Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/5DGOCXnL1271HA3ocnFU_GLyUbU.roa
File: 5DGOCXnL1271HA3ocnFU_GLyUbU.roa (raw, json)
Hash identifier: ZncJQirleR28Bl3ax7DwmRAeBfSjRdceixWwohk/u14=
Subject key identifier: E4:31:8E:09:79:CB:D7:6E:F5:1C:0D:E8:72:71:54:FC:62:F2:51:B5
Certificate issuer: /CN=834D79F4126BF9E9DC0B32B86764E7D602514E01
Certificate serial: EE
Authority key identifier: 83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/5DGOCXnL1271HA3ocnFU_GLyUbU.roa
Signing time: Thu 20 Oct 2022 05:42:17 +0000
ROA not before: Thu 20 Oct 2022 05:42:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7483
IP address blocks: 103.175.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834D79F4126BF9E9DC0B32B86764E7D602514E01
Validity
Not Before: Oct 20 05:42:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E4318E0979CBD76EF51C0DE8727154FC62F251B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:38:6f:fe:b3:27:c5:88:63:2d:be:c7:6a:
37:df:b6:aa:7d:f3:93:7a:fc:cf:58:81:f9:71:33:
ff:ea:d9:7b:27:5b:6c:a5:66:52:15:14:87:30:28:
38:98:bf:82:80:24:ca:a9:43:a8:1e:5c:07:ed:04:
fb:75:f0:3b:ca:09:0d:56:00:15:62:3d:c0:2f:13:
8e:2d:e7:a2:76:e8:43:4d:e7:1d:04:4d:4c:d9:ee:
23:fa:ae:f2:13:6a:1d:75:63:ac:11:93:e6:79:45:
0e:99:b1:0f:b0:57:ab:5d:d1:a8:57:c8:f8:38:fd:
a7:5d:fc:75:bd:35:7b:67:71:41:f8:74:c6:3c:6b:
b0:45:ca:98:29:f6:57:d1:9c:4f:d4:36:3a:d7:c7:
c9:eb:63:35:e5:bd:8a:91:68:eb:73:1d:10:0d:d9:
a3:4a:2c:a6:e4:16:13:77:1a:17:9e:98:69:d4:01:
86:b3:94:39:7e:b1:1f:69:b2:49:0d:82:16:d8:e7:
2e:22:ad:e4:a4:c0:96:12:28:4d:1d:3b:fd:ef:45:
1e:d5:83:23:03:1b:e3:64:03:7b:e3:49:2c:5c:32:
15:05:93:d7:6f:4e:56:e8:4d:52:8d:29:fc:48:82:
42:94:da:54:ee:b1:0c:cc:cc:48:36:08:4c:78:e7:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:8E:09:79:CB:D7:6E:F5:1C:0D:E8:72:71:54:FC:62:F2:51:B5
X509v3 Authority Key Identifier:
keyid:83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/5DGOCXnL1271HA3ocnFU_GLyUbU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.166.0/23
Signature Algorithm: sha256WithRSAEncryption
00:2d:97:e3:a9:f6:fd:36:bb:35:4b:a4:81:fb:d2:56:88:8a:
98:e1:e7:93:f3:6f:20:09:16:07:2c:3d:ab:c6:60:f0:a4:66:
1d:1e:f0:de:c1:9a:41:6f:cf:a8:32:7d:b2:57:8c:68:d5:9f:
58:de:b0:f8:8f:59:3e:af:19:a2:ca:05:6b:3d:11:bc:53:73:
dd:05:e4:80:20:50:cd:32:f2:54:e3:d5:25:6c:a4:88:7e:63:
58:db:9c:ca:97:4d:8c:61:1a:5c:63:da:ea:8c:e8:c3:6d:e3:
aa:bf:08:7e:14:3a:a7:f7:99:b6:c0:85:14:3a:3e:c2:66:9e:
37:2b:5f:39:98:53:1e:6c:d5:41:71:f5:8d:d3:1c:0d:65:ce:
a0:05:9c:8c:9f:a9:98:ca:8a:39:fa:4f:9b:41:c8:4e:92:78:
ac:ab:e5:e7:e0:82:b4:2c:4f:3f:22:d5:5f:a4:3b:2d:ba:40:
67:20:27:8c:90:d7:43:2a:06:33:ce:ba:ff:81:63:52:10:1e:
67:b1:97:1c:bb:19:1d:c3:3e:e4:37:db:5b:31:2d:08:85:38:
7c:11:e0:6c:18:c1:fa:cb:21:52:4b:f3:df:e0:7b:6c:bc:7a:
1d:69:b6:9b:d7:84:00:30:f6:8f:78:b3:69:0c:76:ba:e1:c9:
ec:32:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org