Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/gFZgLXGDtbIjjokNW4iXBh--j1w.roa
File: gFZgLXGDtbIjjokNW4iXBh--j1w.roa (raw, json)
Hash identifier: Znvy73kN8KlOnHIwvFFzqOq5i/+m1am3t9ndKnyBbqg=
Subject key identifier: 80:56:60:2D:71:83:B5:B2:23:8E:89:0D:5B:88:97:06:1F:BE:8F:5C
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0AD2
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/gFZgLXGDtbIjjokNW4iXBh--j1w.roa
Signing time: Sun 07 Feb 2021 13:00:11 +0000
ROA not before: Sun 07 Feb 2021 13:00:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131618
IP address blocks: 103.135.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Feb 7 13:00:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8056602D7183B5B2238E890D5B8897061FBE8F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:71:17:10:0f:49:62:9a:20:80:4e:b9:d8:
3c:8c:51:3f:b5:f4:25:7c:4e:21:8e:d6:96:46:8c:
51:f4:08:e2:18:cb:52:72:1a:81:65:a0:a0:58:63:
61:e5:76:18:de:bd:69:ea:11:ff:64:31:15:0b:6a:
43:2d:ca:28:5a:0a:a4:b1:1a:7d:83:8c:7f:04:92:
05:02:31:2c:93:00:ed:f7:8c:08:0f:b5:fb:19:34:
c0:cc:8f:cf:13:83:c7:a3:c6:df:82:6a:d0:50:67:
0c:bd:36:ec:9f:a2:9c:45:1f:55:55:52:03:2e:6e:
f6:67:0a:e1:e3:47:2f:12:31:06:97:9b:5b:ac:18:
04:07:b0:c3:5a:da:47:79:ea:27:05:eb:1a:4f:d4:
91:b9:49:78:80:4a:ed:82:f7:21:4b:59:0f:5a:4d:
ac:55:46:72:cb:47:94:3d:cf:84:35:ca:20:9c:35:
ab:c2:73:9c:1a:34:c6:f0:ca:20:f6:5b:1e:76:34:
2a:51:55:0f:63:5a:d1:7b:4d:65:0b:77:0f:08:d7:
49:e6:1d:20:51:19:83:14:a6:f8:d1:2b:cd:83:dc:
14:25:ee:08:b9:a4:f9:93:b7:4b:45:39:f7:80:e5:
cd:f6:f2:9a:d3:40:50:df:ca:3d:db:7b:12:54:5a:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:60:2D:71:83:B5:B2:23:8E:89:0D:5B:88:97:06:1F:BE:8F:5C
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/gFZgLXGDtbIjjokNW4iXBh--j1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3e:91:9d:4c:9a:16:10:1e:40:f2:d6:94:4e:b8:8e:49:d7:
9e:56:6a:f8:5d:42:ea:30:bb:6f:57:c3:d7:b2:5b:cf:db:92:
cf:6b:ee:fa:74:e2:88:08:b9:db:f7:7b:3e:85:48:94:5b:a5:
28:3c:12:ad:12:c1:36:3f:48:d1:9c:62:2a:5e:49:3f:89:bb:
f3:12:40:85:63:f3:93:e6:47:b4:59:a8:c7:fd:df:5f:b8:94:
37:d9:ce:20:5c:be:e9:39:3b:5a:2e:6b:f0:e5:34:83:8b:6c:
18:2a:66:e4:6b:28:1e:c4:84:3f:7a:f5:c8:ef:75:10:ac:b2:
db:67:c4:a6:02:c4:b2:f6:af:b9:dc:17:8e:62:fa:60:aa:24:
ff:ed:d0:c3:1f:4d:17:74:5f:d8:67:4d:5b:c0:3a:f0:9c:6b:
a2:5e:e6:90:f9:67:93:3d:17:9a:ca:f1:a2:62:d3:5f:9e:06:
08:18:ae:9e:67:92:0d:6a:c1:9d:91:b4:59:08:f3:1f:04:87:
79:70:78:33:6c:70:14:b2:7b:3b:ff:de:f7:df:f2:84:db:75:
d9:f1:58:d9:a8:14:d9:69:85:6e:b4:f4:f1:03:72:4c:64:63:
1f:ab:69:1a:5b:a3:08:7d:97:b6:05:fd:fb:84:7b:49:49:09:
7c:c2:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org