b2:b0:b1:6a:b2:04:db:01:4c:18:b8:b3:0a:70:64:0f:
68:b8:13:75:7b:ab:a2:13:be:ce:60:8f:91:40:02:75:ec:f0:
66:58:ba:bb:e5:43:a6:ad:2f:89:b2:36:a7:0b:43:37:dc:97:
f9:37:1f:6d:3c:65:27:cc:34:12:29:41:76:eb:6f:1b:ac:ac:
1c:81:be:94:91:80:87:7c:93:ff:6e:9f:de:c4:12:2d:9f:e5:
67:32:d0:60:f5:bf:35:01:cb:80:ed:ca:d6:13:b3:7e:21:21:
36:1e:ef:ab:2c:1b:54:64:aa:8e:33:6f:4f:1d:1f:3b:d1:5d:
4c:66:f8:98:d5:d3:48:1c:a8:75:fd:1b:66:d1:21:ea:ba:2b:
da:35:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org