Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/rTbGaNv0Os8Fl3Ykamh2JwcpEac.roa
File: rTbGaNv0Os8Fl3Ykamh2JwcpEac.roa (raw, json)
Hash identifier: aNFMw7STtEH+tJ85WsPdwJrh4uAhXTpjSZXcVai6SiI=
Subject key identifier: AD:36:C6:68:DB:F4:3A:CF:05:97:76:24:6A:68:76:27:07:29:11:A7
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0C5E
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/rTbGaNv0Os8Fl3Ykamh2JwcpEac.roa
Signing time: Thu 15 Sep 2022 02:51:06 +0000
ROA not before: Thu 15 Sep 2022 02:51:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131618
IP address blocks: 103.135.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 15 02:51:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AD36C668DBF43ACF059776246A687627072911A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:38:f9:d5:82:a2:ab:0c:e9:25:48:b8:43:
ff:94:fe:7b:8d:5c:fd:e9:6c:da:5a:1d:59:bd:9b:
16:68:f7:7e:92:6e:f5:c8:b7:14:ce:ab:7f:63:5b:
c0:a5:c8:61:5f:64:cc:7e:84:51:38:3c:51:52:b7:
0a:3f:a2:20:cf:b2:46:c8:ee:30:d8:ed:1a:3d:d1:
08:88:05:34:d8:ed:41:83:ee:26:bf:fb:e3:26:27:
6e:0c:f5:2f:85:e3:bf:57:9c:78:84:fb:d9:bf:ed:
1f:1c:33:9c:a0:81:f7:f1:9a:63:d9:ba:ed:72:c0:
78:a9:e3:b5:1d:0b:c3:6d:ec:da:4c:b4:69:00:83:
06:65:40:66:a3:e5:0d:e9:74:26:d9:84:a8:80:82:
d6:f8:85:06:64:16:80:25:e0:7a:80:a7:34:11:43:
fd:ee:70:57:25:b5:bc:e9:28:0a:8a:d7:28:6a:52:
ac:1e:ca:4c:c1:64:9a:c9:7b:73:80:ef:ce:2e:f2:
47:7b:b6:25:cd:98:22:da:87:08:dc:44:f3:c1:a3:
52:aa:15:13:42:6b:6b:31:f0:4b:85:08:a5:e9:e4:
53:12:b9:36:52:8c:9b:de:73:3f:e5:3f:19:bd:da:
c7:30:70:36:e4:9c:ed:df:5f:e1:cf:85:cd:85:50:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:C6:68:DB:F4:3A:CF:05:97:76:24:6A:68:76:27:07:29:11:A7
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/rTbGaNv0Os8Fl3Ykamh2JwcpEac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1c:70:cf:dc:07:fd:3c:14:38:2e:56:ed:fc:e0:f3:53:8d:
44:69:18:1f:16:8d:2a:53:bd:37:da:31:b8:ae:59:06:aa:6c:
61:19:88:26:02:2e:3b:4a:9d:57:e1:9e:e4:fb:65:57:bb:01:
1c:c3:ae:c3:03:7b:99:9a:cc:fe:2f:1f:9d:53:90:75:07:52:
12:9d:8c:0e:38:0f:d4:8a:14:e6:19:4e:d1:8c:d1:85:1d:97:
45:6e:59:a0:7a:4e:de:b0:75:71:7e:79:f0:57:e5:65:51:8e:
c5:14:40:03:be:16:ce:2b:ba:56:0e:a9:22:5e:3a:6b:ea:7b:
65:2d:2f:3b:18:af:93:9c:46:3d:ee:0c:b2:8a:29:f2:48:c7:
8a:43:be:f5:25:66:1f:94:a2:37:2b:2c:c3:5e:ff:12:62:70:
24:08:14:c5:ce:fb:15:2f:27:cc:94:a0:c6:11:76:36:4b:64:
22:70:62:48:23:fc:96:fa:bf:2b:d9:30:92:2e:88:00:78:3f:
38:9d:81:70:a8:d1:9a:44:2f:ee:05:28:65:5c:a1:49:2a:23:
62:06:f2:26:5a:0a:c1:d6:66:b2:0c:f5:f3:4d:72:57:4a:32:
8f:88:64:a9:1e:02:98:e7:08:31:7f:1f:7f:14:5c:cb:05:af:
72:74:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org