Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/lF9wvnjlMFQ0xCTGQh25GGFiUaA.roa
File: lF9wvnjlMFQ0xCTGQh25GGFiUaA.roa (raw, json)
Hash identifier: QGx10UgYlqGAJPKVuhpcldRRBe4OHsgf1QRtYQ34NJM=
Subject key identifier: 94:5F:70:BE:78:E5:30:54:34:C4:24:C6:42:1D:B9:18:61:62:51:A0
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0C0F
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/lF9wvnjlMFQ0xCTGQh25GGFiUaA.roa
Signing time: Wed 29 Sep 2021 02:36:27 +0000
ROA not before: Wed 29 Sep 2021 02:36:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18424
IP address blocks: 103.136.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3087 (0xc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Sep 29 02:36:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=945F70BE78E5305434C424C6421DB918616251A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:7e:a9:d1:9c:34:da:88:7b:35:6e:36:44:
4a:8a:ba:9f:ad:dd:39:d0:c6:9d:31:f3:a1:47:b2:
5e:75:36:ff:d7:1d:75:ee:d0:3e:86:47:6e:e7:77:
6a:83:48:f7:db:d1:92:ec:2f:b2:2b:f4:97:07:d2:
e0:5e:c9:de:80:a6:c9:4e:62:7c:76:43:3d:be:19:
69:d9:59:37:e0:d8:31:47:35:7a:59:fe:46:89:25:
c0:b9:59:a0:d5:e2:72:6f:1e:e9:52:ef:24:d6:d6:
32:94:c1:dd:f8:3a:05:ba:6b:69:39:8d:08:d6:c7:
78:f0:b3:21:4b:c0:af:88:4e:4a:c4:e8:e6:ba:be:
ac:1b:1c:60:41:03:d8:e2:5f:de:36:91:44:1a:90:
78:54:5d:e8:87:11:a0:eb:18:6a:53:95:da:30:94:
a7:56:5a:a4:54:f3:20:06:ab:03:9b:73:02:5a:33:
52:c9:c1:23:f9:bf:98:5e:70:c6:ec:21:2e:c2:02:
c9:a6:06:ed:e3:75:4d:5e:35:75:8e:72:af:27:16:
d3:e8:bb:89:b8:90:f8:01:56:be:fa:a4:c7:0e:ac:
4a:2f:78:11:c1:2d:2c:1f:66:f5:e4:1f:d6:3e:67:
2f:62:fb:23:a5:67:21:38:23:a4:6a:8c:d1:49:57:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5F:70:BE:78:E5:30:54:34:C4:24:C6:42:1D:B9:18:61:62:51:A0
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/lF9wvnjlMFQ0xCTGQh25GGFiUaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:59:4f:b3:9d:29:af:3c:f0:75:b8:60:29:cb:a5:b2:2c:9b:
f1:98:ce:3f:6e:bc:30:4a:f5:31:35:a0:a3:ce:47:7c:0a:8b:
c5:31:c9:c6:bc:55:41:13:a0:e6:d6:72:8e:64:e3:f6:4a:6f:
ec:b4:ee:d6:1b:cc:2f:f6:b1:ac:d4:fd:88:72:6d:41:43:9f:
e6:e1:d3:6e:41:d0:25:37:c2:54:57:12:af:be:14:48:5e:8d:
01:ae:81:37:e2:c9:62:50:3a:71:18:00:b9:2b:d1:b4:de:af:
ab:80:be:ee:7e:94:90:52:45:76:f2:15:03:9d:12:bb:7b:3e:
98:bd:28:75:fc:77:b8:36:5e:f7:88:f0:51:c1:1f:95:6e:43:
bb:a5:45:2a:0b:c6:07:21:6c:fa:ac:27:01:c5:21:24:7a:bf:
c2:13:7d:f7:f9:a6:bc:69:95:62:9c:26:92:36:be:64:a4:49:
0d:1e:f2:89:b6:36:e1:89:c3:84:6b:c7:3d:1c:66:21:62:66:
90:72:dc:dc:85:b1:80:4b:6b:63:ec:16:51:6f:b2:c3:76:b2:
ce:60:a8:d1:06:1e:b3:e1:24:6a:b0:6d:d8:52:e1:24:28:7c:
43:ad:e3:fa:d0:1c:39:fa:be:0b:23:1d:56:c9:0d:63:5f:3e:
b0:a1:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:43 2025 by rpki-client