Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Qw9blHoHOhUbUQaI2nlxZKlGtsM.roa
File: Qw9blHoHOhUbUQaI2nlxZKlGtsM.roa (raw, json)
Hash identifier: D2JgCOTc/Iacb45mp39K3LqbQBoZJ4QuyCSXOygN4DY=
Subject key identifier: 43:0F:5B:94:7A:07:3A:15:1B:51:06:88:DA:79:71:64:A9:46:B6:C3
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0741
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Qw9blHoHOhUbUQaI2nlxZKlGtsM.roa
Signing time: Tue 29 Sep 2020 09:59:52 +0000
ROA not before: Tue 29 Sep 2020 09:59:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131629
IP address blocks: 103.119.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 29 09:59:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=430F5B947A073A151B510688DA797164A946B6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:4b:91:07:df:d6:cd:66:1b:8f:a0:66:83:
65:64:f7:85:e5:99:b6:3d:fe:66:c8:55:7e:2f:bc:
65:61:e3:34:b4:34:7e:ac:14:92:c6:d1:f6:4e:af:
a6:bd:ca:d7:59:cd:ca:d2:54:a6:66:5e:4f:cf:20:
c4:e7:a7:84:30:5c:6e:77:85:3f:0b:5e:d7:46:cc:
67:35:01:59:2a:14:df:fa:eb:67:1f:a0:44:50:4f:
66:d4:a3:28:f0:84:a0:b1:49:28:68:6b:3c:ac:5a:
6d:6d:74:ee:07:8c:69:ed:3f:ea:9e:c8:da:9a:97:
71:14:f6:87:3c:db:d4:fa:25:93:e1:4c:f1:40:2d:
39:0b:73:ac:64:62:cf:9e:94:66:f7:b6:eb:ce:90:
9a:c8:52:c1:f7:09:85:ac:65:ef:f5:6c:df:2f:e1:
c7:e1:39:eb:73:04:b9:52:0a:49:34:e1:9e:25:3a:
32:81:e2:19:1e:5a:7f:9e:12:fb:eb:e6:6d:c2:af:
e2:a6:da:6e:40:18:f8:62:21:2f:d1:27:98:33:ac:
b0:c8:ea:60:23:9c:5b:e8:95:e0:c2:a9:6e:fd:6f:
5f:b5:4a:8b:0d:6e:21:82:3b:ce:3a:97:09:62:51:
b0:b0:61:da:63:73:d1:14:64:e0:12:50:43:eb:ed:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0F:5B:94:7A:07:3A:15:1B:51:06:88:DA:79:71:64:A9:46:B6:C3
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Qw9blHoHOhUbUQaI2nlxZKlGtsM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
43:5b:73:c8:57:e0:ea:51:dd:17:11:a7:6b:d9:85:79:64:9f:
5a:e5:2d:7b:40:7a:9e:d7:65:f7:ef:a8:4c:40:02:67:12:44:
83:e3:9e:70:0b:52:b8:a6:2a:aa:92:7a:78:65:13:90:38:61:
0e:91:b4:b8:6a:fa:9c:0b:f0:24:ac:4d:2f:c3:dc:85:37:3f:
1c:91:36:8a:2f:f3:7b:54:44:a9:05:e2:1b:ed:1f:e8:4e:45:
e3:31:6f:57:ea:ea:32:10:01:ad:c1:8a:c9:14:68:a9:df:7f:
21:dc:ec:03:98:0f:d4:9d:ab:82:4b:49:89:42:22:3d:15:be:
b6:8b:16:d0:06:e6:e6:f2:b3:99:07:8a:d4:50:5d:dd:fc:e1:
c4:f8:bf:b9:5f:2b:42:e0:c7:84:83:69:a0:ec:90:9d:21:cf:
f1:2d:c5:80:14:ee:e7:ed:2f:04:c6:62:6f:51:f1:7a:1d:ad:
ba:f3:2b:21:8b:95:88:25:c7:c5:b3:ed:f8:a5:b0:fd:33:7e:
e9:a3:4b:55:11:43:7d:b8:a2:c5:f9:6c:e4:8a:a5:02:cb:37:
84:06:03:25:0f:7f:32:ec:15:34:24:b7:30:8d:2d:28:c7:fa:
70:10:71:5a:8d:9a:f6:43:aa:fe:37:1d:87:12:ca:76:75:ae:
c8:fe:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:30 2025 by rpki-client