Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/XAC5vg8AxqvWACazRasMPLgPvFI.roa
File: XAC5vg8AxqvWACazRasMPLgPvFI.roa (raw, json)
Hash identifier: EKrvFcreRiFrqqZaSnaYVqeB0yBvQJJLUPB9HgfA1U0=
Subject key identifier: 5C:00:B9:BE:0F:00:C6:AB:D6:00:26:B3:45:AB:0C:3C:B8:0F:BC:52
Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial: 0B45
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/XAC5vg8AxqvWACazRasMPLgPvFI.roa
Signing time: Wed 04 Nov 2020 07:00:05 +0000
ROA not before: Wed 04 Nov 2020 07:00:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 103.134.80.0/22 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Validity
Not Before: Nov 4 07:00:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C00B9BE0F00C6ABD60026B345AB0C3CB80FBC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:02:ac:46:42:19:88:e4:2e:fe:3e:80:18:
e2:22:3d:ce:32:36:99:e6:b7:97:12:a1:de:4b:73:
20:e1:92:bf:36:d6:4e:69:e6:cb:b2:dd:db:2f:6b:
b0:58:f1:43:1e:52:77:5b:b5:b4:f1:78:83:52:f6:
8c:ae:b1:bc:78:1d:2e:1e:60:58:59:57:b0:e8:7a:
bb:11:0d:a2:ed:1f:b8:19:d0:08:33:6c:d3:fe:f5:
5f:56:0a:5a:eb:d1:0b:15:92:d5:19:1a:f8:35:91:
0e:d2:5e:ac:c6:78:a5:63:3e:eb:ea:72:99:34:fd:
19:66:49:5a:1e:9b:d2:cc:fe:41:38:a9:4c:f4:25:
2a:63:0c:39:5f:52:3c:5a:54:eb:14:64:77:02:0c:
d9:88:12:37:d7:1a:67:a7:de:d6:67:6c:a1:1e:b5:
c1:f0:b7:5f:d8:c1:02:6f:6d:0a:5e:91:b4:4c:db:
56:23:19:73:cd:21:e0:8d:2a:69:45:63:be:98:3a:
90:ed:7e:9a:07:68:66:02:b1:d6:00:c7:ee:16:57:
b7:a9:9c:9b:06:40:4c:42:e4:6a:b1:f0:ac:22:9d:
ce:40:ed:a7:85:7d:65:d3:ce:ab:fc:af:e3:3c:23:
04:3f:0a:23:0f:da:66:35:72:a3:1c:cd:9c:d5:07:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:B9:BE:0F:00:C6:AB:D6:00:26:B3:45:AB:0C:3C:B8:0F:BC:52
X509v3 Authority Key Identifier:
keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/XAC5vg8AxqvWACazRasMPLgPvFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.80.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a0:12:23:e8:84:9b:94:78:f0:a7:ce:a0:9c:26:28:b1:ac:
37:f2:4f:b4:ba:39:c0:f3:7f:4e:2f:e4:32:ef:1d:b8:28:2e:
60:2f:18:04:38:d7:e3:aa:8c:59:5f:98:46:60:49:6c:a8:c5:
cf:e7:95:6a:15:0c:44:ce:91:12:e0:2d:ec:43:c7:ce:5b:5e:
e5:7b:6c:08:fb:e9:89:ae:18:3b:af:cf:75:ba:d3:ec:04:31:
6d:40:60:9c:37:c6:91:cf:f4:d3:a6:6e:82:c2:1a:10:36:bc:
9e:88:a9:63:21:2c:ad:98:eb:f4:b8:32:f7:c4:2e:2c:25:09:
76:27:86:98:36:72:af:92:89:b1:5e:ab:c9:85:f3:21:a9:24:
54:44:22:d8:cf:9d:52:7b:ff:cc:38:fd:6b:bd:34:54:eb:db:
c0:a9:50:9f:f3:12:25:ac:be:7f:44:f7:d3:44:93:2c:0e:42:
3f:3f:e7:a5:f3:4a:af:2f:c4:06:97:26:71:ee:c3:fc:02:61:
e3:29:ee:b7:b7:59:76:30:81:3d:78:a3:b2:6b:eb:86:7b:75:
f0:ef:ec:be:c2:85:97:6f:ff:a0:a1:01:e6:c0:ac:6b:22:f9:
2d:86:69:1a:3d:84:61:55:50:35:c3:99:be:9a:b6:53:1a:37:
4b:21:8f:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org