Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/a4A-JeDWabsL5hcGHawN06c-TMA.roa
File: a4A-JeDWabsL5hcGHawN06c-TMA.roa (raw, json)
Hash identifier: +hTgfZxPVtnRyyBymyFPHtxToKoz+vI9dUxJTq0CdOg=
Subject key identifier: 6B:80:3E:25:E0:D6:69:BB:0B:E6:17:06:1D:AC:0D:D3:A7:3E:4C:C0
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 0A1A
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/a4A-JeDWabsL5hcGHawN06c-TMA.roa
Signing time: Wed 24 Aug 2022 07:17:51 +0000
ROA not before: Wed 24 Aug 2022 07:17:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 396982
IP address blocks: 103.122.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2586 (0xa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Aug 24 07:17:51 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6B803E25E0D669BB0BE617061DAC0DD3A73E4CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:c6:13:84:e2:bf:c7:c5:b9:f4:1c:a5:8d:
c7:52:b9:85:8c:0d:56:60:c3:20:46:b6:e5:a6:c4:
9e:0f:91:07:60:6a:b7:99:bf:6b:ef:ca:3b:8e:e6:
14:28:e2:10:12:a9:03:ab:d4:aa:72:6c:49:a1:0d:
47:8b:c0:3e:44:94:ee:f7:f2:2b:51:62:24:d4:39:
d4:30:0d:9b:f3:db:d8:85:56:55:ed:ad:98:98:e7:
25:86:b8:77:db:0f:49:07:08:10:9d:e4:1a:bc:59:
11:09:5c:58:7a:42:ba:f4:d1:b8:b3:af:97:bb:bd:
80:b4:70:8c:e3:96:5b:79:f3:c3:25:65:5b:89:3f:
61:a8:f1:c4:d5:78:95:d2:8d:0a:fb:65:9d:c4:54:
cc:53:c8:7a:76:b9:d1:5a:a7:be:41:ae:7d:d3:37:
ae:15:4b:1c:77:45:0f:88:ff:54:80:fd:72:0e:7e:
84:ff:6d:d8:e7:0b:03:b0:01:49:36:33:7b:57:db:
d2:34:f9:22:ac:e9:1d:da:29:4f:95:6b:b7:4e:80:
70:5b:00:08:31:c1:7f:f8:ed:46:12:4d:a4:a7:0d:
f1:a8:66:18:fa:5b:49:c3:fb:c1:75:39:f2:c7:2f:
a6:eb:68:a8:ab:50:e5:74:f8:fb:bd:29:45:09:c1:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:80:3E:25:E0:D6:69:BB:0B:E6:17:06:1D:AC:0D:D3:A7:3E:4C:C0
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/a4A-JeDWabsL5hcGHawN06c-TMA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:21:d8:28:de:a0:7d:0d:23:b9:f6:a1:aa:59:a4:b8:03:75:
42:df:af:9e:3f:03:c7:56:bf:7c:f4:7e:ff:02:38:4b:b2:f8:
1a:f9:69:42:ec:39:c6:63:23:0d:59:eb:22:05:65:c4:4f:60:
17:78:d2:ea:5e:56:c1:5e:72:a9:31:46:81:03:11:4e:b0:5e:
be:1e:56:d7:c0:19:9c:69:49:a4:de:74:0a:4a:06:f3:39:81:
5a:b6:cd:6c:52:55:97:46:de:da:05:4b:47:be:56:f9:13:fc:
5c:ef:58:5f:fd:3f:cf:74:4b:d2:ec:36:f5:60:63:f7:13:52:
54:bf:25:4d:40:cb:ff:94:83:88:54:4d:f3:23:9b:a1:29:2c:
fb:10:91:bb:66:3f:b5:a5:44:23:6c:8d:7f:08:ae:28:33:88:
19:5d:27:70:01:45:6e:c2:5a:3f:a1:92:8d:e3:68:2a:5e:3f:
05:6e:fe:8b:0c:28:ce:76:dc:b8:d1:a8:bd:07:41:e3:b9:32:
0c:35:b0:42:24:5f:7e:bc:81:77:c4:9c:0e:99:94:75:3b:1d:
bc:3d:e7:9b:27:c7:71:00:60:94:d8:60:f1:5b:2f:83:21:a3:
41:88:ec:8a:4d:1a:2c:48:0f:07:92:3a:31:14:e5:f8:6d:ff:
e2:f5:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:09 2025 by rpki-client