Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/K9A6-nB3kCwNikJFoylQJ9mStiY.roa
File: K9A6-nB3kCwNikJFoylQJ9mStiY.roa (raw, json)
Hash identifier: E7qFbjSjrv1MLiPrJbWrn+iEyFTKfOwSos4tMc3IEyQ=
Subject key identifier: 2B:D0:3A:FA:70:77:90:2C:0D:8A:42:45:A3:29:50:27:D9:92:B6:26
Certificate issuer: /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Certificate serial: 0AFB
Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/K9A6-nB3kCwNikJFoylQJ9mStiY.roa
Signing time: Tue 29 Sep 2020 10:04:37 +0000
ROA not before: Tue 29 Sep 2020 10:04:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131645
IP address blocks: 103.134.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2811 (0xafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Validity
Not Before: Sep 29 10:04:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2BD03AFA7077902C0D8A4245A3295027D992B626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:57:25:99:02:2c:63:7d:3a:e8:69:13:cf:
a9:fb:dd:5a:b0:6f:bd:c0:62:17:32:69:b7:7d:15:
1e:09:ab:64:68:0b:c6:af:9a:8c:4b:69:85:ca:a8:
0e:94:3d:c7:6d:a4:1b:65:5c:35:49:53:72:bc:8b:
97:7a:b5:12:19:81:6e:4d:b1:fc:6d:20:d8:1c:57:
1e:20:98:89:fa:a2:4f:c3:d0:e0:60:bf:16:e0:b2:
ae:6b:d0:63:6f:95:f2:43:26:b1:09:60:d7:e0:ec:
2a:44:73:63:68:7f:62:a0:35:21:84:6e:cd:ee:87:
bb:48:8c:6c:b0:b3:97:d0:55:53:b5:89:34:26:03:
c2:1f:2d:77:c9:64:80:50:49:f8:f6:16:70:22:4e:
d2:15:0c:63:1c:b4:ea:06:80:78:7c:8c:1f:69:38:
dc:e2:33:24:73:fa:12:36:94:1a:80:de:d1:73:28:
fb:9f:12:65:71:21:fb:ae:de:2f:2c:7a:0f:c7:17:
1c:ce:1b:56:d0:bf:f9:2b:70:f1:b9:89:14:b0:e0:
1a:6d:c0:f2:ed:ab:81:6f:23:2f:d1:27:de:e9:71:
bc:33:a7:94:55:9b:cc:f3:4a:6b:ad:c7:e8:51:ec:
24:af:32:fd:1a:ec:df:3c:ad:cf:b5:08:d8:ca:0c:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:3A:FA:70:77:90:2C:0D:8A:42:45:A3:29:50:27:D9:92:B6:26
X509v3 Authority Key Identifier:
keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/K9A6-nB3kCwNikJFoylQJ9mStiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:56:f3:65:35:5d:d6:72:67:42:c9:71:90:86:1a:51:bc:47:
dc:2b:15:89:d9:aa:0c:f5:e8:71:c6:b5:b6:ad:af:49:34:52:
ff:a8:f5:af:c7:67:48:0e:e3:8c:88:53:cd:3f:ed:e4:3e:7e:
1a:80:c9:b1:61:dc:36:3d:16:f4:0e:75:12:e6:63:48:5c:69:
b5:83:8b:d1:c6:a8:87:69:2d:85:08:5f:44:6c:c8:17:37:24:
73:23:39:f1:11:45:72:62:7a:b7:58:df:b0:5f:b7:00:9b:b1:
64:dd:8e:e9:d8:b0:98:e6:a4:d3:6f:de:48:5c:9f:b1:8e:ed:
09:5f:63:4b:3b:2c:34:99:0c:1e:63:ef:ec:b0:f1:cd:15:85:
09:69:b3:68:86:f9:cf:2b:27:05:ee:22:f0:b6:80:7a:c8:a9:
dd:a8:7e:79:b0:37:9a:ab:3e:e9:0b:2e:7d:71:d3:91:ef:7a:
9b:a5:24:56:bc:d0:ff:1a:8a:f6:74:c4:8d:a7:18:c2:a2:a9:
51:35:f0:e6:4d:7f:90:43:44:d3:6c:0c:bf:1c:fd:53:b5:a1:
f9:ca:a1:b8:a7:19:da:11:b2:5a:55:4a:55:9b:1c:a3:05:62:
63:96:0e:6f:20:bd:12:97:32:ab:44:57:bf:fe:52:9e:02:ab:
b6:66:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:00 2025 by rpki-client