Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/UO9MBsK5VUV5e-G8NSVPsdStCgg.roa
File: UO9MBsK5VUV5e-G8NSVPsdStCgg.roa (raw, json)
Hash identifier: elmuYmpzuqSaluLEWHpwfNKFK5Qw+/AB0/uQqHNWEq0=
Subject key identifier: 50:EF:4C:06:C2:B9:55:45:79:7B:E1:BC:35:25:4F:B1:D4:AD:0A:08
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0B2C
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/UO9MBsK5VUV5e-G8NSVPsdStCgg.roa
Signing time: Wed 29 Sep 2021 02:56:05 +0000
ROA not before: Wed 29 Sep 2021 02:56:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 103.138.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 29 02:56:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=50EF4C06C2B95545797BE1BC35254FB1D4AD0A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:f8:a9:19:ee:b5:55:6d:c0:cf:66:0a:25:
58:7d:0b:50:da:13:8f:e9:15:71:27:fb:65:44:c6:
82:84:c9:c2:7f:d8:72:a2:06:96:5e:42:0d:90:52:
99:16:70:8e:a7:11:43:14:33:15:5e:39:3c:8c:8c:
b0:b7:b8:4a:ee:40:3b:91:31:c2:d5:50:27:96:ef:
45:ba:38:e4:7b:58:bb:cf:60:c7:1a:ed:08:f2:ee:
5e:b5:59:52:0b:eb:1f:59:6c:25:d0:8f:e2:a8:ef:
27:89:26:c8:1c:f5:2b:a5:7d:44:71:95:f8:f0:d0:
fa:60:98:ba:09:e6:f6:51:a5:a6:10:e7:7c:e0:bf:
56:f8:d5:2b:84:0d:71:3a:e8:21:04:e3:51:64:42:
26:a9:d7:88:d0:fa:c5:b1:4d:22:b4:15:28:dc:cd:
4f:0e:5b:d9:96:7b:8b:59:c3:b5:18:9b:2b:cf:3e:
14:f5:c0:75:07:97:3f:2d:58:77:4c:bd:52:0f:ee:
72:87:8e:21:84:df:66:98:17:a8:8a:88:23:09:1a:
12:4f:cc:47:70:e9:e7:19:99:9a:9f:37:70:32:ff:
ab:bb:2e:f8:02:7d:71:01:a8:bf:25:f7:1a:48:28:
e5:8e:0c:cf:49:e8:11:de:94:f5:a3:48:7f:1b:a9:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:4C:06:C2:B9:55:45:79:7B:E1:BC:35:25:4F:B1:D4:AD:0A:08
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/UO9MBsK5VUV5e-G8NSVPsdStCgg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.106.0/23
Signature Algorithm: sha256WithRSAEncryption
38:37:c8:aa:7d:e4:b0:dd:59:be:92:54:cb:68:81:b2:b1:96:
ae:5b:8c:16:92:8c:33:ae:ae:39:da:0a:d6:4b:07:66:b0:1d:
0c:04:91:14:9c:67:2c:c2:55:e8:5d:2d:7f:e8:2b:c1:9f:a7:
1e:9b:f3:b5:dd:80:64:37:48:b8:4b:f2:6a:01:fd:f4:37:6a:
5a:09:df:40:98:2a:5d:bc:6b:21:41:0f:81:83:20:56:05:4a:
16:19:72:a5:f2:0f:03:24:a4:8e:6f:d6:7f:55:3c:b1:c4:cc:
92:18:3d:12:dc:c8:a6:8b:b3:13:ad:17:84:cc:6a:72:29:7e:
23:38:fa:01:c6:03:d9:3d:b0:19:9b:94:72:69:7e:a5:cc:0d:
67:90:c3:cf:9b:89:3a:be:07:40:86:59:38:dc:17:17:83:23:
20:bb:25:a3:c1:8b:33:7d:b3:9e:59:b4:59:33:6e:8a:0f:3e:
ef:d0:4a:41:b3:4f:d6:58:49:b2:33:7a:c4:bd:2b:a5:bc:13:
ee:f3:53:12:50:08:17:cc:73:e9:54:13:a0:d5:98:ce:60:65:
b8:2f:0c:9f:af:44:06:13:36:95:34:08:ae:60:64:00:e4:ad:
e0:11:81:81:91:d1:e1:53:03:4c:f6:31:01:3c:e1:b8:61:82:
90:b9:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org