Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/p9EgL8gJePPyxZOf3qY_TCPOgpE.roa
File: p9EgL8gJePPyxZOf3qY_TCPOgpE.roa (raw, json)
Hash identifier: aCKyTVo9P9idafCt+XGc1BSX2J1Yy7Zz3HTwnoparVs=
Subject key identifier: A7:D1:20:2F:C8:09:78:F3:F2:C5:93:9F:DE:A6:3F:4C:23:CE:82:91
Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3
Certificate serial: 31
Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/p9EgL8gJePPyxZOf3qY_TCPOgpE.roa
Signing time: Sun 07 Feb 2021 13:08:10 +0000
ROA not before: Sun 07 Feb 2021 13:08:10 +0000
ROA not after: Tue 07 Dec 2021 08:40:28 +0000
asID: 38839
IP address blocks: 103.159.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3
Validity
Not Before: Feb 7 13:08:10 2021 GMT
Not After : Dec 7 08:40:28 2021 GMT
Subject: CN=A7D1202FC80978F3F2C5939FDEA63F4C23CE8291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:d0:1a:b7:5e:4d:da:a2:22:2b:53:d8:40:
f1:65:1a:4a:4f:d7:2f:e2:cc:89:ac:72:95:a4:6a:
b2:2e:19:2f:b9:42:c4:91:2c:62:9a:48:ba:68:25:
bd:98:e4:21:72:f4:08:eb:c8:cc:00:ea:16:ea:6a:
57:66:86:9a:4d:86:e4:38:56:9c:59:0c:62:4d:55:
52:1d:28:4c:b5:07:20:0e:66:fd:40:b0:b1:5c:f3:
63:a3:91:23:67:55:3e:09:b4:b8:a2:ff:27:a7:b4:
09:84:8a:83:b3:e2:e2:42:3f:c5:eb:7b:13:42:10:
2f:82:40:8c:f3:c4:3f:0d:ba:11:0f:4d:85:52:54:
78:f8:a1:05:8b:aa:74:8c:7c:73:ca:89:f5:db:3e:
73:48:bf:fb:c4:b1:65:a7:a7:0e:cc:ae:70:27:5d:
31:7a:5e:66:62:51:6f:aa:e3:3b:ea:45:c5:0f:55:
35:92:c7:76:94:7b:b2:f7:3b:3f:5a:43:ec:b9:ce:
34:b7:a0:2d:1e:16:b8:1e:eb:9d:9c:93:74:e0:bc:
5f:1a:85:06:33:a4:ef:aa:f7:51:ff:e3:06:39:2f:
a7:09:7d:88:89:9e:01:68:b3:80:dc:3e:2b:a1:c9:
1e:87:ea:7e:4a:4b:2e:05:7b:ad:1c:cb:d5:3a:a2:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:20:2F:C8:09:78:F3:F2:C5:93:9F:DE:A6:3F:4C:23:CE:82:91
X509v3 Authority Key Identifier:
keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/p9EgL8gJePPyxZOf3qY_TCPOgpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f0:cc:4c:5a:ed:9f:cc:7e:4d:26:35:f4:0e:1c:e9:38:a4:
92:f7:52:7f:99:7a:d7:44:30:3a:9e:ce:a8:81:85:bb:7f:9f:
8b:ca:11:ef:34:24:6f:d6:95:27:b9:97:89:37:a0:f3:94:a4:
f6:b7:5e:04:a8:10:ff:d0:80:36:d9:5c:7f:eb:0b:74:94:0b:
7c:c4:ea:a1:21:44:49:1d:e6:c2:36:94:a5:56:52:af:04:a4:
bd:ea:fe:35:c8:f2:e3:f8:99:fc:d2:88:41:3c:be:27:84:06:
b4:f0:a1:97:7d:bf:7a:29:bc:cc:43:f3:fb:80:64:9c:8d:31:
77:b2:cb:93:47:c0:76:25:c9:e8:cc:35:0f:cf:8d:08:01:37:
d0:f3:06:d7:b6:d3:22:43:66:88:0d:2e:b6:8b:28:04:12:f5:
fe:7d:6d:18:85:bb:5a:92:1f:f5:a0:86:0a:02:21:ab:7d:1e:
a3:1a:af:be:82:46:5c:bc:3e:ed:cc:6e:f4:b6:96:4f:5d:cb:
f8:77:2d:59:b0:70:49:7f:fc:58:cf:1d:5a:a5:68:89:87:a4:
7c:f3:7e:d2:3e:2f:29:ee:15:9d:fd:77:d0:98:08:53:ab:54:
ce:da:5a:8e:62:99:f7:98:e4:8d:b4:b0:a9:19:62:df:50:8b:
2c:31:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:59 2023 by rpki-client on console-fra.rpki-client.org