Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vzK2Yf51syNi3OhF-8LZGu703z4.roa
File: vzK2Yf51syNi3OhF-8LZGu703z4.roa (raw, json)
Hash identifier: v6iYrktSGhowNey0PHrh6MBnCmywPAp45tH6saUhj6s=
Subject key identifier: BF:32:B6:61:FE:75:B3:23:62:DC:E8:45:FB:C2:D9:1A:EE:F4:DF:3E
Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial: 0732
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vzK2Yf51syNi3OhF-8LZGu703z4.roa
Signing time: Tue 29 Sep 2020 09:59:17 +0000
ROA not before: Tue 29 Sep 2020 09:59:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 135293
IP address blocks: 103.104.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Validity
Not Before: Sep 29 09:59:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BF32B661FE75B32362DCE845FBC2D91AEEF4DF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:5e:f3:55:a6:94:f5:e7:37:64:39:ca:1a:
46:70:db:9d:7c:52:f9:f0:e9:e6:bf:99:de:36:0c:
23:9e:ea:01:94:20:85:d1:27:d0:1e:fd:83:9c:0e:
c1:d6:5d:1f:2e:6c:47:d9:af:82:73:ad:66:84:68:
a0:70:e4:d1:ab:ce:ea:18:ef:06:19:7f:5a:4b:d5:
68:22:e5:18:b8:c0:2a:53:b3:e6:79:d4:51:c6:98:
31:39:1d:41:f9:d6:2f:61:ff:4e:7c:25:48:ad:a4:
87:b4:0b:ff:22:f8:61:dd:7f:ea:0f:f5:03:11:57:
b2:4f:29:c1:a8:d5:11:40:6e:18:de:f7:89:9a:87:
86:72:7c:1d:9c:90:ca:d0:eb:e6:55:b6:9f:90:4b:
5d:5d:31:45:b6:d2:90:74:9a:fb:f5:f9:e7:9b:e6:
77:0d:81:ad:e8:87:71:7f:ce:82:2c:a1:e9:ad:65:
c6:da:04:0a:05:47:ea:5a:0d:00:a1:e1:ca:b1:68:
89:da:99:7b:75:4a:0f:4a:fe:33:bc:c8:85:2b:78:
d6:71:81:33:48:d6:c0:b9:02:0f:31:a0:4a:d2:e1:
32:f3:08:a0:6d:6a:f2:91:43:5d:6f:1b:0b:6f:b5:
0a:8d:c8:f5:d4:ba:c2:a0:fa:c9:f1:7a:3a:9f:c2:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:32:B6:61:FE:75:B3:23:62:DC:E8:45:FB:C2:D9:1A:EE:F4:DF:3E
X509v3 Authority Key Identifier:
keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vzK2Yf51syNi3OhF-8LZGu703z4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.150.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b4:e2:fb:33:23:40:55:a1:3d:b2:2e:50:66:97:de:23:0a:
d8:aa:b7:d8:b5:8c:83:56:6d:08:60:90:cb:51:11:35:2b:e3:
cb:06:01:55:f0:a0:25:d5:20:df:26:7f:9e:c5:37:77:c8:f3:
40:fd:ff:59:5f:93:c2:db:c0:b9:94:ee:07:1a:e9:f8:c3:8a:
58:c8:a0:c4:50:2e:cb:5b:24:28:2d:86:ea:2f:b2:e1:fe:2a:
fc:98:fd:00:a9:02:a4:d0:32:d2:b5:9b:69:39:94:32:a9:64:
53:e2:be:1e:dc:07:b2:dd:fc:eb:e6:8c:cc:44:b4:6c:e2:00:
17:65:b8:02:7f:66:e3:d9:e2:9f:1b:1a:39:bb:8e:dd:de:93:
ae:9f:4f:83:6c:75:c8:b9:4a:12:39:f3:a4:68:7f:22:06:36:
69:e3:28:e0:e8:42:e7:e3:36:ff:c2:2e:c0:4a:f7:bb:a8:c6:
50:5b:6a:5c:30:61:95:d0:87:1d:a4:d0:4d:d6:14:d7:26:86:
1f:50:0d:31:fe:ac:2b:6a:b2:d3:b8:09:e1:ed:70:b9:5e:6d:
2c:99:50:d3:af:d1:01:6e:67:ec:c2:b3:9d:4f:ae:6b:ad:58:
97:66:10:6a:31:f1:cb:30:6c:13:0e:76:1b:92:a6:f1:87:e9:
5f:25:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:50 2025 by rpki-client