Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/BJV0qoHtvfjb0Dos9ImTbx5Whcg.roa
File: BJV0qoHtvfjb0Dos9ImTbx5Whcg.roa (raw, json)
Hash identifier: k/LC5HRVelC3v8f9LcWs/apAPJSJ/aIJNME5I9UuZdI=
Subject key identifier: 04:95:74:AA:81:ED:BD:F8:DB:D0:3A:2C:F4:89:93:6F:1E:56:85:C8
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0914
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/BJV0qoHtvfjb0Dos9ImTbx5Whcg.roa
Signing time: Wed 29 Sep 2021 02:51:57 +0000
ROA not before: Wed 29 Sep 2021 02:51:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 135293
IP address blocks: 103.104.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 29 02:51:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=049574AA81EDBDF8DBD03A2CF489936F1E5685C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:38:51:bf:27:0b:2f:03:0c:6d:6d:eb:14:
0e:1c:d5:03:60:62:0b:87:24:f1:69:82:97:41:2e:
5f:27:6e:84:88:82:3c:d5:35:f3:7f:cb:70:19:73:
97:93:db:ee:e0:ea:0e:7e:77:ab:f7:d3:c5:81:e8:
86:02:85:32:22:60:de:c1:70:d5:f3:b5:0b:23:88:
09:8b:2d:09:60:dc:58:15:36:a2:1c:5c:9e:95:19:
f5:26:87:1a:b3:2b:f3:1d:45:eb:3f:c1:01:77:f3:
dc:c4:34:85:f6:6c:01:40:c7:37:c4:04:ef:ba:a6:
18:b6:3b:5c:b5:43:a3:5f:bc:96:64:63:ff:dc:2f:
2f:7e:98:62:4a:43:76:b4:3e:c1:e2:0a:f5:4c:a6:
86:55:74:a1:63:8f:b0:ec:e9:1a:9a:ef:e2:b3:d1:
25:a3:db:92:39:19:c1:12:8f:77:84:90:5e:b7:68:
23:7e:99:1d:d3:c8:7f:a9:b3:e6:84:b7:71:88:b5:
a4:3a:60:c5:f0:9c:b6:a4:de:00:47:b6:64:31:e3:
e2:d9:81:7f:28:c6:db:9a:a7:b1:67:3f:cc:e7:b2:
08:74:be:20:59:da:01:ab:e9:ae:bf:c3:ee:9c:1c:
f4:6e:31:52:04:03:7c:56:83:b0:ab:6f:11:af:a6:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:74:AA:81:ED:BD:F8:DB:D0:3A:2C:F4:89:93:6F:1E:56:85:C8
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/BJV0qoHtvfjb0Dos9ImTbx5Whcg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.150.0/24
Signature Algorithm: sha256WithRSAEncryption
32:82:66:e1:d6:d5:cf:b9:e6:28:07:39:a4:f0:4b:4c:4e:6f:
6d:33:dd:f4:5f:bd:4a:e5:47:92:41:56:7f:b1:93:e0:31:69:
bf:d3:fc:f2:90:0b:51:55:d3:d6:19:56:a7:06:0a:a5:f8:e3:
b7:e2:1f:df:4d:99:8c:7e:64:52:59:cd:3e:f1:61:fe:bf:c1:
ea:a8:5d:f7:32:8e:b3:a1:e2:64:62:8f:21:82:e8:67:d8:70:
55:49:6e:75:47:eb:08:78:d2:04:28:e4:80:50:91:e1:a6:29:
7e:f1:d2:7e:0d:a0:f0:3c:77:a6:ab:f3:8b:aa:87:f8:12:5a:
b4:e1:90:d0:de:69:85:5d:ed:4e:ea:94:22:6c:09:d9:46:13:
c4:95:4f:44:ce:31:eb:d7:83:12:f1:80:aa:09:07:ff:4e:9f:
22:ed:d4:5a:d4:28:f5:81:67:67:5c:0b:89:67:c3:8c:91:5d:
ec:a9:7f:47:c7:97:ee:e1:a1:c0:aa:fe:e7:78:3d:2f:71:04:
95:65:b0:80:44:1c:cb:c5:67:53:1c:bd:ae:a3:94:14:51:89:
52:47:03:1c:54:78:17:48:36:9d:0a:15:e8:bb:ec:1b:6f:ef:
c1:e0:70:80:67:da:28:88:79:db:60:2e:a2:ce:f9:aa:75:88:
e2:a5:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org