Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/0GqIdERh1Ytvw78iibaPv1UZK7k.roa
File: 0GqIdERh1Ytvw78iibaPv1UZK7k.roa (raw, json)
Hash identifier: x7zakGS8q+fn2RhCs91M0aaCWJui5BE0o0Mf1agFpbU=
Subject key identifier: D0:6A:88:74:44:61:D5:8B:6F:C3:BF:22:89:B6:8F:BF:55:19:2B:B9
Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial: F3
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/0GqIdERh1Ytvw78iibaPv1UZK7k.roa
Signing time: Tue 21 Nov 2023 15:31:00 +0000
ROA not before: Tue 21 Nov 2023 15:31:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131657
IP address blocks: 103.51.90.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Validity
Not Before: Nov 21 15:31:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D06A88744461D58B6FC3BF2289B68FBF55192BB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:4c:8a:62:a2:11:dc:cd:00:45:b0:1f:25:
01:ca:e0:8e:f1:6f:c7:27:af:f9:9c:4a:66:61:e1:
6b:eb:7e:c9:1a:46:ae:bd:09:29:6f:98:bf:8f:93:
dd:75:8d:de:5a:2a:67:d5:d3:aa:19:9c:fc:a9:f7:
15:26:a5:30:b0:22:c6:96:ba:eb:a9:0c:57:70:5c:
32:fb:0b:c0:59:2f:fe:be:74:2a:3c:21:4a:a4:65:
40:1e:48:ed:1e:6a:d0:32:7c:e8:c7:75:cf:05:de:
9c:74:cd:40:46:df:00:79:e9:7a:e5:6e:5e:73:0b:
97:08:ce:50:e7:80:e8:07:97:b9:af:dd:5c:8b:11:
a9:2d:82:b1:3c:ee:76:09:14:2a:69:a4:01:b2:b4:
f9:68:d0:74:54:fe:16:e4:82:fe:61:36:35:95:1d:
95:77:b9:a7:5e:b9:71:e4:9d:e1:69:e0:2c:f0:71:
41:a3:f6:fd:df:68:24:f7:4a:74:43:9b:f8:c7:55:
de:fb:5f:f0:d5:af:9c:0a:19:5c:69:fa:6a:d8:a0:
b1:4a:38:eb:a4:0e:b9:63:e7:f5:c4:9b:96:ef:c6:
c0:2b:9d:cc:7d:95:62:e2:70:34:9b:2e:70:38:ea:
a3:15:33:c6:a6:96:4f:f5:15:4a:ac:51:6f:d8:95:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:88:74:44:61:D5:8B:6F:C3:BF:22:89:B6:8F:BF:55:19:2B:B9
X509v3 Authority Key Identifier:
keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/0GqIdERh1Ytvw78iibaPv1UZK7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.90.0/23
Signature Algorithm: sha256WithRSAEncryption
39:ed:4c:2e:24:25:48:56:2b:e5:b3:ca:b9:cf:e4:20:8f:9c:
aa:21:84:1c:d9:75:d9:6a:52:5e:43:e9:95:34:34:12:a7:78:
d1:bb:aa:e4:9e:5c:b5:ba:f8:62:5c:f5:9d:1b:19:df:6e:0d:
40:f8:75:89:7f:ea:db:ba:1b:ed:95:8f:6c:3d:28:42:b3:ca:
70:38:36:aa:43:a2:ab:fb:02:98:92:f7:0f:e6:04:58:4f:01:
6f:37:a4:a9:6b:22:0f:23:d3:c3:0b:90:b1:37:cd:82:99:37:
46:df:c4:b1:69:7d:b2:2d:5c:2b:8e:d2:e3:6d:59:83:7b:41:
15:67:94:9b:37:e7:33:b2:c4:48:c4:df:0a:93:ce:f2:e4:e3:
31:58:66:9b:a7:d6:0e:d5:64:1f:69:f1:6c:43:f5:b1:89:5b:
ad:44:f2:48:5f:8f:fb:cc:37:99:3b:93:b9:27:69:e1:4d:1a:
2f:9c:33:00:74:02:ef:23:01:6f:66:ee:b7:6c:f1:bb:cd:44:
ba:9a:e8:e5:5b:26:b8:fb:54:67:33:5b:5c:91:87:09:31:aa:
33:79:d0:7c:9b:b3:b4:db:a4:7c:6b:03:b1:00:87:0c:8d:1b:
a1:12:22:1f:b3:e9:a6:69:65:24:5d:81:03:1d:b0:e7:f1:71:
3c:fa:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:26 2025 by rpki-client