Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/Aqpto6y8KnAuLM4HhKWs2-bSptU.roa
File: Aqpto6y8KnAuLM4HhKWs2-bSptU.roa (raw, json)
Hash identifier: qbmyEGU3ZvTrH1k+zfTdzrFu/8+vdIGMhe18fo3GiT8=
Subject key identifier: 02:AA:6D:A3:AC:BC:2A:70:2E:2C:CE:07:84:A5:AC:DB:E6:D2:A6:D5
Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial: EC
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/Aqpto6y8KnAuLM4HhKWs2-bSptU.roa
Signing time: Thu 07 Jul 2022 02:46:48 +0000
ROA not before: Thu 07 Jul 2022 02:46:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 396982
IP address blocks: 103.169.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Validity
Not Before: Jul 7 02:46:48 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=02AA6DA3ACBC2A702E2CCE0784A5ACDBE6D2A6D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:70:ed:0f:24:b2:27:ac:ca:73:eb:50:d3:
a8:8b:de:c4:52:f1:10:14:73:ac:3f:b5:b5:9a:83:
7d:d7:7a:40:ff:f7:aa:3f:49:94:75:a2:9a:11:a3:
e4:49:60:c3:87:93:a0:18:05:44:65:70:37:14:a7:
92:84:63:e9:02:1b:9d:00:18:37:cf:78:98:ac:8a:
af:bf:be:ee:5f:db:aa:81:2d:57:1a:79:70:95:51:
e3:d3:53:65:94:0a:40:87:d4:ce:79:18:30:10:79:
1d:02:de:72:05:7b:80:f6:65:e4:9b:33:f6:7f:7d:
86:cd:d1:94:31:4e:be:7e:a8:30:da:ae:40:23:80:
02:1a:4f:e6:7e:8f:b5:0d:f2:ad:f7:51:c9:8e:95:
df:32:11:0c:29:fb:02:92:47:a7:4f:b7:e6:25:4e:
05:be:81:09:e0:9d:4e:14:8a:d8:c7:2c:43:1d:8c:
cb:1d:04:ac:13:25:20:5c:26:df:cd:82:ca:97:23:
05:60:8d:e5:aa:d9:00:5b:e9:51:25:ae:07:b7:b2:
f6:e6:b8:58:f6:75:75:f2:f8:03:2c:36:9a:4a:6c:
2a:1f:90:5e:8c:39:82:84:02:e2:5e:1b:60:11:f8:
5b:47:4e:f0:5c:63:4f:51:34:28:5d:b3:98:67:aa:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:6D:A3:AC:BC:2A:70:2E:2C:CE:07:84:A5:AC:DB:E6:D2:A6:D5
X509v3 Authority Key Identifier:
keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/Aqpto6y8KnAuLM4HhKWs2-bSptU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ca:6f:64:7f:aa:7a:d3:25:45:cf:4c:25:c1:c7:2a:2a:14:
a8:81:7f:8d:0d:fc:04:06:f6:ca:79:0b:49:5a:6f:02:fe:a8:
93:ee:6f:71:39:dc:1d:a1:62:db:7f:d8:82:a0:df:f8:55:32:
9b:80:a7:49:18:72:db:54:b0:4f:38:be:3b:cd:2b:9c:1d:20:
d2:c0:2b:1f:f4:4e:9a:80:27:96:84:ab:6f:2d:a5:10:99:5e:
ef:d6:f3:c3:e2:ec:76:33:95:60:3f:fe:80:b7:d1:24:46:a2:
fb:73:a4:46:9b:45:92:a3:10:9d:40:e7:81:1c:10:d4:46:97:
9a:cf:df:c6:92:c5:4c:53:65:86:81:94:a8:21:69:b8:66:8a:
ec:e1:b2:9a:f2:e0:4d:b9:9a:1c:e0:fe:7f:73:44:07:c4:9b:
94:b4:68:ac:49:a9:e2:90:db:7e:ac:c6:98:28:e9:7d:32:b0:
a6:10:31:b6:4e:3a:d4:a2:98:17:89:aa:26:02:9f:7a:9e:44:
b8:bd:5f:24:92:e6:fd:d1:83:bb:9f:7f:dd:1b:33:c7:05:ef:
c0:7c:70:77:74:68:ab:e4:e7:0a:af:75:8b:c4:ff:b8:d4:f2:
b4:10:e9:ec:4b:4f:76:ec:b7:63:61:06:e7:58:53:c8:64:6a:
3f:e6:a2:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org