Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/RlZ6nPzOpfQs3zhI5reJKtt0Amc.roa
File: RlZ6nPzOpfQs3zhI5reJKtt0Amc.roa (raw, json)
Hash identifier: xufcUzqVIjYnMsNT7Dp9reh0s3TGBe7FbBNcxatfKpE=
Subject key identifier: 46:56:7A:9C:FC:CE:A5:F4:2C:DF:38:48:E6:B7:89:2A:DB:74:02:67
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0375
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/RlZ6nPzOpfQs3zhI5reJKtt0Amc.roa
Signing time: Wed 29 Sep 2021 02:53:57 +0000
ROA not before: Wed 29 Sep 2021 02:53:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 134823
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885 (0x375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 29 02:53:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=46567A9CFCCEA5F42CDF3848E6B7892ADB740267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:14:da:7b:c8:47:41:c1:aa:f9:f0:bd:1a:
31:4f:87:7c:24:0c:61:f1:9f:f0:56:fc:81:28:96:
c9:49:5c:48:2e:5b:07:8e:57:03:35:d4:07:60:58:
44:ce:f5:45:03:f7:a0:a5:0a:af:b8:32:48:3b:51:
53:c0:e6:3f:60:76:1f:7d:c1:d0:d7:e3:41:54:29:
0e:2e:c4:05:7b:e9:7d:5b:87:f8:39:f2:40:da:59:
9c:9a:3f:f2:be:fb:e6:6d:69:8f:e8:0e:3d:58:3f:
a6:f5:18:af:97:26:95:42:fd:f1:31:e7:b1:72:06:
1d:23:be:7e:1e:5d:fa:26:08:7d:bf:92:60:5f:e2:
22:4a:2f:b5:c2:f8:58:19:ac:84:0a:6a:5d:d6:5b:
c9:1d:9f:6e:4c:a4:0e:3c:fe:c7:b0:c4:ad:0b:2f:
b6:fa:f9:42:9e:63:69:5c:03:7f:96:2c:0f:c6:e4:
67:5f:a3:18:d8:ec:8f:38:69:67:99:0b:f7:35:84:
a3:f3:df:10:e4:32:ff:f8:be:04:83:a0:34:9b:28:
62:d3:eb:4e:c8:d0:dd:20:c6:03:94:b9:c1:82:f1:
89:b0:3f:6e:e3:b5:74:74:e5:23:74:c5:6b:f4:51:
df:91:df:be:d4:a0:59:31:c7:33:93:e0:40:fb:41:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:7A:9C:FC:CE:A5:F4:2C:DF:38:48:E6:B7:89:2A:DB:74:02:67
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/RlZ6nPzOpfQs3zhI5reJKtt0Amc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a1:46:fa:19:70:34:b9:26:4f:3b:5b:88:11:12:94:ed:12:
bd:c4:b6:ed:a2:09:b2:cf:b9:6e:3e:12:b8:87:21:34:b8:d7:
a1:3b:a4:0f:4f:ae:f8:0b:14:37:ea:fc:64:a8:50:ec:ee:93:
f5:5c:52:b7:ab:7a:5b:65:1c:33:fe:b0:c9:a2:c7:c5:78:81:
1a:30:1d:d1:4d:0e:97:db:be:70:64:59:6f:88:bc:16:9f:c2:
4a:29:1d:7f:e3:c4:14:d8:38:fe:21:93:60:db:a2:6e:3d:71:
71:6e:41:a1:fc:fd:fe:06:c7:fa:e6:95:8f:7b:78:70:13:83:
c2:88:23:08:4d:9e:b5:32:e6:27:84:96:95:de:8b:27:f6:15:
b5:b4:d8:5c:d5:03:5e:ec:15:28:08:ec:98:0a:d4:8a:a7:5f:
39:12:f6:bf:51:44:ac:33:9a:f1:ef:61:78:dd:9f:0d:7d:9b:
4a:4d:5a:aa:1b:e2:f3:b3:6c:f2:2b:d2:3a:07:b4:d0:3f:61:
b5:24:1c:1a:11:cc:f8:3a:cd:9d:fc:45:a7:1c:a4:d2:c7:fe:
a8:9c:2d:3d:e2:ee:82:09:6a:1b:12:e2:b0:2a:33:cf:7a:33:
2a:25:3a:48:f1:fc:9b:69:57:a7:4e:28:b4:39:43:c3:fb:ae:
ed:62:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org