Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/CT0g7yK8ft0UgVB2y9AjeiFqCfQ.roa
File: CT0g7yK8ft0UgVB2y9AjeiFqCfQ.roa (raw, json)
Hash identifier: up5L75E3jyi6IXmC/ivioGYOTYjuIU8uiFGTWLNQa+0=
Subject key identifier: 09:3D:20:EF:22:BC:7E:DD:14:81:50:76:CB:D0:23:7A:21:6A:09:F4
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 09FA
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/CT0g7yK8ft0UgVB2y9AjeiFqCfQ.roa
Signing time: Thu 15 Sep 2022 02:39:40 +0000
ROA not before: Thu 15 Sep 2022 02:39:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131144
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Sep 15 02:39:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=093D20EF22BC7EDD14815076CBD0237A216A09F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:12:63:52:75:14:79:37:13:12:dc:6f:11:
fa:a7:4b:ba:56:ce:17:b9:9e:64:8d:dc:d5:9e:e5:
28:ac:10:c5:0f:36:42:02:24:63:4d:78:67:25:16:
d2:80:89:73:5e:33:b0:21:91:61:06:fc:69:71:90:
a2:8d:43:ff:1a:c8:8c:80:41:f9:6d:74:e6:7a:2f:
e9:44:53:2e:bc:8a:3f:92:43:6b:2b:15:96:f7:7e:
21:11:02:e0:0f:e8:02:e7:df:64:dc:f5:1c:46:1a:
08:e9:e3:9d:27:16:50:11:15:02:cc:39:33:32:7a:
ca:0a:01:e7:d8:50:cf:e4:6f:c5:00:bc:a1:89:db:
4d:e7:40:cb:75:43:7e:8c:3b:5b:e7:cb:59:9b:cd:
7b:71:55:86:db:6f:85:fb:09:5a:87:3d:7a:82:47:
a9:68:05:bb:16:30:60:c2:60:7b:30:c8:25:67:3f:
8b:ca:62:18:01:8f:54:b2:a8:cd:56:65:7d:fe:19:
f1:ea:05:4e:0e:ab:9b:48:7c:03:b4:67:5d:90:ff:
aa:b2:7e:30:87:73:1f:05:66:d8:53:97:93:6c:ad:
df:04:9f:df:bf:5e:a9:c6:67:59:b4:36:08:8b:6a:
eb:05:56:f7:8e:80:f1:70:13:42:0c:43:b8:b9:e9:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:20:EF:22:BC:7E:DD:14:81:50:76:CB:D0:23:7A:21:6A:09:F4
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/CT0g7yK8ft0UgVB2y9AjeiFqCfQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:7f:b7:da:53:c1:f2:e1:b6:fa:0b:1c:eb:e5:98:c1:6a:bd:
0a:f0:b8:67:3c:fd:ad:fd:85:19:40:e3:31:81:c1:c4:75:61:
6c:21:77:eb:b4:1a:75:4e:d7:e1:4f:c9:91:a1:2d:1c:9f:19:
54:89:0b:ae:48:fe:63:a1:5c:f8:90:15:c7:5f:58:3f:40:f3:
40:a5:a0:b0:6f:09:79:2f:cb:19:a7:d8:1b:d2:3e:97:9e:6a:
ad:51:f3:21:06:b5:d4:d4:04:af:30:64:5e:e5:2d:8e:a8:d1:
52:c9:c8:8f:9c:dc:b3:b4:cc:0b:aa:4c:4a:0a:00:e0:3a:39:
9c:dd:50:7f:70:ed:a7:d2:b2:bf:4f:8e:9e:42:81:10:4e:78:
d0:f6:1e:44:af:00:cd:5b:27:3a:b8:0e:ac:12:9c:91:ba:16:
ce:3d:95:de:44:43:b8:bf:e6:97:a5:be:43:e3:1c:fa:51:a2:
e5:50:4a:52:f0:7f:c2:2a:28:7d:1f:4e:c8:fc:d7:e6:6d:05:
6b:c7:45:33:d8:86:09:0c:60:3a:90:27:a4:d5:16:78:f2:3d:
be:2c:70:42:81:5f:8c:c9:64:d2:94:a5:7e:35:68:97:5e:19:
d2:04:97:3e:5c:e7:21:73:43:22:a3:4f:b9:47:d2:1f:d8:70:
66:77:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org