Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYVC/SKystzSRjPKRvJbs_gCnTF4Vvyc.roa
File: SKystzSRjPKRvJbs_gCnTF4Vvyc.roa (raw, json)
Hash identifier: IHxZ36LB6BiarQrGhh9TUJo+G7rH/GXphV+wIdIG8vw=
Subject key identifier: 48:AC:AC:B7:34:91:8C:F2:91:BC:96:EC:FE:00:A7:4C:5E:15:BF:27
Certificate issuer: /CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Certificate serial: 2A
Authority key identifier: 37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/SKystzSRjPKRvJbs_gCnTF4Vvyc.roa
Signing time: Thu 19 May 2022 07:31:34 +0000
ROA not before: Thu 19 May 2022 07:31:34 +0000
ROA not after: Tue 21 Mar 2023 07:02:52 +0000
asID: 45102
IP address blocks: 103.183.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Validity
Not Before: May 19 07:31:34 2022 GMT
Not After : Mar 21 07:02:52 2023 GMT
Subject: CN=48ACACB734918CF291BC96ECFE00A74C5E15BF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:f9:73:6a:a4:2e:13:51:48:83:ec:26:ee:
ce:c4:43:de:c2:ec:8e:07:87:ca:67:ac:ae:58:9e:
e1:7d:df:db:0e:d8:75:1f:6f:08:38:8e:08:05:43:
88:9c:ed:a3:3e:99:7f:e9:32:0b:07:66:69:d2:d5:
97:aa:d5:00:41:2e:66:8b:cc:77:71:c9:bd:bf:ae:
21:aa:26:24:49:3e:55:72:e4:46:fa:e8:e5:f4:c8:
56:08:82:67:55:28:0f:34:ba:49:27:f2:3c:f5:ec:
8e:af:87:68:76:8b:91:43:eb:ff:43:0d:89:06:01:
35:1e:cc:79:85:12:54:68:0c:4b:a9:28:39:d9:e6:
00:03:76:8f:04:4f:26:0d:a8:13:e2:26:92:08:60:
e9:56:91:35:ad:77:e1:41:cd:8f:5b:dd:1d:ad:80:
58:5b:55:45:fa:43:6a:15:e5:d8:54:d0:a3:91:1e:
5e:b0:1d:e3:11:65:44:27:08:e6:bc:a3:64:6f:8c:
df:b2:3f:46:a6:a1:ea:f2:34:75:fe:77:ec:2e:f8:
89:eb:6a:e7:e1:d4:12:72:ec:ed:f0:4a:8a:a2:ce:
0f:36:61:fc:14:5a:a8:c1:65:5c:73:03:73:c8:72:
d9:f1:47:8b:32:aa:40:48:cd:81:c2:15:ec:f4:17:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:AC:B7:34:91:8C:F2:91:BC:96:EC:FE:00:A7:4C:5E:15:BF:27
X509v3 Authority Key Identifier:
keyid:37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/SKystzSRjPKRvJbs_gCnTF4Vvyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.154.0/23
Signature Algorithm: sha256WithRSAEncryption
85:e1:a0:f7:79:25:7a:6b:22:75:11:40:bf:b4:e1:a7:95:b0:
48:62:ff:c9:bc:3a:9d:53:79:d0:34:cc:2f:3e:08:ec:69:df:
16:d9:3b:a5:a5:5e:60:df:93:82:b0:30:bb:aa:48:d0:c7:af:
2a:99:c3:57:e5:83:c9:2b:c2:59:f9:67:b3:4a:c8:f1:12:e8:
b9:06:d5:3e:28:ed:e9:01:d4:12:6a:13:b0:3d:f7:8d:f0:14:
b7:b5:e3:2d:e6:30:e4:1b:07:c6:74:0e:d0:57:0a:20:3d:ce:
16:e4:a7:a5:5c:9b:f4:67:4d:48:ca:17:b4:6b:8a:1e:ec:c5:
80:9b:0c:1a:75:d2:5f:aa:d8:fe:66:a1:6c:eb:8e:78:25:68:
80:68:94:6b:c1:b1:c4:78:46:57:06:da:77:3b:8e:23:d9:48:
ad:cb:78:2b:ea:ad:f3:f2:2a:54:19:3b:7e:1a:31:fb:22:27:
52:65:14:b4:f0:3b:8e:72:24:8d:f5:b7:95:ff:ac:31:7f:8b:
5e:fb:6f:c7:74:11:df:48:b7:d0:d7:c2:0d:1b:37:4e:b8:55:
da:38:24:22:32:3b:e1:c2:d1:8b:e5:73:c3:c8:83:61:83:b2:
5b:11:3c:89:22:99:a9:07:54:c2:ee:98:76:db:1d:58:cd:37:
a3:58:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:20 2025 by rpki-client