Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/avpkZNKgLBwSuRnhqofR5dwypSI.roa
File: avpkZNKgLBwSuRnhqofR5dwypSI.roa (raw, json)
Hash identifier: He9Q7UZrPhfjIOqb3tlZHZ2+vwLDgbrpkjksV4tibfA=
Subject key identifier: 6A:FA:64:64:D2:A0:2C:1C:12:B9:19:E1:AA:87:D1:E5:DC:32:A5:22
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0AD0
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/avpkZNKgLBwSuRnhqofR5dwypSI.roa
Signing time: Sun 07 Feb 2021 13:00:10 +0000
ROA not before: Sun 07 Feb 2021 13:00:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 103.135.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Feb 7 13:00:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6AFA6464D2A02C1C12B919E1AA87D1E5DC32A522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:e3:98:2d:5a:70:2e:45:70:77:a6:61:7c:
b7:d0:06:37:5c:b2:58:56:1d:b7:b2:21:db:c8:81:
fc:43:86:8c:fb:3d:70:a9:d2:ce:e0:4e:fd:3b:5d:
4f:6b:7a:a0:a9:75:1d:84:4f:64:d6:8d:46:72:4d:
c5:72:84:dc:a3:a4:66:31:50:40:d4:4f:70:dc:36:
67:d3:3a:fd:c7:53:4c:d5:53:7b:b8:54:10:80:12:
cc:cb:96:95:75:53:c1:fa:dc:74:aa:91:72:6b:d9:
a6:be:8e:16:41:e1:1e:af:40:73:ff:ee:43:ef:ea:
81:b3:8a:b4:9a:e1:b9:02:6f:65:69:ce:32:38:54:
25:7b:e7:53:0f:c9:95:51:81:44:f3:3a:30:84:0d:
d9:ef:82:39:40:63:2a:e1:b6:d9:b9:53:02:ee:a5:
dc:26:0b:84:ed:15:e1:b8:97:21:5f:e7:64:ab:12:
7e:50:15:72:9b:df:c3:07:4d:be:84:06:84:45:53:
0e:78:f5:c8:20:a6:dc:de:43:13:fc:a1:08:f6:11:
40:71:82:b1:8c:6b:88:6d:1c:a5:67:75:56:cf:56:
bb:ef:42:b7:e5:1f:fb:c1:4d:ea:e0:81:0f:58:76:
15:6f:79:b3:1b:c0:29:cd:85:ed:dd:73:8b:29:6e:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:64:64:D2:A0:2C:1C:12:B9:19:E1:AA:87:D1:E5:DC:32:A5:22
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/avpkZNKgLBwSuRnhqofR5dwypSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:49:f4:fa:59:2d:c2:52:04:25:1d:94:ac:8e:fd:77:be:21:
a1:02:20:19:58:a3:4d:66:e6:44:f4:c2:1d:07:6f:17:21:10:
9e:78:09:d2:8a:0f:7f:40:10:cd:eb:ae:c2:1e:a5:fe:79:fc:
59:fe:a8:18:a9:87:0f:7b:cb:6a:1a:dd:6d:ae:eb:0b:b8:64:
10:60:69:86:17:29:c7:25:e6:ca:81:1a:fe:03:f3:52:d3:1e:
31:ce:28:2d:da:53:d5:f2:a7:ca:3e:ff:16:6a:8b:bf:19:89:
4f:16:79:f5:00:3b:79:fe:90:e9:f7:41:4b:24:96:95:25:27:
e1:75:9a:b7:03:31:6f:30:39:9d:2b:e4:13:7b:22:d8:64:bf:
65:56:f4:fc:28:6f:b0:ec:26:02:ce:cf:1c:6f:60:9c:a3:68:
c3:a1:2e:44:06:09:34:b3:c2:79:df:d7:c7:38:6b:7f:ca:36:
f2:b1:d0:75:cb:9a:e8:b1:9a:f4:a7:c5:4b:b9:14:ae:42:3a:
9f:ff:72:0a:93:64:c5:5b:af:12:50:d8:4e:82:51:c4:15:05:
d4:c3:fe:36:b1:98:c2:25:96:3d:2d:88:eb:21:5b:07:2c:91:
fd:d2:77:f1:1d:64:ca:3f:22:68:20:f3:83:30:e9:02:cb:85:
ec:75:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org