Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/T1C1DQIWdS1YnxiSto5n9f3cKC4.roa
File: T1C1DQIWdS1YnxiSto5n9f3cKC4.roa (raw, json)
Hash identifier: cxMoXzToIhSGEML6JOdd/0dS65dNlT57eD1MFWOvaSA=
Subject key identifier: 4F:50:B5:0D:02:16:75:2D:58:9F:18:92:B6:8E:67:F5:FD:DC:28:2E
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0B74
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/T1C1DQIWdS1YnxiSto5n9f3cKC4.roa
Signing time: Wed 29 Sep 2021 02:53:24 +0000
ROA not before: Wed 29 Sep 2021 02:53:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131618
IP address blocks: 103.135.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 29 02:53:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4F50B50D0216752D589F1892B68E67F5FDDC282E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:38:b5:98:5d:1b:07:ae:de:81:48:d0:d7:
49:84:b2:f6:14:f3:6f:8f:d9:fe:6f:af:d2:80:7c:
cf:c1:4d:d9:00:75:66:11:06:8a:aa:f7:7a:a8:65:
e8:7c:8f:1f:23:83:af:2b:c4:46:e0:2b:ad:de:92:
7e:4f:78:a0:23:97:53:5e:ee:af:4b:4f:46:73:8c:
88:dc:0e:53:89:0a:60:32:88:46:29:0e:02:f4:31:
0f:31:27:b0:e2:dc:81:b1:52:ec:8d:41:e6:a7:87:
35:4c:2d:88:d8:0f:73:36:c1:d6:ee:f7:35:20:b3:
3f:6f:65:f7:63:56:a9:39:e4:77:94:53:64:de:32:
be:47:a2:31:d7:da:f6:10:7d:a0:6f:6f:a0:6f:c4:
5c:b8:b3:b1:f3:ad:ae:e0:76:71:bd:40:cf:0c:da:
ee:27:c7:65:82:b6:43:f2:2b:40:0b:53:f9:40:e3:
86:44:41:46:b8:41:c6:f9:23:5b:b7:85:b9:8a:8b:
d7:cc:8c:8d:d6:4c:0c:d0:35:14:ae:bf:19:48:ed:
91:61:bf:79:2d:9f:e9:d0:be:1f:06:35:fd:94:4a:
13:2a:59:c3:9a:9d:66:99:c6:2a:72:f0:5a:a9:22:
fe:a0:41:19:49:09:1e:93:1c:33:77:e1:d6:2d:01:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:B5:0D:02:16:75:2D:58:9F:18:92:B6:8E:67:F5:FD:DC:28:2E
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/T1C1DQIWdS1YnxiSto5n9f3cKC4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.116.0/22
Signature Algorithm: sha256WithRSAEncryption
61:05:7b:da:f7:ed:50:43:e0:f6:c5:07:bb:8c:d6:92:74:7e:
af:5e:5c:f1:52:6b:c0:50:f0:d0:8b:44:12:4d:41:42:c2:a5:
46:f4:cb:e5:be:ac:6f:90:55:07:89:ee:1c:68:4e:8c:c0:1c:
6f:3f:86:7b:28:75:cc:70:7f:d3:ec:0a:c2:40:e9:f7:d2:73:
31:2d:68:cc:86:e4:13:53:0e:0a:49:55:48:50:61:74:6d:bc:
e8:ed:1a:ea:b7:08:99:3a:ef:c3:5f:b1:c5:de:1c:2f:1e:f4:
33:d6:18:0e:90:ad:fd:d6:d0:89:7f:cd:cd:da:43:1c:74:42:
f9:c8:f8:69:d5:55:93:75:30:d6:b0:6b:f9:9d:08:b9:d4:1c:
36:74:7a:07:49:4a:e4:3d:50:2c:fc:00:97:f4:cd:bc:48:2b:
ef:d0:03:c5:cc:90:d8:db:cb:9d:45:e6:9b:18:8a:d9:a2:ca:
bf:78:58:87:ce:eb:0a:81:03:14:dd:6d:a1:ea:fb:f2:cf:54:
f6:e9:4e:bc:4b:b0:f4:a3:4d:e0:2e:1e:61:71:9e:40:28:e9:
70:54:21:24:6a:18:a8:5d:98:b3:f0:a4:ee:47:10:34:55:a3:
e6:93:86:ef:b8:8f:12:49:63:1a:50:a0:6a:44:8e:b8:16:0d:
82:86:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org