Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa
File: ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa (raw, json)
Hash identifier: 5raCmIELEVqimA3nydE0cYiF0TX7Ks9dRmHcHeXywKs=
Subject key identifier: 66:36:C1:B2:B5:76:F7:A4:02:8C:55:A4:41:6B:F5:03:66:1C:DC:AF
Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Certificate serial: 0185
Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa
Signing time: Fri 01 Sep 2023 08:30:02 +0000
ROA not before: Fri 01 Sep 2023 08:30:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.183.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Validity
Not Before: Sep 1 08:30:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6636C1B2B576F7A4028C55A4416BF503661CDCAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:bd:5b:0e:e6:c6:bb:24:e9:04:f1:7d:08:
1c:d7:5d:a9:7e:72:59:1e:44:dd:0b:95:eb:9a:a3:
6f:11:0e:89:90:a9:04:cc:3c:3e:5b:37:6e:40:94:
b6:47:13:3f:42:28:62:10:9c:0a:b8:5c:87:36:e6:
48:94:79:92:b0:98:c0:f6:c0:12:e3:ca:46:f9:a0:
95:80:cd:dd:7a:13:4f:02:26:b0:6f:9b:0c:bc:f2:
ef:bf:17:46:b5:35:98:be:b9:a4:6a:a6:ec:28:82:
20:9d:ae:9c:4f:aa:00:ec:22:bf:11:99:0a:6e:db:
90:f9:5e:38:e3:ac:0d:7a:ce:26:cb:de:8e:7b:e1:
4d:c3:fb:61:eb:8e:68:d5:3e:2f:73:30:ce:76:72:
f0:d3:5b:1e:c2:96:c7:f9:61:32:64:04:c6:c0:a6:
28:18:38:b5:e9:13:25:48:87:bc:b8:6a:76:42:1a:
75:0e:49:0c:c2:53:34:cf:f7:33:b2:94:a5:8d:91:
69:8e:e7:97:df:06:a0:2e:7c:97:83:a9:ee:91:19:
87:3d:b5:31:8b:4b:d7:5c:ce:12:e1:9d:43:16:4e:
c1:8f:66:3e:70:32:bd:20:be:00:9c:08:64:17:99:
35:d6:f2:72:17:97:99:e1:a8:9c:d9:d7:4e:35:88:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:C1:B2:B5:76:F7:A4:02:8C:55:A4:41:6B:F5:03:66:1C:DC:AF
X509v3 Authority Key Identifier:
keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.78.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d9:98:a7:88:19:81:f0:0d:44:0e:e1:11:a2:a2:5c:d7:21:
7b:e4:70:3e:b7:f5:10:f1:2d:fc:2b:3f:d2:88:0a:00:f4:a0:
f2:a5:f0:16:ab:d0:42:43:40:f4:77:f1:f3:22:12:48:1f:84:
3f:df:0d:14:ee:13:dc:7d:6a:94:ba:f9:04:8b:50:79:76:ef:
c8:ba:00:be:26:2d:9d:47:8b:b1:42:3b:91:a7:02:c4:77:1b:
95:da:1d:35:8c:d3:9b:26:2a:af:63:b4:4b:21:05:87:72:6a:
d5:0f:37:15:8f:46:16:c3:39:b7:64:a7:32:18:64:78:ed:2b:
20:11:b7:98:f1:bc:34:83:23:1e:64:ca:13:b0:66:fc:02:df:
9e:4b:6b:ff:70:23:16:2b:12:5d:6d:68:f2:60:94:aa:63:fe:
2e:6d:2e:e1:63:34:22:2c:a3:07:31:63:0f:8c:e9:2a:f8:d5:
75:54:04:b0:95:8c:68:05:cc:97:14:25:2f:60:98:1c:d5:f5:
30:49:ed:38:5c:68:31:59:83:35:eb:19:d2:11:56:0e:9b:b7:
e3:31:5b:59:a8:73:44:50:cc:92:e3:de:62:ad:a2:5e:b2:24:
8a:14:7e:8b:5e:89:de:27:c1:9e:80:8c:d2:29:7f:3e:08:6e:
6a:20:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:32 2025 by rpki-client