Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/-Xvagrt_2wLpM89btvBtoXOje4A.roa
File: -Xvagrt_2wLpM89btvBtoXOje4A.roa (raw, json)
Hash identifier: WYv7kv/WDBkh78ZJnpLuAoJigIhhjAQPG/xwX6hWxq8=
Subject key identifier: F9:7B:DA:82:BB:7F:DB:02:E9:33:CF:5B:B6:F0:6D:A1:73:A3:7B:80
Certificate issuer: /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Certificate serial: F0
Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/-Xvagrt_2wLpM89btvBtoXOje4A.roa
Signing time: Wed 31 Jul 2024 15:39:58 +0000
ROA not before: Wed 31 Jul 2024 15:39:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131642
IP address blocks: 103.254.212.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Validity
Not Before: Jul 31 15:39:58 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F97BDA82BB7FDB02E933CF5BB6F06DA173A37B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:8e:a9:4a:cb:2d:48:16:47:7e:44:51:ab:
e8:5a:4a:25:68:11:76:7e:06:35:64:52:2c:49:fb:
0e:f7:14:55:43:e1:20:e4:50:4f:73:97:94:56:d8:
4c:4b:bb:06:46:7c:c6:df:9a:7e:e2:aa:1b:12:02:
40:0c:2e:16:f6:05:91:ad:48:d9:a2:2e:b0:2c:a1:
bc:12:43:d6:ba:7c:79:a3:d9:30:78:65:90:c2:63:
5c:a6:ff:d6:44:5c:68:53:81:42:15:5b:0d:00:0e:
75:c0:ef:39:f0:ef:13:ba:b4:12:55:86:0a:3e:72:
c6:df:60:1f:89:97:5b:21:58:f1:bf:4d:b2:07:df:
cd:cc:85:87:9a:c3:dc:5e:96:5a:2e:a5:bd:c6:5c:
da:4e:d1:50:c5:15:96:52:e9:55:89:f2:82:71:20:
5c:9c:53:fb:ff:0b:58:4f:10:73:2b:43:1a:ab:80:
6d:ae:36:bd:2d:0e:50:7a:9a:52:87:78:99:03:a8:
60:ac:b6:44:bc:6b:be:ae:e8:de:b7:1c:05:1d:d3:
6e:d0:b7:38:9b:4e:c9:f5:4d:89:1b:b8:b8:41:53:
15:3d:85:bb:4c:35:21:97:36:4f:e9:32:bc:7b:1b:
e4:33:9b:c5:a6:44:23:27:b8:f6:7c:ae:19:1f:81:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:DA:82:BB:7F:DB:02:E9:33:CF:5B:B6:F0:6D:A1:73:A3:7B:80
X509v3 Authority Key Identifier:
keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/-Xvagrt_2wLpM89btvBtoXOje4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:78:37:ec:4e:a3:ff:18:4d:71:c7:e1:c1:38:00:56:f4:45:
42:da:e6:b4:79:68:04:1b:0c:1a:67:70:b1:94:ad:ef:6d:df:
bb:8b:0c:a5:1f:09:2b:26:19:ce:74:1b:d8:3f:a2:23:09:e4:
38:17:04:72:0a:5f:08:d5:9b:ac:21:13:91:73:c8:cb:76:a1:
f2:2a:a2:84:1f:fe:84:55:bc:15:f4:b8:84:fe:11:7a:8e:04:
1b:08:bf:0e:00:0c:8f:39:16:70:6d:8a:d9:89:54:58:a8:ba:
47:5b:a6:39:25:5b:db:0f:96:e9:de:07:da:87:c4:c7:38:05:
20:49:c4:cd:28:48:c8:f1:a2:aa:d2:43:b9:ef:01:92:56:49:
8c:7f:71:8e:6d:bd:62:1e:cb:4b:24:2b:70:bc:43:de:d9:5c:
97:d5:35:fb:bb:7d:c1:42:13:53:44:8d:1d:5e:8b:bb:09:36:
dc:05:12:18:a6:ce:dc:46:c6:57:d9:38:39:8a:fd:08:66:14:
51:3c:b1:f9:af:33:2c:20:a3:67:74:3b:9d:b3:7d:60:6e:22:
3c:06:6e:69:ce:59:97:9d:79:47:05:ca:3a:85:d3:d8:b3:ac:
5a:6e:90:5c:fc:2d:84:96:ab:e4:79:d4:3d:14:ac:23:a0:56:
13:88:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:23 2025 by rpki-client