Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/TW-kyzOiA3iPSHJk4Lyv4iK_vD8.roa
File: TW-kyzOiA3iPSHJk4Lyv4iK_vD8.roa (raw, json)
Hash identifier: OXMJjb52Wrmxr3oWRu9Cgth21mi1ckcxJID09l5XT/k=
Subject key identifier: 4D:6F:A4:CB:33:A2:03:78:8F:48:72:64:E0:BC:AF:E2:22:BF:BC:3F
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 07A3
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/TW-kyzOiA3iPSHJk4Lyv4iK_vD8.roa
Signing time: Thu 15 Oct 2020 08:11:40 +0000
ROA not before: Thu 15 Oct 2020 08:11:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 20473
IP address blocks: 103.122.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Oct 15 08:11:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D6FA4CB33A203788F487264E0BCAFE222BFBC3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:2e:c5:7f:f0:5b:10:75:bc:bc:6f:4f:08:
e0:3d:b5:dd:a3:d4:97:79:cf:09:b7:e0:90:88:b0:
11:aa:2e:12:41:44:e9:a8:6a:67:28:89:6d:00:9e:
79:8c:63:e5:30:d0:38:ab:0b:83:34:85:b3:cf:9b:
ec:51:38:b0:7f:ad:63:39:f0:56:7d:c6:73:5a:7d:
07:3c:de:2a:7b:03:6f:b6:03:97:54:52:b2:b0:d0:
e4:48:b6:69:b8:9b:71:dd:ee:1f:bc:fa:e4:11:3d:
fd:60:01:d1:23:f1:75:4f:3e:1b:84:5e:08:a7:60:
c4:7d:98:55:18:a2:8a:55:d1:26:ef:db:75:5b:17:
6c:b8:00:0f:ea:b1:4d:8f:0e:41:96:1b:2f:aa:de:
d3:66:21:68:2f:1e:a2:cb:d5:75:de:06:f3:54:e9:
f2:5e:ba:1b:93:1d:a2:fc:5c:68:ba:ca:7d:11:ac:
c3:36:6f:fe:e6:41:28:8c:ec:bf:a3:00:f0:31:d4:
94:fe:39:23:71:ad:e0:56:db:8d:c1:fd:c7:40:8f:
ef:bf:9e:18:73:fd:89:af:9f:0e:cd:95:f6:99:16:
7c:0e:8a:0c:f1:df:67:88:a5:5f:ba:fa:1d:4a:43:
60:74:b1:d8:fb:a8:1c:6e:1f:8a:cc:cf:a5:bd:b6:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:A4:CB:33:A2:03:78:8F:48:72:64:E0:BC:AF:E2:22:BF:BC:3F
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/TW-kyzOiA3iPSHJk4Lyv4iK_vD8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.16.0/24
Signature Algorithm: sha256WithRSAEncryption
42:06:7a:ae:a5:c1:82:03:cb:e5:e5:64:d9:0d:19:24:60:da:
6c:ec:ea:5c:bf:f7:bc:c7:ff:33:90:22:e9:6b:17:8e:ed:d0:
b6:2c:51:94:91:88:6f:d4:3d:b2:93:c9:08:e9:d8:01:ec:54:
b3:c1:63:d4:e0:c8:56:02:a7:d8:3a:b2:46:04:3b:7b:ad:1e:
d2:c1:1a:b3:97:9e:f2:b8:75:2a:4e:29:88:48:19:e3:ce:3e:
27:7d:11:39:31:8f:89:0d:08:d5:24:b4:2b:8d:cc:58:c6:35:
90:b8:82:ee:90:56:75:bf:6b:23:23:fe:43:1b:74:f8:18:86:
5c:ce:0c:bd:4e:a9:1e:0c:71:28:f0:6c:83:a4:a5:40:a2:53:
4e:24:6b:6c:bb:2d:1f:15:c5:72:c9:92:f5:7c:25:c4:a0:e2:
95:87:3d:82:7c:cd:ba:db:b6:e8:7a:40:e0:ef:fb:df:27:e7:
ca:c1:9e:61:23:a4:dd:3b:60:55:b9:e1:bc:5e:fe:cd:1b:bf:
09:9d:14:24:c4:19:ea:7e:a5:44:c6:3c:e6:16:d1:e9:91:26:
dd:09:ed:8e:7b:ba:86:45:f7:4f:44:08:a1:ea:33:aa:a8:7c:
99:4e:26:03:88:38:b0:8b:fb:e6:5d:cd:24:57:37:4a:ff:03:
68:d9:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org