Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/tlVw16_-8MnJJeppBTDTQogifPM.roa
File: tlVw16_-8MnJJeppBTDTQogifPM.roa (raw, json)
Hash identifier: +i9GracvmgXboerKjXoaIjDqmywk+6cDgzWRfgT5WX0=
Subject key identifier: B6:55:70:D7:AF:FE:F0:C9:C9:25:EA:69:05:30:D3:42:88:22:7C:F3
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 02C1
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/tlVw16_-8MnJJeppBTDTQogifPM.roa
Signing time: Sun 07 Feb 2021 06:04:39 +0000
ROA not before: Sun 07 Feb 2021 06:04:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131657
IP address blocks: 103.153.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Feb 7 06:04:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B65570D7AFFEF0C9C925EA690530D34288227CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fe:d2:8e:c0:38:db:d1:45:1b:19:01:dc:0e:
8a:9a:08:5e:94:13:98:b6:c8:70:11:77:ea:05:74:
43:d2:5d:ba:c7:a3:ce:66:25:44:32:fd:c2:cd:ba:
97:e3:70:af:6b:94:cf:0b:1b:92:b3:4c:c7:8c:dd:
23:42:de:2c:a5:c9:ab:c8:50:dd:35:e6:56:a6:db:
ef:37:0f:7e:61:b3:d6:23:fe:18:5c:94:3b:5c:25:
20:4e:d8:c3:2e:0b:6e:61:2e:bf:0d:03:9b:b7:eb:
11:56:60:48:6e:80:b2:4b:a8:35:dd:95:b8:de:5f:
03:05:75:0b:8f:d0:1a:19:c6:fd:dc:f4:cf:e8:6e:
34:4f:87:cf:b2:26:44:43:90:f2:f6:4f:af:ad:94:
1d:0b:7c:08:71:75:ee:10:3b:ef:fe:3a:6d:d5:d3:
96:21:20:88:1e:4a:c5:52:ff:e9:5c:b6:16:a3:29:
a8:dc:12:c2:49:95:c3:bb:b4:2c:3f:b8:59:63:51:
7b:d7:8a:7f:17:ef:b8:af:0a:9e:c2:e5:d5:7c:67:
c4:59:1b:9d:ad:5c:b7:cf:41:f1:1b:db:92:c5:de:
e9:fc:e5:e6:be:8f:f2:6b:53:e4:62:11:d1:12:ba:
b6:1f:86:4b:13:f6:4b:ed:b5:4b:39:32:b7:fc:ca:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:70:D7:AF:FE:F0:C9:C9:25:EA:69:05:30:D3:42:88:22:7C:F3
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/tlVw16_-8MnJJeppBTDTQogifPM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6f:41:00:6f:df:a3:52:dc:94:3e:0e:9f:23:37:32:63:6d:
7f:ae:31:c1:e3:45:12:bd:db:d5:f0:5d:be:2e:20:f7:b2:9d:
8c:81:a5:63:6e:03:f6:aa:83:c5:63:9e:23:5f:ad:4d:8d:9f:
ac:22:a2:c6:3d:4b:87:84:ec:da:77:ff:0c:4b:05:12:51:d7:
e6:f4:77:2a:05:8d:b1:5d:fc:11:26:39:55:ab:49:12:24:80:
9d:f0:fd:09:eb:f9:c0:47:cc:c2:ce:42:db:3c:b4:df:0a:50:
7e:78:e2:7f:2a:2c:be:4f:de:e5:5a:67:a1:e3:86:b1:0a:51:
28:f4:d3:34:57:d8:d3:e0:19:76:65:28:31:55:76:45:80:24:
b9:50:a3:8c:ee:18:b6:6d:24:3a:a4:50:82:8f:28:c9:7d:af:
b0:cd:1a:b3:1c:80:36:89:f1:cc:3d:59:9e:fa:da:ef:88:0e:
fc:05:8a:19:6f:dc:93:c2:6d:26:e6:63:45:19:80:3d:fc:3d:
6d:d4:12:a7:90:57:ce:ec:5b:8e:ad:e2:04:88:2c:c1:34:3c:
5b:60:75:18:4e:b2:7f:14:8b:77:63:98:93:b7:39:f5:10:05:
df:a1:a3:88:88:c7:11:0c:dc:7a:2f:22:5e:da:2c:c5:3c:b8:
61:a9:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:56 2023 by rpki-client on console-ams.rpki-client.org