Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/lgf0aux3CYfCf2Y4TLw7xFjGcGg.roa
File: lgf0aux3CYfCf2Y4TLw7xFjGcGg.roa (raw, json)
Hash identifier: I/qplDp+gY1Pih+S6fFd1U+DrmrB/d5OpHnJoWY4xyE=
Subject key identifier: 96:07:F4:6A:EC:77:09:87:C2:7F:66:38:4C:BC:3B:C4:58:C6:70:68
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 76
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/lgf0aux3CYfCf2Y4TLw7xFjGcGg.roa
Signing time: Mon 15 Aug 2022 16:10:29 +0000
ROA not before: Mon 15 Aug 2022 16:10:29 +0000
ROA not after: Tue 07 Mar 2023 02:33:36 +0000
asID: 38047
IP address blocks: 103.182.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Aug 15 16:10:29 2022 GMT
Not After : Mar 7 02:33:36 2023 GMT
Subject: CN=9607F46AEC770987C27F66384CBC3BC458C67068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:ec:c6:0e:04:bf:08:2a:50:0a:bf:8d:6b:
fa:5d:51:ca:6a:96:54:8f:14:b5:17:61:97:4f:6f:
d4:68:d8:0b:f5:92:c5:ab:ad:4d:b0:46:43:1d:9f:
ec:cb:02:38:ca:ce:d2:ca:16:ac:3a:b0:20:0b:31:
27:af:c4:2f:e0:02:66:d9:57:1b:22:c4:b3:5c:b4:
d7:c1:b8:e8:f2:6e:22:2b:0a:bf:ad:fc:96:a9:37:
ee:c7:1d:2d:f1:48:7e:ce:12:46:1e:57:37:ef:1e:
80:e3:dd:8d:e7:de:cf:02:8e:b0:b4:9e:c0:84:11:
ec:ea:c9:9b:f9:3b:c9:3b:14:af:d1:ef:5c:6e:16:
9b:60:5e:34:7a:30:e6:ce:fa:48:a8:4a:24:ea:46:
fe:b5:4b:00:53:cb:7a:0f:11:7f:f2:d0:59:ce:68:
a5:78:92:96:a2:d8:d5:4c:23:4e:9d:b9:54:27:79:
a1:ef:32:d2:46:15:15:4d:cf:24:f1:24:ff:65:ba:
cd:fc:a3:a5:ca:31:8b:3d:88:4f:91:a3:92:9c:40:
50:82:88:fd:73:7b:76:21:f4:dd:4c:f7:3a:12:a7:
6d:d8:12:e8:65:f0:c2:36:d9:c7:33:46:59:65:04:
d2:d1:09:b3:56:63:d1:6b:e2:52:c8:a7:e4:96:cf:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:F4:6A:EC:77:09:87:C2:7F:66:38:4C:BC:3B:C4:58:C6:70:68
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/lgf0aux3CYfCf2Y4TLw7xFjGcGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.227.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9b:65:d0:65:a0:6b:df:bd:3b:90:81:bc:77:e8:9f:02:eb:
70:4e:47:26:df:d0:79:ed:de:46:31:7e:8b:ce:90:d4:f9:0f:
46:c0:18:35:0a:4a:ec:c4:15:19:d8:ae:2c:0b:71:1a:24:da:
27:60:19:60:ea:41:ac:bb:42:9e:7d:52:36:f9:f2:93:e7:8d:
34:d2:74:08:89:c8:7b:a8:e1:7d:06:2c:e1:15:2b:57:83:76:
a6:19:8e:89:f4:98:47:93:a6:61:49:37:cb:72:29:67:a3:64:
5d:17:9a:43:f0:4c:2d:15:94:93:10:d8:5e:c2:87:33:88:e9:
7f:84:0c:a3:80:e1:de:1a:be:28:d0:e2:92:f7:97:bc:4a:b0:
52:78:4a:89:99:f2:d1:eb:49:88:ef:50:fd:41:aa:e2:ad:e4:
ee:26:86:60:24:52:bd:a9:05:e9:4d:b9:7f:08:2e:78:61:59:
e9:d1:f1:40:e4:98:ad:e1:d4:3e:c2:73:65:da:78:a3:16:09:
8b:87:0e:eb:78:51:07:93:14:2c:fd:d2:8d:e6:ea:b9:d8:2a:
99:9b:78:cc:07:4b:b6:2a:eb:d1:11:ad:07:f1:4d:8b:b8:6e:
e9:b3:71:01:21:aa:77:4c:ab:88:c0:bb:25:a8:cc:ab:80:08:
5a:43:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:07 2025 by rpki-client