Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/ydXN7hzyKXGmQqXl-7zWivhD8ek.roa
File: ydXN7hzyKXGmQqXl-7zWivhD8ek.roa (raw, json)
Hash identifier: gloojMaWMbfo9tOovOXhHmpXtLE2016bVKqWBC+zLDw=
Subject key identifier: C9:D5:CD:EE:1C:F2:29:71:A6:42:A5:E5:FB:BC:D6:8A:F8:43:F1:E9
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 095B
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/ydXN7hzyKXGmQqXl-7zWivhD8ek.roa
Signing time: Wed 29 Sep 2021 02:38:28 +0000
ROA not before: Wed 29 Sep 2021 02:38:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131588
IP address blocks: 103.229.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 29 02:38:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C9D5CDEE1CF22971A642A5E5FBBCD68AF843F1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:fd:6c:45:cd:42:00:f7:22:14:2d:f5:3e:
75:0f:36:be:7f:58:12:c5:74:cd:f2:6e:19:c6:62:
76:13:79:cc:79:66:9f:62:b4:35:d8:ea:bb:68:5c:
ff:dc:55:15:ee:3f:96:19:99:d8:89:dd:16:48:88:
4b:3f:f5:2a:b8:bc:da:51:ad:9b:3f:f8:c5:93:21:
90:d7:1a:35:ee:46:d6:cf:35:d3:65:98:02:71:37:
bd:05:90:6a:65:9c:60:62:c1:21:5e:a4:df:07:c9:
50:e7:1e:fc:59:79:d5:19:7c:07:d7:25:3b:5b:11:
97:32:39:64:95:89:89:91:68:8c:4f:84:f2:17:3d:
a0:2a:f1:d6:3e:f4:6e:c0:7d:d8:ad:a1:97:2a:04:
98:58:7d:b7:88:8a:d5:e1:5f:7b:79:74:50:c0:87:
16:dc:0a:5c:e7:26:2b:50:f9:fb:1a:8c:99:3d:e5:
6f:a2:34:d8:fb:6e:16:3b:b2:08:bb:a0:de:4c:43:
52:f9:24:61:4b:d7:01:eb:2b:a8:43:a0:09:ee:35:
97:bd:72:f7:b2:64:43:60:37:f6:30:e0:42:9e:7d:
1f:80:f8:38:8d:27:a8:5c:b8:3d:ea:aa:e9:cc:1f:
5e:38:80:1d:12:22:fb:50:f3:86:63:6b:50:c6:34:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:CD:EE:1C:F2:29:71:A6:42:A5:E5:FB:BC:D6:8A:F8:43:F1:E9
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/ydXN7hzyKXGmQqXl-7zWivhD8ek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:58:65:4e:e4:c7:77:70:35:bc:10:c6:e1:32:87:62:6a:cf:
f9:ce:70:e9:55:be:6b:3a:14:da:2a:e7:a4:89:49:48:4a:35:
d7:28:7b:a0:b1:06:7e:23:bf:fe:98:4d:c3:45:47:9e:48:12:
a6:e2:c3:b3:e5:61:4c:6e:3e:71:1f:60:a2:bb:88:c5:d2:f0:
02:d3:f8:3d:27:fc:bc:4d:e0:69:43:de:af:9b:dc:f4:8d:a6:
8c:ed:4d:e4:d6:fb:3f:65:d5:60:df:ba:81:fc:35:33:3f:34:
5a:a1:b5:53:76:90:c1:1e:da:30:37:40:cd:ab:ee:27:20:5b:
80:65:0d:06:3f:e0:c5:36:30:7e:e6:d1:53:e7:1b:ab:78:fb:
a9:40:97:8b:1b:5a:27:32:11:36:49:5c:44:ec:ce:8f:ea:d4:
af:bc:a7:85:9d:c3:94:b1:76:e9:c6:bd:2f:0d:63:81:32:1b:
ea:18:24:65:c4:9f:4f:5a:e7:72:d8:48:d5:c6:96:bc:7d:ec:
be:db:b8:20:e6:61:bb:9d:1d:3d:97:f5:8e:f5:c8:e1:7a:6a:
9c:48:ba:16:4f:5b:d8:39:a2:a9:a8:df:b9:07:3f:23:6d:04:
c7:01:a6:39:04:d4:c2:e2:a7:40:f9:c0:8b:71:27:26:df:ea:
27:6d:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:12 2025 by rpki-client