Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/-ciWgzznEzm5FPzlUWHhIR1mJV4.roa
File: -ciWgzznEzm5FPzlUWHhIR1mJV4.roa (raw, json)
Hash identifier: 3bJCo7+TfwlZ8e/KI0LY2ayv5TF4AyElOotDy2ZTssQ=
Subject key identifier: F9:C8:96:83:3C:E7:13:39:B9:14:FC:E5:51:61:E1:21:1D:66:25:5E
Certificate issuer: /CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
Certificate serial: 04
Authority key identifier: 55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/-ciWgzznEzm5FPzlUWHhIR1mJV4.roa
Signing time: Wed 20 Sep 2023 03:53:38 +0000
ROA not before: Wed 20 Sep 2023 03:53:38 +0000
ROA not after: Wed 18 Sep 2024 09:08:33 +0000
asID: 131642
IP address blocks: 103.99.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
Validity
Not Before: Sep 20 03:53:38 2023 GMT
Not After : Sep 18 09:08:33 2024 GMT
Subject: CN=F9C896833CE71339B914FCE55161E1211D66255E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:66:b8:69:4b:aa:00:c0:24:db:cf:23:f2:
bc:47:45:12:d0:eb:14:15:cb:7f:7b:3c:32:9d:86:
96:fc:e1:57:d9:65:d5:d5:88:f6:3b:27:a5:e1:8c:
88:98:9f:fd:51:be:6f:df:c2:9f:f2:69:95:d4:d8:
d0:66:2e:10:c4:b2:5f:2d:4e:ba:4e:e3:ce:e3:4a:
ba:81:b9:3c:99:20:21:4b:0c:61:05:79:2d:8c:43:
67:4e:71:f2:a1:ca:de:3a:f0:98:a8:b0:84:06:88:
07:f5:05:e0:9b:dc:f4:0c:dd:36:0c:0b:75:cd:f2:
a5:4f:20:86:13:6a:93:6f:ef:ef:a5:20:33:4a:98:
6c:81:62:42:a4:2b:15:b4:9e:bc:11:55:a8:aa:cc:
04:44:c7:ec:85:fb:0a:75:b9:7a:bd:13:b4:63:53:
ec:ba:3d:10:74:ea:a0:51:b6:fc:9b:0a:95:61:5d:
a0:be:08:0d:33:c9:c0:c0:e9:86:0a:9e:aa:f7:5f:
ee:9f:74:a7:61:b0:96:a6:63:7c:4b:25:e5:4a:e1:
90:c5:19:da:45:ee:c8:f5:af:1a:92:b0:ab:83:a0:
86:fe:d1:a1:03:58:95:8f:04:65:53:92:4b:02:85:
b2:73:fa:46:8d:57:87:d8:8b:ec:cc:96:0f:d3:0c:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:96:83:3C:E7:13:39:B9:14:FC:E5:51:61:E1:21:1D:66:25:5E
X509v3 Authority Key Identifier:
keyid:55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/-ciWgzznEzm5FPzlUWHhIR1mJV4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.138.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:fe:ff:1f:c5:14:e6:36:f7:47:e7:d9:5a:5b:f2:7d:82:95:
6c:99:67:97:e9:44:94:24:04:ad:47:71:02:39:85:2f:b7:cc:
16:6c:e3:69:70:78:06:74:19:25:d9:c0:20:9a:6a:54:12:31:
70:3c:09:a5:69:3b:72:4d:32:19:8a:f2:f5:d2:81:4d:f8:16:
68:56:db:e8:16:92:8a:96:ce:96:42:fa:8e:d0:fe:81:93:87:
88:3c:ee:8c:74:52:ae:09:23:b0:c9:dc:16:1c:93:dd:ae:75:
8a:59:7f:61:fc:17:fa:bf:7e:da:4b:7e:93:88:a0:8c:f9:68:
64:28:21:c6:49:b6:45:99:52:d8:f4:23:0f:05:1c:e2:5b:d1:
76:c1:61:10:b5:27:5a:f4:50:4c:c8:03:a1:bc:a5:f0:6b:b7:
ca:89:2a:d4:9e:17:b4:e8:6a:51:c0:01:96:29:6d:45:d9:00:
52:54:ad:12:08:01:ac:cf:34:f5:d3:48:b5:01:ce:cb:7b:41:
5b:df:fe:a7:7f:23:4a:dd:0d:4c:b5:c0:4b:88:16:f9:e8:1a:
13:b6:2a:05:b3:f4:93:ec:b6:42:13:1a:bd:a2:9c:a6:3b:64:
9d:9b:b9:d4:b2:37:44:97:60:3a:87:8d:df:49:f1:a4:70:09:
a5:49:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:03 2025 by rpki-client