Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/nJpl_HJKkC80fS3V2gbtNDhC-Zs.roa
File: nJpl_HJKkC80fS3V2gbtNDhC-Zs.roa (raw, json)
Hash identifier: JG71JwRzdsp0/Hof8d7L/LGlfvVb2D/itqcUUu0YPq8=
Subject key identifier: 9C:9A:65:FC:72:4A:90:2F:34:7D:2D:D5:DA:06:ED:34:38:42:F9:9B
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 0A29
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/nJpl_HJKkC80fS3V2gbtNDhC-Zs.roa
Signing time: Wed 24 Aug 2022 08:45:30 +0000
ROA not before: Wed 24 Aug 2022 08:45:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 396982
IP address blocks: 103.122.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2601 (0xa29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Aug 24 08:45:30 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9C9A65FC724A902F347D2DD5DA06ED343842F99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:15:97:75:44:2f:1e:b5:75:b6:8c:68:9d:
a0:0c:07:f6:12:f4:e3:c8:c3:14:7b:0b:de:94:4a:
5e:a2:c4:75:4f:9c:59:2d:33:68:d8:f9:b8:26:4c:
bb:61:6a:37:1e:a6:ff:b7:bb:31:43:4e:78:b4:55:
2c:00:72:c1:d7:70:7f:43:47:11:d6:33:3b:73:31:
7c:2b:f4:91:0d:bb:01:4b:81:cb:59:99:48:e5:92:
52:ad:1a:69:c9:5d:9e:db:00:b2:5a:37:6e:57:cc:
30:17:ef:f8:f4:9a:fa:44:28:6f:cf:e5:8a:b0:4b:
4d:aa:84:5b:2a:bd:08:d5:df:f8:ca:b4:f7:59:18:
81:fa:56:ab:be:5f:13:e3:d6:b0:6a:86:79:4f:fb:
35:ba:46:34:57:0a:48:53:76:39:27:75:19:ab:e1:
74:e9:03:fe:7d:70:5e:c4:df:b0:16:a1:47:06:95:
6e:63:d4:85:dd:78:e6:86:21:5d:ad:97:fb:b9:e7:
06:92:af:eb:10:bb:e2:7b:8d:1d:ba:53:2a:d1:5d:
ec:5a:e5:0b:29:f6:9d:97:3f:24:40:5a:62:b1:4b:
09:39:1c:c9:da:27:83:08:50:af:d3:09:c1:7b:c5:
aa:a8:4a:97:81:d4:84:9e:ee:95:2c:95:ee:7e:ab:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9A:65:FC:72:4A:90:2F:34:7D:2D:D5:DA:06:ED:34:38:42:F9:9B
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/nJpl_HJKkC80fS3V2gbtNDhC-Zs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.19.0/24
Signature Algorithm: sha256WithRSAEncryption
50:08:51:b5:5d:53:54:85:08:bf:11:02:24:e1:b8:14:5e:dc:
79:44:af:5e:9d:79:20:86:d5:f7:e1:c6:e5:1d:72:f7:78:5d:
ee:0e:8f:e7:61:f7:c0:83:27:7e:8e:e5:35:21:7c:86:40:0f:
3e:7c:27:a7:91:0e:06:c3:83:64:4e:d1:30:52:4c:c3:dd:79:
90:e7:e7:8d:7e:4a:d1:40:87:a2:14:a0:de:3d:75:b5:22:47:
d6:bf:1d:d5:31:0c:5f:3c:2c:33:2a:b0:4f:e9:44:5d:20:7e:
31:72:60:f3:48:d2:57:37:76:55:a3:63:78:60:32:07:70:84:
fc:19:47:05:9b:8a:e6:a2:ac:92:44:2e:7e:d4:af:4e:9a:fa:
27:f7:4f:9b:10:fa:4e:a5:29:e7:96:3e:7d:b3:ba:c2:a4:02:
2c:1e:1e:65:8e:b6:2a:21:3b:df:b9:ad:3c:eb:79:be:1a:76:
e9:0d:75:04:a2:64:53:4c:cc:a8:e1:00:1d:bd:1b:dc:e8:38:
36:00:02:6b:1e:4c:47:7b:03:73:60:6f:7f:47:bf:21:51:7c:
e7:0d:38:5f:cf:a2:00:43:b2:d5:bb:62:dd:2f:86:b2:f0:5b:
e8:9a:c6:17:2a:d6:c3:92:d4:cd:0c:81:b6:0e:b8:28:45:22:
0f:13:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:10 2025 by rpki-client