Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/i-0Qm5_JX5IMgng47vFo0yxI5e4.roa
File: i-0Qm5_JX5IMgng47vFo0yxI5e4.roa (raw, json)
Hash identifier: Vfnr1flvAdXAaden9ywI7B5GyEO45fZ5WLjRAsyPQzw=
Subject key identifier: 8B:ED:10:9B:9F:C9:5F:92:0C:82:78:38:EE:F1:68:D3:2C:48:E5:EE
Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563
Certificate serial: 17
Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/i-0Qm5_JX5IMgng47vFo0yxI5e4.roa
Signing time: Tue 22 Mar 2022 00:01:20 +0000
ROA not before: Tue 22 Mar 2022 00:01:20 +0000
ROA not after: Tue 21 Feb 2023 08:34:00 +0000
asID: 63893
IP address blocks: 103.180.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563
Validity
Not Before: Mar 22 00:01:20 2022 GMT
Not After : Feb 21 08:34:00 2023 GMT
Subject: CN=8BED109B9FC95F920C827838EEF168D32C48E5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:b0:1b:cf:33:ab:e1:0c:f4:57:d5:66:fb:
bf:74:46:36:fb:8f:45:d4:0a:b0:e9:2a:ea:de:ba:
e7:b9:d0:9d:03:09:37:84:e4:ca:88:b5:cc:50:c2:
e3:36:48:9f:46:35:76:06:2a:de:27:69:19:99:0c:
bc:1a:5d:dd:25:d1:f7:f1:e0:10:10:58:23:85:5c:
07:ef:81:6a:a4:18:88:c2:28:e8:57:1a:3c:4a:16:
c9:e1:25:b7:b1:38:9d:08:0d:f0:64:86:07:0f:5f:
d2:e3:c4:58:ef:b6:7d:23:13:3c:6c:58:be:74:bc:
d6:ab:3e:04:fd:2c:ab:d9:31:fe:d8:f7:f2:fa:e1:
cb:e4:29:1e:0d:1c:65:fd:a2:99:fc:ee:ec:02:b7:
14:83:c9:47:9f:5e:fa:a2:00:d3:49:ad:58:40:8a:
fd:4a:e3:32:49:39:da:6f:c5:ec:33:c4:cb:40:cc:
97:1a:01:83:ba:e0:8e:1e:79:43:ab:c5:9c:50:cc:
54:89:58:cf:53:50:61:96:9c:e8:08:d4:1d:b6:a5:
09:b6:d3:f5:68:2d:ea:2c:75:d4:b2:1a:e3:44:6a:
f3:b9:a8:50:3f:e6:33:ef:ad:6c:ff:a7:a1:6d:10:
8f:f5:82:64:4e:b3:c8:a9:08:4b:59:f2:29:9f:e9:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:10:9B:9F:C9:5F:92:0C:82:78:38:EE:F1:68:D3:2C:48:E5:EE
X509v3 Authority Key Identifier:
keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/i-0Qm5_JX5IMgng47vFo0yxI5e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.16.0/23
Signature Algorithm: sha256WithRSAEncryption
63:3c:b1:37:ad:5e:51:51:27:10:1c:10:f8:b8:d8:a6:48:da:
12:2c:58:51:07:07:b2:25:9c:32:6a:2b:e9:d8:9b:96:ac:ad:
f7:90:d3:fa:81:4c:fe:c9:8b:d3:e4:21:e2:4d:9b:cc:00:58:
ae:4e:a8:8c:9e:ac:23:e4:f0:e6:7f:c7:0a:c1:2d:92:19:e5:
60:0f:12:3d:a2:05:ba:02:1b:2b:2d:74:f7:96:91:f9:01:6f:
1c:e3:8f:4d:f5:df:54:5b:62:bd:c4:4e:3b:36:8d:11:e5:ee:
d1:51:63:71:88:ea:ce:49:bd:cb:c1:0a:75:c9:01:5d:37:83:
6b:fb:b1:85:be:96:0f:97:26:c8:50:50:4f:59:29:e4:a8:22:
f5:f6:79:ec:f9:cd:d3:60:8d:27:17:df:89:07:b3:27:47:bc:
5a:63:64:93:dc:45:9d:86:9b:09:79:7b:85:70:e4:df:a1:47:
5f:d4:20:ed:51:f7:7d:87:50:bf:e4:09:0a:1c:52:0f:d4:55:
20:8a:65:00:82:cc:ba:3f:de:02:45:2d:be:7d:45:8e:3c:ab:
73:d4:a7:45:3a:89:41:cd:67:08:b4:d5:cd:c3:65:f0:2f:13:
4b:fc:89:3b:a0:7c:e8:b2:a6:18:49:eb:b9:b1:3d:5e:4a:8c:
38:e0:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org