Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/IG6U7B40qeyjBhxk-f0zdYrdbhI.roa
File: IG6U7B40qeyjBhxk-f0zdYrdbhI.roa (raw, json)
Hash identifier: GGFufKuytnQISzDUX4XIRU1ptVa7ZaByZLkbTz3Qtj0=
Subject key identifier: 20:6E:94:EC:1E:34:A9:EC:A3:06:1C:64:F9:FD:33:75:8A:DD:6E:12
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/IG6U7B40qeyjBhxk-f0zdYrdbhI.roa
Signing time: Thu 15 Sep 2022 02:34:58 +0000
ROA not before: Thu 15 Sep 2022 02:34:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=206E94EC1E34A9ECA3061C64F9FD33758ADD6E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:01:2a:e8:22:5e:1a:ba:f8:6f:8f:49:89:
ee:bf:88:7e:71:26:a9:34:93:29:0f:9d:7d:1a:07:
ad:40:74:91:84:1e:bd:c0:72:71:df:15:38:21:3c:
72:24:ba:1b:67:95:b5:5a:4e:c1:ed:54:39:33:d1:
eb:c1:99:58:cf:09:51:24:99:a5:95:92:0e:ff:61:
2f:18:9b:ec:b6:c6:5b:42:87:37:0b:d5:ff:24:5d:
83:8d:0b:ef:8e:b0:f5:fb:ec:41:38:50:03:48:42:
4a:08:ba:5d:4a:3b:05:54:0e:b7:5b:65:97:c3:4d:
19:3a:d9:7c:d1:db:29:6b:e7:22:96:e8:a1:13:2c:
96:6b:2b:47:d0:a6:ff:0f:40:c1:53:45:d2:70:df:
55:54:4a:9a:63:46:4c:a0:c6:6e:74:2d:ae:17:53:
9e:42:0a:b0:ef:47:1d:bc:b9:76:48:bd:8c:64:b9:
8c:65:78:8d:4d:c1:ca:4e:a4:df:43:c3:a7:89:73:
4f:5d:3e:1a:82:d0:19:22:a0:4f:5b:6d:ed:5d:bc:
32:58:e2:b6:cb:9f:d5:68:b0:3a:58:04:9a:c4:e9:
df:d3:63:92:f1:b2:73:ef:db:a9:a7:44:c3:ac:37:
a9:e0:78:3c:5f:6b:e4:82:23:c5:e2:9c:ed:ed:54:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:94:EC:1E:34:A9:EC:A3:06:1C:64:F9:FD:33:75:8A:DD:6E:12
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/IG6U7B40qeyjBhxk-f0zdYrdbhI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
53:63:66:a8:24:cd:17:26:7d:ec:a3:2c:dd:f9:f3:54:18:a2:
20:d0:e1:bf:61:00:8b:d3:64:00:ba:a8:20:75:63:b7:0c:33:
39:84:f3:6a:30:66:4e:ee:d9:32:4e:66:c3:84:dd:03:62:61:
b7:68:e5:70:6e:d9:c2:9f:80:b2:91:b2:68:92:41:45:1b:f6:
8b:a6:33:11:87:eb:00:11:9f:9c:04:f2:18:be:b9:9a:13:8e:
af:e4:eb:4f:d1:db:94:f2:83:82:32:87:04:a1:56:71:83:6a:
a0:f4:18:14:2b:20:ae:b7:a1:cb:c0:10:5b:80:14:20:e7:f7:
a4:e1:55:a6:d6:0d:5b:10:4f:a1:2d:53:ee:ba:30:67:dc:a2:
49:f1:67:ac:6b:39:27:ba:fd:a2:1e:31:ae:75:b0:bb:da:56:
5f:e4:6b:7e:6c:85:df:37:47:ae:34:a4:9f:2b:a1:60:bf:37:
8a:ff:3f:bb:cc:be:90:cb:05:8f:69:04:0f:af:19:8a:d0:a4:
35:c0:b8:a1:d0:27:a3:ea:a0:69:b4:04:5b:a9:bd:da:d2:d6:
8d:ce:2e:b8:6d:38:d3:58:b0:86:d6:ae:f6:94:64:75:40:cf:
db:97:42:69:41:68:7f:f5:f9:f3:db:b5:75:57:71:c6:20:7c:
c0:a7:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org