Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Mx5ngSYKv7vpDcTSWul1yJRtPb0.roa
File: Mx5ngSYKv7vpDcTSWul1yJRtPb0.roa (raw, json)
Hash identifier: Im5GvOEcvY4kXnWoqP8jJuv1Skz/B3yQkHje1MmcHW4=
Subject key identifier: 33:1E:67:81:26:0A:BF:BB:E9:0D:C4:D2:5A:E9:75:C8:94:6D:3D:BD
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0377
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Mx5ngSYKv7vpDcTSWul1yJRtPb0.roa
Signing time: Wed 29 Sep 2021 02:53:57 +0000
ROA not before: Wed 29 Sep 2021 02:53:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131657
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 29 02:53:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=331E6781260ABFBBE90DC4D25AE975C8946D3DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:22:78:a5:64:29:9d:8d:31:38:4b:47:fd:
ee:92:63:c7:63:0b:0b:f0:66:df:9c:03:c6:b3:f7:
96:c3:48:15:fe:b6:1a:c0:37:ca:ab:bd:b1:bc:33:
f8:1b:4c:dc:90:37:a2:20:42:fe:3f:5e:49:37:eb:
03:78:40:1e:1c:47:d1:27:f6:01:d0:c1:ac:7f:fa:
bb:16:7e:bf:9d:65:05:62:bf:0f:a5:65:2a:03:cb:
51:ee:49:b3:bd:e2:be:6e:8b:76:d8:c4:e4:bf:c0:
5d:85:90:9d:63:bc:31:a4:81:c2:82:d4:b5:aa:3d:
73:b8:58:88:3e:b5:a5:db:6f:e4:53:a0:7b:76:b4:
5e:b6:7b:d6:b9:e9:56:a2:ad:2c:e3:e6:48:b4:63:
76:b9:65:86:63:96:9b:43:e8:72:d9:10:03:c0:10:
a5:0c:a0:32:bd:99:01:7e:59:25:2b:7d:e8:93:e8:
95:7a:34:c1:25:e7:20:83:99:6f:00:e9:22:8f:c5:
1b:60:8b:37:3f:68:e3:ff:da:41:db:1e:5f:2d:68:
63:d4:78:e6:e6:9b:68:f1:94:d2:58:7b:4f:55:b1:
ed:20:e5:22:32:00:e1:18:ae:f7:62:4f:ab:25:ca:
60:39:0c:bf:3d:bc:be:91:b9:5a:a6:4c:93:57:b8:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:67:81:26:0A:BF:BB:E9:0D:C4:D2:5A:E9:75:C8:94:6D:3D:BD
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Mx5ngSYKv7vpDcTSWul1yJRtPb0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b2:98:d5:f0:10:94:16:0e:52:b3:57:a1:1b:2c:bc:0b:f3:
b4:5f:10:44:02:86:fd:1d:bd:90:b3:2a:70:36:7e:94:9b:a5:
1a:f0:e2:92:1b:09:04:da:e6:78:22:c0:f5:a5:72:b6:ed:b8:
0a:a0:24:05:b2:42:59:47:59:54:7d:66:37:2e:f9:22:36:9b:
a3:c0:d8:f7:fa:18:d6:2b:ce:82:74:12:c7:93:13:af:93:d6:
8c:6c:01:81:cd:48:47:54:73:be:04:60:66:c2:a5:b5:0e:b2:
c5:ee:56:38:4a:16:ad:ba:de:f7:5b:f5:49:e8:c6:5b:7a:9c:
4b:b0:2e:76:d8:74:18:8f:61:83:22:05:52:bb:15:b4:96:9c:
4f:72:93:7d:3e:0e:5f:d8:a9:61:62:e8:a7:eb:d6:f4:66:29:
62:cd:7f:1c:70:23:f4:d2:f0:d2:56:0a:7f:a1:eb:75:da:01:
f1:7d:1f:1c:f2:ab:65:cd:c7:fe:1b:c0:e9:ec:e4:66:1e:df:
01:2a:ef:a9:f4:77:d5:84:2a:60:77:a2:c4:22:e0:71:bb:e4:
b7:de:ea:f8:a0:5f:85:a2:fc:dc:56:76:02:e3:47:cd:51:88:
cd:d8:a6:dd:19:43:14:b0:6c:20:ce:b3:ed:34:16:b4:11:5a:
a5:17:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org