Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/h3bW2HZczPV5bWoLGK8ghDHxSWA.roa
File: h3bW2HZczPV5bWoLGK8ghDHxSWA.roa (raw, json)
Hash identifier: bzfRMc33GnZaX40Z33FzE3Yb7ESDDb6d5sTRRWkRzO8=
Subject key identifier: 87:76:D6:D8:76:5C:CC:F5:79:6D:6A:0B:18:AF:20:84:31:F1:49:60
Certificate issuer: /CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5
Certificate serial: 03
Authority key identifier: 5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/h3bW2HZczPV5bWoLGK8ghDHxSWA.roa
Signing time: Mon 21 Aug 2023 05:12:37 +0000
ROA not before: Mon 21 Aug 2023 05:12:37 +0000
ROA not after: Tue 20 Aug 2024 03:15:58 +0000
asID: 131642
IP address blocks: 103.255.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5
Validity
Not Before: Aug 21 05:12:37 2023 GMT
Not After : Aug 20 03:15:58 2024 GMT
Subject: CN=8776D6D8765CCCF5796D6A0B18AF208431F14960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:d8:a3:91:d9:a1:f6:9e:ea:9d:cb:fd:81:
80:a8:56:47:75:b7:e0:27:88:36:9c:2a:05:4c:9d:
41:02:5a:c5:2e:c9:dd:c1:52:3e:56:ae:c7:f2:d8:
2d:8a:ad:df:9c:bc:82:fc:e9:4e:fb:31:0a:93:94:
3a:2a:d1:81:73:1f:bb:67:2f:65:f8:c6:5a:a0:d6:
53:99:47:45:a5:fa:28:6a:d5:80:20:a3:4a:b8:8d:
95:54:7d:20:f8:7a:50:aa:01:7c:70:8e:b7:1e:fa:
31:6e:af:9b:64:5a:9a:ec:e2:72:32:d9:84:be:8f:
58:6c:68:c5:24:3a:ab:0a:9d:38:5e:32:93:57:16:
f0:ee:48:d2:54:9f:3b:f6:25:dd:f3:55:f1:12:ac:
e2:2d:39:82:75:0f:13:de:a8:62:f1:59:00:c6:54:
44:68:b4:dc:24:7d:94:6e:a5:38:0f:15:a0:f7:c4:
dc:9e:64:37:9a:6c:22:be:c6:ea:c9:c6:4e:39:93:
9d:e3:1b:06:94:f4:1b:a8:60:98:6b:b2:20:53:7e:
68:22:bf:43:21:37:cc:0d:09:d5:89:04:ef:4c:a3:
85:b2:22:de:a1:70:1e:16:21:73:4d:05:ed:5c:79:
e7:f2:be:ec:0c:8c:d9:0e:20:5c:49:6a:ef:6b:2b:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:D6:D8:76:5C:CC:F5:79:6D:6A:0B:18:AF:20:84:31:F1:49:60
X509v3 Authority Key Identifier:
keyid:5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/h3bW2HZczPV5bWoLGK8ghDHxSWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:cc:54:39:4a:7e:3e:3c:c4:40:7c:a1:b8:a8:d4:47:bf:0a:
c7:b5:b5:fd:1a:dd:f6:cd:b4:21:d1:06:bf:9f:96:14:ce:f2:
7d:63:82:9e:78:71:af:a7:a5:a3:3d:00:41:77:d3:dc:e7:44:
1a:b3:db:fe:2e:ba:ee:99:a9:4d:52:6a:25:b6:9e:0f:4c:5a:
3b:11:51:1c:42:9e:56:ef:0e:bf:e6:63:5b:45:a6:87:8f:88:
41:a5:55:02:5e:38:1d:8d:38:ac:0d:9d:49:50:57:8f:3c:04:
76:08:36:d8:5f:cb:eb:8a:4f:2c:7e:00:32:73:3b:8a:b1:fb:
12:63:82:8a:53:e9:de:8c:5b:a9:41:88:f0:0a:44:7d:76:21:
03:fb:79:f4:84:f6:b5:8f:d5:77:f1:90:cd:6e:1a:bf:d6:a9:
51:0d:f6:5f:3d:18:9a:9d:b6:8a:94:a7:ee:30:f4:28:46:2e:
22:e4:82:5b:de:8d:56:0c:eb:61:29:aa:83:b9:86:08:1f:4c:
77:ea:d2:a2:72:3b:84:6a:d0:bc:55:ba:83:bb:56:c1:6c:8a:
f7:66:52:9b:f1:43:31:5a:64:44:cb:12:26:3e:ee:06:cd:d0:
20:a8:72:70:ff:1b:94:53:15:bb:c6:93:75:c0:2b:6f:c6:c2:
e5:79:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:05 2025 by rpki-client