Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/SF-aOy2WXWNo6STgcTTMtshoxqY.roa
File: SF-aOy2WXWNo6STgcTTMtshoxqY.roa (raw, json)
Hash identifier: AfOAUlciRWp906zFQq+WBF6BLo5HBcutVLYiATZanx8=
Subject key identifier: 48:5F:9A:3B:2D:96:5D:63:68:E9:24:E0:71:34:CC:B6:C8:68:C6:A6
Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial: 03
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/SF-aOy2WXWNo6STgcTTMtshoxqY.roa
Signing time: Tue 11 Apr 2023 07:17:31 +0000
ROA not before: Tue 11 Apr 2023 07:17:31 +0000
ROA not after: Wed 03 Apr 2024 15:30:09 +0000
asID: 20473
IP address blocks: 103.130.236.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Validity
Not Before: Apr 11 07:17:31 2023 GMT
Not After : Apr 3 15:30:09 2024 GMT
Subject: CN=485F9A3B2D965D6368E924E07134CCB6C868C6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:88:90:f5:6a:e8:ce:9a:52:e8:e0:a5:87:
b0:14:67:d6:0a:d8:18:ca:00:d0:4c:47:69:c8:3f:
d4:32:a8:6d:29:a5:0b:c3:3c:b3:cf:15:8f:93:f7:
31:9a:85:e4:b0:86:cd:84:0f:23:87:92:bd:fb:8a:
8f:83:f7:ff:9a:e7:50:1f:ab:73:d0:37:a2:c6:2f:
a3:6e:4d:a4:8a:40:2d:47:36:c0:8a:17:8a:b4:84:
dd:d8:67:1c:48:c1:e8:04:83:e0:e3:c3:a4:dc:ec:
47:59:b9:7c:98:21:76:6d:20:ea:bd:25:9f:2c:59:
97:61:ab:68:61:b5:d0:85:39:fd:b8:61:f3:7f:68:
75:63:e3:32:6e:6c:17:3d:a8:ba:99:36:90:47:1e:
0a:21:df:c8:80:f0:ac:79:55:f4:d3:b5:b3:b1:59:
d7:9f:1e:7f:33:c9:a2:36:5c:c1:09:d5:a8:b3:be:
09:f9:a4:f2:cb:24:d3:9b:27:fc:16:5d:c8:ab:a1:
52:18:ae:79:16:22:c5:0e:36:2b:da:53:f6:48:14:
87:7c:e9:20:52:ee:c8:c5:09:a9:a9:bf:7a:fa:5f:
3f:61:47:11:b0:18:2d:bd:3f:38:21:79:10:07:fb:
6a:09:57:43:95:82:d2:6d:59:d4:c8:44:34:51:b9:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5F:9A:3B:2D:96:5D:63:68:E9:24:E0:71:34:CC:B6:C8:68:C6:A6
X509v3 Authority Key Identifier:
keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/SF-aOy2WXWNo6STgcTTMtshoxqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.236.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:97:67:46:9a:0b:b5:68:02:e2:61:45:af:68:c7:15:16:fa:
0d:51:e1:b8:e4:2e:99:0d:ea:28:2e:f8:db:7b:ff:e1:c8:a6:
96:ba:f5:5c:50:16:7d:77:ee:e3:8c:a4:19:ed:39:95:c1:22:
30:25:ba:0d:80:34:9a:2e:ed:e3:15:da:b7:ad:db:63:ad:1a:
11:61:62:b2:00:42:16:35:af:ca:5b:da:dd:c8:7c:78:5f:5a:
84:ac:78:b8:26:9f:58:7f:cb:e3:f0:e9:dd:e7:82:74:37:60:
55:f1:f1:8b:55:46:ea:c4:75:ea:4a:e9:c5:cb:5c:df:85:de:
10:2b:a3:0f:fc:f0:cf:07:7e:34:c5:8d:cf:e9:8b:70:f2:02:
80:8a:28:67:86:4f:66:2d:61:24:2e:1b:cc:ac:93:6a:92:dc:
d3:2d:39:9f:85:94:52:f6:53:94:39:58:28:87:b0:eb:81:4a:
eb:e9:9a:03:b4:64:f8:15:6d:dd:7b:7b:c8:d7:b5:61:ef:44:
0f:b0:69:41:30:92:24:d0:f3:3b:71:dd:e0:a8:ca:1d:e9:94:
77:7a:ef:20:d4:40:1b:bd:74:3b:db:58:5c:23:ad:45:e6:36:
5c:ab:52:05:8d:18:f8:62:cd:d9:87:3b:29:de:d7:ba:5b:f9:
ff:1b:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org