Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/VI74xBh5H-GQqN0WKfffWerR8-I.roa
File: VI74xBh5H-GQqN0WKfffWerR8-I.roa (raw, json)
Hash identifier: YeIn0+Ows1wWyrrezqbsFjTb0AMH3uJKEaeWl+CpKAA=
Subject key identifier: 54:8E:F8:C4:18:79:1F:E1:90:A8:DD:16:29:F7:DF:59:EA:D1:F3:E2
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0C5E
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/VI74xBh5H-GQqN0WKfffWerR8-I.roa
Signing time: Thu 15 Sep 2022 02:51:06 +0000
ROA not before: Thu 15 Sep 2022 02:51:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.135.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 15 02:51:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=548EF8C418791FE190A8DD1629F7DF59EAD1F3E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:14:c1:b8:e9:6a:2c:d2:6e:cb:a8:65:48:
e0:8a:26:db:f6:7c:8e:7b:53:ff:cf:67:50:17:09:
3d:46:31:42:6e:40:ea:e3:9a:50:3a:06:ed:59:24:
75:54:6d:00:56:d3:31:8e:83:34:3e:c7:8f:ab:a2:
02:fa:42:29:97:44:e4:38:28:ee:74:0c:01:98:6e:
4b:ac:fe:00:3c:aa:51:cf:7c:39:22:c1:3b:15:94:
55:be:26:ba:c2:2a:0f:ad:70:49:e9:fd:95:ef:c2:
8b:d3:c0:1e:96:6d:0f:80:70:7b:ea:5a:d2:9f:85:
15:41:bc:1d:e3:f9:fd:18:2e:a5:4b:c5:38:18:ed:
57:97:1d:f9:0c:44:bc:e9:36:cd:91:ef:f6:53:d8:
72:7e:cf:c4:b3:ef:b4:88:5e:d1:75:fc:0c:e3:f8:
aa:17:7e:f0:77:e3:88:1c:84:91:bb:82:60:d3:69:
f7:91:df:4e:95:ee:51:35:08:04:c5:ed:75:57:6c:
ae:9d:ae:0b:18:62:e6:89:9e:87:1b:4a:b0:15:b2:
97:29:54:80:11:d1:b3:80:10:ce:0f:0c:96:45:0c:
b8:34:fe:ae:66:f2:90:d4:e5:d1:ef:b6:40:f5:91:
1d:ca:4d:b6:11:e2:d2:3d:21:ac:b3:63:f1:cb:bd:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:F8:C4:18:79:1F:E1:90:A8:DD:16:29:F7:DF:59:EA:D1:F3:E2
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/VI74xBh5H-GQqN0WKfffWerR8-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d4:a5:30:a5:91:62:05:2e:5f:ce:9f:6b:3d:2b:83:cf:26:
bc:4e:0c:1a:db:bc:21:30:f1:de:b2:06:a5:12:21:11:11:5b:
f7:27:14:f3:e5:0d:46:75:0b:8d:31:df:3a:a7:43:57:60:36:
79:83:fa:4c:1c:d6:7c:9b:a1:22:49:c9:2b:c4:27:95:71:39:
b5:5a:4d:32:a8:28:a6:f9:1f:72:a6:07:d8:1a:9b:31:98:4f:
20:5f:0d:e9:96:57:3f:4a:29:b2:c6:1e:fe:3f:4a:ff:33:b7:
46:69:b6:71:5d:a2:06:c6:14:49:f4:1e:d6:41:7c:73:fc:cb:
99:5c:70:ec:42:73:1b:f5:d0:58:34:57:6f:c5:3c:b0:4f:c4:
44:98:ab:d0:9f:07:75:a9:6c:c8:e4:9c:80:e1:1e:ce:a6:17:
f6:36:31:6d:6d:0c:52:8c:db:07:19:b0:6c:68:45:a1:d6:d5:
b2:3d:d1:3f:1c:e7:cb:1e:83:69:55:9d:f6:94:b7:5b:55:a9:
e0:03:34:aa:2e:53:f8:36:6a:2d:9f:9d:66:b8:cf:ca:c9:3a:
89:1a:ec:f6:db:33:22:1c:fa:31:3b:9c:4c:2f:3e:b9:6a:f3:
e9:2d:29:b2:39:64:50:d0:55:20:01:5a:e3:c0:a9:7c:de:2f:
09:ed:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org