Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/IsBDTNupnclN-qYxPHgvHNZLqbo.roa
File: IsBDTNupnclN-qYxPHgvHNZLqbo.roa (raw, json)
Hash identifier: W61IfS/jsSVdMvWXaveDKgQHHe6wUsupiEg3vJRdmIk=
Subject key identifier: 22:C0:43:4C:DB:A9:9D:C9:4D:FA:A6:31:3C:78:2F:1C:D6:4B:A9:BA
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0731
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/IsBDTNupnclN-qYxPHgvHNZLqbo.roa
Signing time: Tue 29 Sep 2020 09:59:16 +0000
ROA not before: Tue 29 Sep 2020 09:59:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 135293
IP address blocks: 103.104.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 29 09:59:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=22C0434CDBA99DC94DFAA6313C782F1CD64BA9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:90:13:1f:49:8c:c2:1d:44:dc:41:43:fc:
4f:2a:59:01:d8:a8:8f:3d:33:af:b2:99:94:4b:d0:
91:2f:61:c3:c6:46:71:30:1b:18:02:d1:1d:40:66:
06:9e:fb:d3:e6:ce:74:16:71:cb:9a:a9:2c:c7:bb:
a3:b2:9e:77:af:46:46:76:6c:27:9c:fb:4b:b4:44:
04:74:64:88:1f:22:f4:1f:f9:94:75:96:f3:2d:b0:
5b:ab:cb:16:94:46:d7:20:e8:1e:18:e0:a9:e3:d1:
46:4c:13:71:3f:be:ea:75:ba:30:fd:60:94:5b:3f:
37:dd:a4:86:4a:54:6f:a3:f8:62:2f:ea:7e:8a:68:
37:a9:6e:a2:03:31:48:d8:2f:f9:ca:9f:13:d5:4c:
f7:79:a2:66:01:a9:9a:86:dd:a9:b9:99:58:1f:35:
70:a6:c6:80:cc:16:43:b7:09:2a:59:70:92:cd:7f:
82:40:68:82:c4:82:d3:9a:64:9f:af:00:c7:98:5b:
1d:a6:6c:43:e0:3d:19:47:84:4e:36:78:7e:f6:d6:
02:88:ce:5c:ef:96:5f:5b:f2:74:2a:a3:a3:87:40:
cd:69:42:0c:82:f0:b9:bf:67:23:1c:d0:a7:99:88:
ce:69:d8:d8:8b:77:43:b1:b6:63:be:8a:23:90:5a:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:43:4C:DB:A9:9D:C9:4D:FA:A6:31:3C:78:2F:1C:D6:4B:A9:BA
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/IsBDTNupnclN-qYxPHgvHNZLqbo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:09:63:30:ba:a3:e1:c7:cb:8a:5f:05:b8:33:a5:83:d3:1e:
8e:7a:4f:31:be:69:62:23:5f:4a:8a:e9:dc:31:92:68:66:4d:
ad:3f:7a:11:49:06:36:c4:0b:09:54:c9:4b:26:75:12:94:4e:
55:8f:d5:f2:39:34:8f:5f:53:72:74:28:43:44:fa:2c:73:3d:
db:ed:a0:28:de:00:00:c5:68:17:7a:9d:8f:6c:1f:6a:ee:95:
c8:81:44:54:d7:97:8c:39:34:62:dc:e3:f9:19:7c:54:4f:8e:
06:39:f8:30:e5:27:ae:f3:a5:35:fa:50:85:0c:ae:31:4f:6b:
a5:f0:28:cb:3c:3d:4c:4a:81:23:36:11:f5:52:74:59:e8:ba:
0b:5b:90:3f:0f:39:65:8c:54:29:83:dd:9d:9b:58:27:44:a8:
96:8e:79:19:34:2b:41:a0:66:4f:15:b4:83:d8:ae:0d:bd:71:
6d:ce:f8:c8:31:d5:4d:95:02:9c:7e:e3:8f:c5:51:8d:b8:1d:
b0:e4:d9:48:73:21:b7:7e:57:68:4d:9d:5a:51:99:fa:6f:92:
a0:db:fa:6e:a3:e9:70:69:59:e2:9b:be:1f:29:58:54:98:91:
d1:7e:06:e1:76:e4:16:53:35:87:bb:a7:ef:43:94:6d:62:41:
cf:4b:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org