Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/rhjBrj6nSkmZ5A9ZnUEMthxfBS0.roa
File: rhjBrj6nSkmZ5A9ZnUEMthxfBS0.roa (raw, json)
Hash identifier: sOmSvYBw3nAJG2+vSMQb58ZLlI59ll0B2mOiXjsdMog=
Subject key identifier: AE:18:C1:AE:3E:A7:4A:49:99:E4:0F:59:9D:41:0C:B6:1C:5F:05:2D
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 086F
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/rhjBrj6nSkmZ5A9ZnUEMthxfBS0.roa
Signing time: Sun 07 Feb 2021 13:08:05 +0000
ROA not before: Sun 07 Feb 2021 13:08:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131144
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Feb 7 13:08:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AE18C1AE3EA74A4999E40F599D410CB61C5F052D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:76:eb:4b:07:c9:47:60:8c:fe:b7:ec:e7:
6f:52:47:82:8e:18:5f:ae:44:0f:c1:ee:9e:89:bf:
68:d9:4e:a3:e2:98:02:48:00:84:2d:41:91:04:a2:
f1:cb:d6:21:2a:a7:d8:e0:f4:dd:e1:30:51:f0:43:
08:10:63:29:93:a2:41:84:87:37:8d:58:06:48:ed:
e9:5a:a0:4d:01:9b:f6:b8:17:10:42:df:f9:0b:97:
c9:90:59:fb:03:29:e1:d7:13:fd:68:3f:4d:2d:43:
fa:96:10:5b:20:17:2c:92:4d:14:1b:f5:00:a7:09:
61:6b:07:e8:aa:af:2c:3f:c1:ab:d5:2a:fd:ea:1c:
1a:5c:9e:fd:9e:25:33:40:bc:f5:93:d3:63:ce:77:
65:19:8e:e7:5c:b2:e0:0c:05:60:91:3e:5f:93:a6:
64:56:a7:1c:92:75:c4:48:36:31:cf:48:8f:1a:a5:
e6:8f:8e:d0:fe:ca:d3:c5:f6:2b:bc:ed:1f:03:62:
1c:4b:ee:a4:ec:c3:5d:fc:44:59:d5:31:cb:48:a7:
e8:28:9c:b9:76:b0:6b:e4:aa:09:60:5f:06:ba:4d:
34:5f:ff:ab:90:61:6b:84:7d:43:3b:51:fe:05:cd:
c4:5e:d1:90:1f:2a:a1:2f:b2:91:a7:a4:8f:b4:1b:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:C1:AE:3E:A7:4A:49:99:E4:0F:59:9D:41:0C:B6:1C:5F:05:2D
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/rhjBrj6nSkmZ5A9ZnUEMthxfBS0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:0c:07:28:81:1c:e5:57:e3:00:5c:4d:7d:0e:cc:cb:84:2f:
06:0d:fc:ee:c9:a3:d5:85:86:d9:f9:b3:90:19:d2:df:56:78:
58:40:59:a5:d4:de:2f:fb:72:e1:3a:b9:0f:e6:33:56:26:40:
72:39:64:4b:e2:e7:5b:f9:da:e8:e3:33:fd:5c:76:72:cb:03:
15:76:8d:5d:42:51:f5:f6:ac:52:4a:19:96:44:81:e5:0d:db:
51:93:4b:9c:81:2e:7d:56:6d:64:24:9c:4c:a0:a1:93:e6:fc:
57:f1:69:e5:6d:e6:f3:47:49:94:77:02:e3:58:b1:4f:73:1b:
32:0b:a1:ad:a3:bb:e7:d4:5e:44:21:43:9b:49:50:38:d8:aa:
54:65:68:1f:6b:e1:e8:ac:05:a7:46:73:55:7e:3f:8b:77:e3:
9b:95:62:0a:f9:28:d9:4b:a5:77:0b:71:a5:41:17:02:4d:f9:
98:e6:84:ff:bc:99:c0:75:7c:51:a5:ef:90:54:20:c1:93:00:
9a:70:a6:da:62:e7:c5:06:52:8a:25:dc:a5:ff:ff:56:ba:bf:
2e:3d:b4:3e:0d:eb:e2:bb:08:ba:b3:0e:d8:3d:06:27:db:8f:
25:04:2a:5a:f9:44:3a:e6:48:65:21:2d:38:7c:98:78:87:14:
ff:c7:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:34 2025 by rpki-client