Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/DUlalYq17WywC0t6iPZB14lXDeg.roa
File: DUlalYq17WywC0t6iPZB14lXDeg.roa (raw, json)
Hash identifier: /DYQ7e2L76Q/2qQKnFL7wqrbA/BV8D+yBPiq/pX/vIY=
Subject key identifier: 0D:49:5A:95:8A:B5:ED:6C:B0:0B:4B:7A:88:F6:41:D7:89:57:0D:E8
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0C5E
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/DUlalYq17WywC0t6iPZB14lXDeg.roa
Signing time: Thu 15 Sep 2022 02:51:05 +0000
ROA not before: Thu 15 Sep 2022 02:51:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.135.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 15 02:51:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D495A958AB5ED6CB00B4B7A88F641D789570DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:5d:b7:14:e4:d8:66:d0:65:9b:57:65:52:
c4:86:53:aa:fc:7e:f2:b2:1d:6f:a4:10:4f:10:fe:
b0:28:31:de:e4:3c:8a:cf:25:6a:4d:ea:99:43:61:
d0:d8:87:36:5c:27:7c:e4:1d:e6:4b:3c:51:76:5a:
4d:f6:0a:fa:1a:84:33:d9:96:4d:f0:0d:6f:f8:19:
1a:16:2d:cf:56:4a:8e:68:8c:4a:ef:64:11:a2:cc:
ed:84:2a:0c:24:4d:35:15:8e:b0:41:f2:10:cd:d2:
47:6c:a3:1d:56:be:76:cf:9b:45:34:dc:ca:9a:41:
41:10:35:87:6d:a1:14:57:88:1f:08:44:e0:3d:55:
ff:be:98:5c:59:0d:13:39:1b:44:f8:09:4c:74:21:
b6:59:a5:2e:72:a3:e1:7d:96:16:73:ea:1d:5a:4f:
e1:cf:57:b2:b7:b0:7f:d9:93:bb:ee:ec:0d:57:0c:
f1:bd:66:42:41:f7:6a:75:6d:98:e2:55:a1:01:2d:
f5:82:b1:22:80:e5:0c:f6:fd:b8:f6:30:d6:31:a2:
e2:c7:2b:29:0d:d9:3b:d3:17:c3:88:88:ae:e7:1d:
35:84:6c:8d:92:8c:d4:a0:ac:57:19:bb:a6:2d:92:
73:2e:6d:61:79:dd:0e:6e:f5:6a:9b:d4:9f:11:ef:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:5A:95:8A:B5:ED:6C:B0:0B:4B:7A:88:F6:41:D7:89:57:0D:E8
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/DUlalYq17WywC0t6iPZB14lXDeg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9e:63:11:ce:ee:95:6b:b0:e2:5d:5c:be:33:88:db:c7:63:
3c:e8:37:55:06:1b:22:b4:21:9c:70:9d:ea:5c:6e:e5:08:aa:
df:b9:9b:48:24:02:5b:19:b6:c2:be:9c:ad:39:be:3d:aa:0d:
de:1c:65:66:38:bc:4e:69:03:f5:04:86:90:36:8a:96:ca:48:
90:08:01:fa:a2:bb:14:3e:cd:79:58:f4:e2:36:20:66:32:c3:
22:42:af:7d:86:91:77:9f:4c:06:ab:e2:3b:10:55:58:8b:ed:
f8:f6:1d:d7:a7:e3:14:22:bf:ad:8b:ec:18:9e:b0:a6:26:56:
37:3a:50:84:ea:13:91:73:76:fb:14:ea:d8:b2:a4:bc:a9:c6:
69:15:eb:f2:bb:19:86:3f:66:6f:05:c7:28:ea:2b:12:6e:85:
e7:39:f3:e6:88:82:34:fb:ad:a8:bf:d8:91:fb:38:50:36:7d:
53:2d:5d:c6:47:4c:6c:2f:c2:fc:c5:48:d7:18:ca:f5:3f:b0:
5c:19:22:31:cd:00:b2:0b:dc:c5:80:fc:62:00:d7:1f:e6:0d:
d0:49:ae:c0:0c:06:30:8e:e7:49:fc:32:02:15:6a:58:ef:c7:
41:ab:cb:59:b1:dd:d9:16:2c:bd:4d:42:54:44:95:a7:b3:79:
09:58:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org