Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/vTQd6YODRgjGv5y00K5TCeab-AU.roa
File: vTQd6YODRgjGv5y00K5TCeab-AU.roa (raw, json)
Hash identifier: WpMGaZZ9FxksGjwCXERiYGeRtAbNOu1yop+HyXbWM/I=
Subject key identifier: BD:34:1D:E9:83:83:46:08:C6:BF:9C:B4:D0:AE:53:09:E6:9B:F8:05
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0B72
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/vTQd6YODRgjGv5y00K5TCeab-AU.roa
Signing time: Wed 29 Sep 2021 02:53:22 +0000
ROA not before: Wed 29 Sep 2021 02:53:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131618
IP address blocks: 103.135.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 29 02:53:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BD341DE983834608C6BF9CB4D0AE5309E69BF805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:35:eb:ef:4c:84:6a:8d:b3:86:1a:6c:d0:
0a:fd:71:83:92:26:7c:b1:18:03:1f:f7:92:cd:ef:
55:3d:8b:09:7f:20:26:b5:7e:32:d1:44:6d:3e:a7:
dd:4a:e9:cc:36:0d:28:23:af:0e:8d:d4:75:79:df:
51:e3:69:04:51:a9:5a:2b:c8:88:94:fb:24:b5:e3:
d4:5d:22:7e:dd:2c:07:ff:c8:2a:17:a7:01:04:92:
6d:2b:ca:45:14:1d:65:d8:ba:e9:3f:fc:fc:5a:37:
91:34:e5:5f:e4:79:83:24:57:5f:8b:d7:cd:28:aa:
95:7d:a1:54:a9:37:78:80:67:b1:b8:09:97:b0:4f:
3a:0e:9f:21:d0:4b:a2:4d:b6:58:6e:e5:27:24:95:
03:ca:07:1a:19:96:38:27:39:45:ce:6a:2e:cb:04:
9b:36:07:58:12:4b:63:76:e3:09:4e:98:c9:d8:6f:
f4:51:dd:80:b3:0f:a0:96:5e:94:e2:36:de:ac:a4:
06:e2:d7:cd:ea:82:45:98:7f:51:0c:39:b7:f3:94:
fe:e3:4a:20:06:6d:52:16:86:d9:69:2d:32:95:f6:
df:81:7e:59:35:95:d9:83:8a:42:f2:bf:0d:be:e8:
11:53:57:de:02:8d:52:42:32:64:3b:28:4d:13:58:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:1D:E9:83:83:46:08:C6:BF:9C:B4:D0:AE:53:09:E6:9B:F8:05
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/vTQd6YODRgjGv5y00K5TCeab-AU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f9:3d:d8:cc:cc:11:9c:a8:1e:a2:75:5c:56:a4:6b:35:53:
37:1d:56:f1:28:ea:61:e8:40:54:23:e4:65:de:e0:e3:25:f3:
9a:85:2f:75:67:4b:01:16:4e:24:39:5f:87:4f:12:90:93:18:
d6:b4:72:2e:60:40:fe:2f:36:2f:e5:68:d0:53:13:fc:89:7d:
7f:06:be:0a:28:12:1b:fb:e6:ea:0e:a6:7e:64:50:33:cf:5d:
b4:60:57:4d:57:51:06:d6:9e:7e:2a:1b:60:9e:08:88:79:76:
1b:22:fa:e8:32:0d:ca:29:51:b3:c2:a8:b8:91:0d:06:c9:d2:
6a:0c:73:e5:d2:e5:7d:c4:96:ca:63:0a:8c:32:91:68:81:c1:
b8:02:6d:2a:a0:a7:9e:54:20:3f:eb:a4:05:0b:05:10:6c:35:
ab:8e:5a:07:da:1a:30:36:9f:6a:c6:5e:3d:d1:77:90:e8:4a:
70:a5:47:da:7a:ff:af:61:ee:77:60:b6:d5:b1:01:86:22:03:
4a:15:64:68:87:d8:81:22:ac:13:da:5d:9a:a1:72:89:66:fc:
c4:b1:a2:6d:1e:d9:cd:5b:4a:2a:0a:f2:bb:45:97:8b:f6:08:
54:10:22:06:00:83:02:a4:da:33:c9:1f:96:db:08:24:e6:89:
1a:05:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org