Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/L8hSZ9-VwMlNeLn0SwROjjKWlWg.roa
File: L8hSZ9-VwMlNeLn0SwROjjKWlWg.roa (raw, json)
Hash identifier: g7DwwEQJDBz9UgPX3cY/j2ncaE833pQhlC5Q+z2lWuk=
Subject key identifier: 2F:C8:52:67:DF:95:C0:C9:4D:78:B9:F4:4B:04:4E:8E:32:96:95:68
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0573
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/L8hSZ9-VwMlNeLn0SwROjjKWlWg.roa
Signing time: Fri 01 Sep 2023 09:00:34 +0000
ROA not before: Fri 01 Sep 2023 09:00:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9678
IP address blocks: 103.98.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 1 09:00:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2FC85267DF95C0C94D78B9F44B044E8E32969568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:e2:44:a6:54:6d:15:57:bf:7c:f0:25:58:
b6:2d:9d:a3:5f:60:9f:c6:40:1c:00:84:fa:29:8c:
a1:3b:cd:10:1a:15:7a:5c:4e:43:71:21:d4:27:f6:
f3:4f:fe:2c:fc:32:0d:bf:67:5c:19:f3:e3:78:da:
e8:90:80:cf:58:58:72:ef:12:23:d1:8f:d9:c0:8e:
08:0b:7b:28:67:4f:f4:f1:13:43:18:0f:d5:18:3b:
c0:9f:65:bc:0a:5a:39:75:3d:47:38:77:f7:b6:b3:
6c:58:dc:2f:1d:71:90:10:c8:d9:af:50:fe:2a:56:
a9:a5:b8:08:45:b0:99:4d:90:e7:28:4f:9e:00:4a:
09:b6:14:ba:ce:5e:71:af:c1:e6:6d:70:ff:d1:15:
5f:55:83:32:bc:76:8a:7e:e6:6c:58:70:17:1d:12:
85:93:1e:55:3a:3d:4e:56:51:0f:f1:e6:22:d6:d9:
f1:1c:36:26:e4:c0:46:78:11:26:8f:c9:22:08:de:
80:a2:e2:dc:82:bb:64:66:56:ce:16:82:5c:87:2d:
08:c3:d6:6c:47:bb:cc:7b:be:26:13:06:bc:5c:36:
10:ee:eb:3b:72:86:05:bc:ac:d0:a8:d7:9b:97:e8:
86:66:83:ac:a5:29:8f:a6:ea:6d:89:78:bb:4f:ce:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:52:67:DF:95:C0:C9:4D:78:B9:F4:4B:04:4E:8E:32:96:95:68
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/L8hSZ9-VwMlNeLn0SwROjjKWlWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7a:48:d5:c9:36:61:5a:ae:38:a1:d4:c8:4b:95:16:4a:21:
bf:04:e5:f7:e1:7a:31:3a:fe:5f:e6:bd:b7:e3:c3:f5:58:ba:
ee:40:9c:1b:d3:e2:d5:03:93:5a:d0:05:63:c7:66:63:15:0e:
72:ee:6c:97:f7:f8:5c:da:e8:48:d9:0f:e1:04:3e:77:39:b6:
6c:83:9f:a4:4a:9d:3f:a6:63:fb:f0:3d:70:c6:46:33:2f:f5:
41:cd:b3:b7:10:20:3d:2f:b2:21:24:fe:97:6a:b1:3b:5b:30:
97:8f:72:8a:19:64:aa:bc:6c:d3:3c:53:1f:49:8d:34:ef:20:
29:be:39:26:a3:07:6e:48:59:1d:ba:73:33:2a:ef:ee:7c:ff:
3f:72:7c:3b:2a:cd:ac:a3:f4:9a:c4:f0:fe:c4:6a:0a:8a:e6:
35:d0:12:7c:7a:53:05:4f:02:dc:5b:31:b4:8a:65:15:97:d2:
a0:90:b5:ef:31:bb:32:03:0d:9f:17:08:e3:2f:7f:09:4f:18:
14:aa:f0:66:5d:9c:b3:16:13:18:e4:f8:24:b1:9f:88:76:b0:
8b:0c:b2:56:d7:b9:6f:6d:15:a7:5c:7f:d2:c4:bb:24:1d:1a:
d8:15:e7:45:07:d8:39:fe:20:a8:7c:34:8f:c0:d8:51:ed:22:
0a:fa:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:13 2025 by rpki-client