Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/8o-xMqjzKI9eCQKGoiXD0uFngeI.roa
File: 8o-xMqjzKI9eCQKGoiXD0uFngeI.roa (raw, json)
Hash identifier: 3hpmGXOHJ7Ud72f2M89QNSaN2ZMtgzKyKV6gd7F7Wlw=
Subject key identifier: F2:8F:B1:32:A8:F3:28:8F:5E:09:02:86:A2:25:C3:D2:E1:67:81:E2
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0ACE
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/8o-xMqjzKI9eCQKGoiXD0uFngeI.roa
Signing time: Sun 07 Feb 2021 13:00:08 +0000
ROA not before: Sun 07 Feb 2021 13:00:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 103.135.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Feb 7 13:00:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F28FB132A8F3288F5E090286A225C3D2E16781E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:cc:40:b3:49:bd:3a:8f:ca:91:a3:0d:91:
01:98:58:ff:1f:e3:6e:14:a9:a3:74:40:c3:c8:87:
c0:02:90:f0:a3:f5:a0:df:c6:a3:05:6c:b5:90:02:
fa:fd:cc:41:4d:f3:a1:bb:c5:96:6b:80:35:7d:28:
80:12:77:87:32:a1:ac:5e:1c:c4:c2:85:6c:63:0e:
54:1d:a1:22:07:4c:f8:28:e1:ea:ef:14:2b:58:e5:
05:02:e8:d1:b9:7a:1b:33:1a:b4:0b:c5:e5:f9:98:
19:70:6c:24:51:2a:85:31:82:ef:6f:02:5f:2c:ce:
b9:96:18:85:ac:7a:52:f7:72:c7:7e:4c:35:dd:66:
d3:33:fa:85:24:76:4d:ac:b2:3d:c6:68:4e:a9:3b:
82:4c:d8:60:63:00:20:7b:71:1a:29:e7:f2:36:c8:
f8:18:24:3b:35:bd:cc:9d:3f:52:1c:9b:94:40:6a:
19:73:d6:10:be:cf:c9:ee:3d:3b:5b:77:f4:f0:74:
05:77:df:be:c3:57:57:4b:93:31:f5:fd:02:16:ff:
bf:a6:7f:f5:fb:df:49:22:0c:2b:0b:f3:d9:4f:12:
61:c2:22:fe:a7:c4:3f:e4:54:a9:31:33:84:9c:66:
f1:7c:8a:04:65:6b:e8:56:3d:2b:a3:bf:3e:49:26:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:B1:32:A8:F3:28:8F:5E:09:02:86:A2:25:C3:D2:E1:67:81:E2
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/8o-xMqjzKI9eCQKGoiXD0uFngeI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:2d:76:9b:ca:c0:d3:0c:c9:05:bd:e2:36:e9:00:f6:1e:
f5:e1:a7:30:71:ed:76:93:f4:02:fb:85:01:09:bf:fd:e0:14:
ae:25:5a:a9:fb:8a:9e:dd:e5:92:dc:73:e3:5a:b7:3b:47:74:
5f:d2:c9:d0:87:63:87:5c:2a:45:fb:de:ec:65:15:99:cc:a0:
6e:e5:ac:16:2a:79:eb:50:0e:81:7a:78:15:92:f8:ae:33:71:
b7:bf:b9:80:31:f5:79:8e:66:10:43:a9:da:af:67:57:33:5c:
93:ff:09:be:c1:d0:34:bd:54:92:38:c9:bc:89:9d:27:2a:1d:
03:26:ed:03:3f:81:4e:8a:50:ec:78:90:bf:7c:94:5c:b2:2e:
f3:0a:94:22:49:fd:f2:f4:71:62:8d:2f:ce:23:24:42:91:01:
99:68:6f:e1:68:52:6c:52:7b:67:c2:37:76:3f:ef:61:2d:1a:
12:4f:0f:9a:5d:71:b9:c7:d1:90:05:35:a4:ff:57:0b:fc:4f:
e8:21:9d:d7:56:1e:3a:55:2f:15:62:a6:82:18:ea:24:77:87:
9d:30:93:03:a0:46:a6:8b:c3:a3:9d:47:01:a9:5a:0b:1d:93:
b9:79:bd:36:e5:00:55:03:18:87:ea:c4:6b:37:bf:4c:ba:62:
f9:ee:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org