Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BOOKS/JF8nFcCBH8TjseboynkYPU4GqYw.roa
File: JF8nFcCBH8TjseboynkYPU4GqYw.roa (raw, json)
Hash identifier: V5c0jXw9JSXHpM7tp/ypo7LHifgnwhIpvMZxiLH+Llw=
Subject key identifier: 24:5F:27:15:C0:81:1F:C4:E3:B1:E6:E8:CA:79:18:3D:4E:06:A9:8C
Certificate issuer: /CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA
Certificate serial: 0FFB
Authority key identifier: 1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/JF8nFcCBH8TjseboynkYPU4GqYw.roa
Signing time: Fri 01 Sep 2023 08:24:55 +0000
ROA not before: Fri 01 Sep 2023 08:24:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 103.125.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4091 (0xffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA
Validity
Not Before: Sep 1 08:24:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=245F2715C0811FC4E3B1E6E8CA79183D4E06A98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:20:da:62:39:71:aa:51:e9:f7:70:04:d1:
5f:24:5b:54:95:cd:96:0a:b4:41:2b:20:01:ad:bc:
ad:c3:2d:47:ea:e5:75:1b:bc:fc:b1:35:65:dc:f1:
07:7d:cf:7b:e9:b7:dd:97:d7:58:68:a5:74:a9:38:
67:06:ba:f6:e3:fa:86:51:4f:13:bc:16:db:66:57:
98:3e:60:68:be:12:0c:73:95:e0:20:9e:08:7c:4e:
54:1d:34:72:4f:6b:f8:32:e3:45:06:c8:ad:de:58:
df:3c:4b:da:42:88:21:25:0b:32:f3:93:01:f8:12:
55:f9:5a:53:2e:8a:e5:02:01:0a:fe:b4:73:00:d1:
f9:18:fe:28:76:78:b4:85:41:40:cf:85:07:3c:21:
2c:e9:bc:f8:c2:12:e1:e2:aa:46:f5:19:46:41:85:
6a:ee:9a:27:a7:34:dd:65:b2:9b:b9:fe:da:87:17:
6b:7b:65:fc:e3:81:bf:87:e9:82:96:70:25:ec:16:
54:01:0a:c7:3e:b1:f2:a8:1e:8f:e2:88:b4:cc:d4:
bd:d2:96:32:f1:16:6e:57:e6:92:6e:b1:ee:91:ac:
1f:ca:66:6c:9c:94:cb:59:16:ed:f5:5a:7e:d0:42:
cb:25:23:cb:d7:4e:0a:cd:98:27:b4:85:e3:bd:fe:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:27:15:C0:81:1F:C4:E3:B1:E6:E8:CA:79:18:3D:4E:06:A9:8C
X509v3 Authority Key Identifier:
keyid:1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/JF8nFcCBH8TjseboynkYPU4GqYw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.228.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d9:70:cc:7c:76:49:1c:b6:f8:02:8e:17:12:a1:c0:d8:c8:
3e:9a:db:8f:24:77:cc:67:e2:d1:3a:8c:4b:2e:44:32:b5:8a:
80:e3:bd:83:08:e5:b2:ba:ec:05:b0:13:03:d6:10:3b:4f:b0:
20:ab:f3:46:8e:14:53:97:b9:3c:af:32:0f:bf:7f:83:f4:49:
83:48:ad:37:bb:3a:d1:b3:5b:82:58:e3:e4:81:a6:9c:e2:1d:
80:90:c2:9b:44:a0:b8:b2:e3:f6:51:e5:5e:a3:d8:08:a0:dd:
76:e8:e8:ee:67:94:28:bc:9f:f5:08:e4:e3:f2:ff:ab:44:b4:
67:c1:9b:98:24:3c:f0:dc:d7:dc:75:b1:65:37:cc:16:8a:4d:
49:ab:49:d8:f6:ff:31:63:74:70:85:8f:ae:a4:8c:7c:39:21:
3f:d2:eb:38:75:98:76:c6:9c:21:b0:32:69:7f:12:1a:8a:0f:
f0:18:08:f5:62:71:64:ff:7f:68:fd:b0:16:95:4e:e6:15:bc:
04:f4:09:eb:80:ad:ca:4e:67:07:30:cc:d2:08:2b:cb:57:0a:
6b:b4:8a:f6:d0:d9:cc:cc:3c:41:94:30:11:bd:28:2a:04:7a:
f8:2c:a7:6f:0e:2a:1d:8c:9e:88:4e:37:ba:5b:d2:c4:11:57:
db:22:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:04 2025 by rpki-client