Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/_PxOp8BYnv7BQe13bTMo2GECdc8.roa
File: _PxOp8BYnv7BQe13bTMo2GECdc8.roa (raw, json)
Hash identifier: KPrkl5E98xG4crXic33CYNNZ/mikhk7fDVxCpXhvKHo=
Subject key identifier: FC:FC:4E:A7:C0:58:9E:FE:C1:41:ED:77:6D:33:28:D8:61:02:75:CF
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0C18
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/_PxOp8BYnv7BQe13bTMo2GECdc8.roa
Signing time: Thu 15 Sep 2022 02:37:04 +0000
ROA not before: Thu 15 Sep 2022 02:37:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 103.138.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 15 02:37:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FCFC4EA7C0589EFEC141ED776D3328D8610275CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:81:c7:7a:85:82:39:f1:34:9f:12:90:1c:
dd:ab:27:47:94:38:8b:b6:19:ec:6e:ab:39:d6:77:
a7:97:71:25:76:31:7d:4c:6f:1a:15:f0:d2:33:32:
6b:5e:06:96:84:7a:da:8d:b7:da:a4:48:f6:60:22:
ff:08:f4:12:70:74:84:c2:92:ad:97:a9:5b:f0:a4:
5d:06:b2:81:9c:0b:d2:36:73:2d:ba:76:26:91:59:
06:bb:67:8c:e5:90:0d:fe:5f:a2:1a:86:87:93:6a:
ed:58:31:65:2b:27:19:e9:6d:25:7d:7f:8c:84:ec:
98:ea:3d:1b:55:4e:5f:db:3b:58:16:3b:89:e8:3f:
96:5a:91:1a:20:b2:1d:ba:0d:9d:56:1c:7c:d9:2d:
d2:4d:fe:06:e2:b1:77:fb:21:35:dd:3e:77:f8:31:
0a:1b:a8:a4:19:90:b6:d6:ef:6b:4f:ed:40:d7:e6:
61:60:15:5c:ac:54:88:a7:2c:c2:96:63:05:de:5b:
5f:82:09:d5:8d:0c:46:7f:d1:f9:92:89:05:e3:f7:
7b:c6:9b:cd:2a:b2:52:91:eb:b8:bd:c6:22:71:e5:
99:1c:bd:60:0f:95:78:50:c8:5f:61:b5:71:45:b7:
34:6f:79:20:cb:d3:53:a4:84:75:85:1c:5c:09:60:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:4E:A7:C0:58:9E:FE:C1:41:ED:77:6D:33:28:D8:61:02:75:CF
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/_PxOp8BYnv7BQe13bTMo2GECdc8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:92:2e:6a:67:36:c0:62:1c:f8:8d:ce:d3:09:59:93:30:71:
76:e9:de:5b:18:3f:a0:94:e8:7a:1a:08:fd:70:11:05:b7:73:
f9:9e:17:a2:30:4f:42:7d:24:83:5d:b6:09:d2:59:61:a9:9b:
57:db:28:e7:d6:31:bb:2d:5a:9b:a7:de:01:34:83:27:37:25:
d8:53:89:65:fb:af:99:fd:38:93:09:ad:e6:e8:1e:d4:08:2b:
03:47:f0:b3:9b:6d:d3:17:97:58:d3:42:7a:02:bd:1b:5a:bc:
10:c7:c2:02:7b:f6:9f:6c:32:84:f6:d0:75:f7:10:ad:76:a1:
74:ba:ba:1e:eb:1d:db:72:7c:61:63:71:af:6a:8e:94:09:91:
d7:7a:fe:86:b7:4a:e1:95:bc:50:ec:a0:aa:3d:f5:93:d6:48:
b9:7f:4f:a0:e8:ec:a8:6d:5e:88:8f:1f:1b:d5:b7:65:b6:3d:
d4:e3:5a:5a:d3:bd:c5:b9:ba:19:e6:74:43:09:42:3f:d2:0b:
72:a7:35:6b:e8:e0:02:9c:0e:07:ed:d5:c1:dd:bb:0b:37:67:
3e:00:7f:0d:ff:53:95:2d:dc:b9:ad:fe:41:01:68:12:e2:07:
e3:0d:60:0c:b9:d9:15:7c:7a:1a:bb:4b:09:73:e6:e3:a1:db:
63:b4:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org