Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DQWL/IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa
File: IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa (raw, json)
Hash identifier: LmvloseTRHRVaO882OlwkbWc47C6ki0l8bOYHhl13Jg=
Subject key identifier: 20:FC:A3:05:29:4A:D2:B2:82:9F:FE:90:90:D2:21:CE:F3:34:91:C1
Certificate issuer: /CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
Certificate serial: 071D
Authority key identifier: 7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa
Signing time: Fri 01 Sep 2023 08:35:54 +0000
ROA not before: Fri 01 Sep 2023 08:35:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131678
IP address blocks: 103.149.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
Validity
Not Before: Sep 1 08:35:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=20FCA305294AD2B2829FFE9090D221CEF33491C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:27:cd:77:9f:e2:e3:54:fb:6e:ec:e5:e7:
6c:a9:7c:ca:80:f1:20:bf:b7:94:20:c2:82:45:a2:
54:5c:f3:90:df:2c:79:c4:37:29:89:a2:f3:c1:7e:
66:8d:9d:98:42:4b:42:73:b4:5c:4e:1c:a4:ce:bd:
a5:ff:72:85:55:9f:7d:f7:c4:40:f5:c7:26:44:89:
3e:8f:42:1d:0b:38:77:b0:a4:1d:c3:65:51:ca:32:
ac:c0:99:9c:10:ea:21:43:ca:dd:d0:71:be:2e:89:
f2:53:0e:20:22:a9:04:f4:86:1b:7f:56:6b:d7:15:
08:df:8a:a2:a5:23:fc:c0:db:4f:53:b5:b0:51:98:
4d:69:64:a8:b1:81:34:72:d8:b6:f0:d9:6f:0c:3e:
48:28:65:39:19:94:5b:56:48:ff:b2:44:0c:e6:6a:
1e:30:67:be:62:bd:61:47:bd:b3:04:a8:29:b5:ad:
06:b4:d9:17:15:3b:62:6d:00:7c:78:21:b6:bc:73:
b9:10:1c:af:20:a5:87:d2:f1:b8:c6:ab:68:33:6e:
ff:c9:be:d8:cf:ee:83:5b:22:b4:a3:2b:56:98:0e:
f6:63:4f:3e:40:cf:cf:8b:30:1b:4a:50:46:7d:6d:
dc:d2:29:56:3d:fd:80:cb:4c:75:0b:7a:8e:ee:a1:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:A3:05:29:4A:D2:B2:82:9F:FE:90:90:D2:21:CE:F3:34:91:C1
X509v3 Authority Key Identifier:
keyid:7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.66.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9c:58:bc:fa:0b:b6:da:d1:2f:94:95:c9:11:3e:5a:ab:0b:
3c:e1:7c:a6:a2:ca:64:09:2c:6c:64:e0:c8:d4:5c:e5:35:55:
77:5c:9c:18:29:db:6d:c1:b4:9f:91:dd:7b:16:4c:44:8d:ea:
b7:89:9a:f7:90:3a:a8:20:78:be:02:c8:e5:3a:13:6b:cd:e0:
7e:60:08:1d:ba:80:6b:9e:f6:c8:cf:53:cf:1b:e3:32:6f:f2:
ad:50:84:c3:52:c7:c2:af:a7:3b:03:8f:30:fd:e0:f4:aa:81:
8b:d4:ab:18:16:7b:08:c5:8a:4c:cb:e7:06:35:ef:e7:38:46:
8d:48:73:81:d6:98:77:d8:35:52:bb:c6:7e:29:23:29:bf:09:
d4:41:28:41:e2:11:50:6b:f4:aa:f5:0f:a6:66:b7:b6:57:0b:
5d:51:0b:c6:82:2c:46:a9:10:d3:b5:97:f8:e9:ca:23:a5:5f:
6b:e3:42:05:12:a7:bb:86:2d:ca:5f:0f:d2:53:83:e6:dd:06:
a4:14:42:ea:55:38:c7:93:cd:9f:5f:3a:30:6d:b5:09:c4:3b:
71:bf:fd:26:53:93:c9:f9:96:74:6c:0d:7b:e5:4c:ef:de:e6:
ee:7c:81:fd:69:d8:b7:63:93:9b:9b:c2:87:f1:47:ef:31:8c:
07:9d:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:01 2025 by rpki-client