Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/Ag9F-x3emhE_ZFiy4TV599Hdjp0.roa
File: Ag9F-x3emhE_ZFiy4TV599Hdjp0.roa (raw, json)
Hash identifier: RgeRxAoxA8lTXoSAXf5h+cBgvP4tsDZGYwxzHNPQtfQ=
Subject key identifier: 02:0F:45:FB:1D:DE:9A:11:3F:64:58:B2:E1:35:79:F7:D1:DD:8E:9D
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0997
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/Ag9F-x3emhE_ZFiy4TV599Hdjp0.roa
Signing time: Tue 29 Sep 2020 10:00:59 +0000
ROA not before: Tue 29 Sep 2020 10:00:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 103.135.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 29 10:00:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=020F45FB1DDE9A113F6458B2E13579F7D1DD8E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:2e:92:69:35:26:af:45:d3:2b:01:7b:c9:
9a:5e:5d:cc:ba:69:fe:6b:1d:7a:37:95:47:8e:ef:
ce:71:1f:a0:58:02:07:a8:55:eb:95:6f:83:37:95:
4b:78:3d:a7:7d:79:ea:ff:e1:7f:84:01:1e:a6:3d:
ba:52:5a:79:47:8b:61:a4:16:e9:cb:f4:47:7a:bd:
9f:2e:19:a9:12:8b:6a:5c:74:87:42:44:79:35:63:
fd:76:22:62:b8:2b:30:8b:7f:34:ae:02:f6:ba:42:
7b:a7:2e:d5:e8:17:53:20:ed:5c:46:81:14:06:b8:
63:b4:08:23:24:6b:96:35:b8:a3:05:dd:89:d8:40:
80:cb:5e:2a:90:cb:2c:75:f2:1a:90:43:b4:fe:57:
1f:88:93:fc:16:ae:50:26:4d:56:d2:ba:1d:08:ba:
14:6b:13:16:f9:10:b8:b8:1c:6e:1b:7c:d7:a8:15:
84:6e:31:8e:4b:6c:fb:2c:78:e0:fa:9c:37:03:4d:
5e:b4:aa:c6:00:a9:43:4e:d4:c0:c3:6c:12:86:dd:
e8:ae:a5:e0:ff:af:48:98:df:75:20:7b:bf:c9:34:
82:6b:5d:a5:9d:ac:e0:d4:67:b3:9f:f0:2e:5e:79:
59:ce:22:f2:57:51:3a:c1:25:22:06:c9:fe:17:de:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:45:FB:1D:DE:9A:11:3F:64:58:B2:E1:35:79:F7:D1:DD:8E:9D
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/Ag9F-x3emhE_ZFiy4TV599Hdjp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f5:bc:55:91:b0:cb:f0:5e:2f:f9:44:69:26:60:53:92:7f:
0b:32:ad:d6:1e:47:26:00:e4:b8:e7:a1:22:dd:73:f8:e7:84:
ae:ae:52:e9:2e:30:04:57:83:bf:da:30:42:a9:f2:14:85:fb:
6b:ef:d3:c4:eb:3d:89:f5:68:88:42:1e:61:4c:92:84:cc:4d:
fd:8b:77:76:d5:59:44:cb:dd:e1:d6:92:3d:82:5c:c1:11:ed:
9d:7f:34:4f:ea:bc:3a:72:db:92:30:48:3b:c5:ee:78:87:9d:
a7:ab:ea:0b:56:7c:15:32:b6:13:19:83:52:e6:57:9c:57:dc:
3b:6b:fa:35:51:a1:db:7c:dc:2f:db:3b:06:f7:56:71:40:54:
b1:c5:43:76:21:c9:b1:69:c1:ed:54:78:6e:b1:63:68:84:23:
99:d5:72:b6:01:d8:10:62:cb:c3:3d:fe:d0:46:b4:08:55:d1:
d1:42:28:81:2c:d7:76:2a:09:f2:4e:20:b8:16:47:a3:fa:56:
bf:d3:cd:4a:1e:f4:58:7b:29:d8:1c:24:df:50:f2:12:41:f4:
6d:e0:eb:c0:2c:23:76:cb:d8:53:f9:89:89:7a:18:f9:30:0f:
29:e4:44:2a:fe:e9:d5:36:6c:4d:0c:95:f9:5c:e5:b1:d8:ee:
9e:38:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org