Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa
File: esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa (raw, json)
Hash identifier: ZYqun5vu8DJWcG+ei5axuNZID9eNd3nr/awpBI7IPPI=
Subject key identifier: 7A:CC:41:6B:C6:C2:82:94:3C:8E:04:5B:8C:9B:F1:70:2D:99:0E:14
Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial: 105A
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa
Signing time: Thu 19 Oct 2023 06:01:08 +0000
ROA not before: Thu 19 Oct 2023 06:01:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18464
IP address blocks: 103.127.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4186 (0x105a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Validity
Not Before: Oct 19 06:01:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7ACC416BC6C282943C8E045B8C9BF1702D990E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:96:a8:94:b7:95:1b:b4:34:1e:96:df:23:
05:71:c5:33:e2:b1:d4:2b:21:6d:b9:1a:80:10:ce:
6f:47:48:c1:76:8d:b0:1f:5d:2b:5c:89:ae:6e:5e:
8f:86:49:47:4e:a9:18:56:8d:b5:a9:f7:4b:b3:06:
70:10:b8:8e:de:6d:5e:72:94:84:d3:65:13:30:13:
58:e1:0e:99:1e:a1:a2:e3:c7:00:0c:0e:a5:62:06:
ca:ca:fd:26:0d:44:35:88:df:21:aa:dc:2d:04:4a:
49:92:85:63:d4:75:9e:24:ac:26:c7:b8:d6:39:bf:
26:cc:be:dc:81:2b:ee:00:0e:65:18:97:0c:84:1b:
23:88:2a:71:98:84:76:ab:e1:c7:7e:8d:f4:1c:ae:
5a:2d:db:16:8c:39:d6:0b:4f:54:f1:fc:7e:7a:7f:
b8:74:59:f6:24:68:50:b0:95:cd:9e:a7:db:a2:a5:
b0:ac:07:8b:23:be:65:73:2e:b7:e2:d6:f5:ef:58:
1a:fd:fd:89:b6:0f:d1:b3:a4:68:1d:4e:e4:8f:c2:
54:88:c2:06:61:46:1e:91:e2:fc:6b:bc:02:16:9e:
fb:f6:62:a5:af:49:74:c7:5b:c3:f7:f9:81:e2:bf:
17:69:9f:3a:cd:72:54:ff:aa:f0:36:ab:69:2d:30:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:41:6B:C6:C2:82:94:3C:8E:04:5B:8C:9B:F1:70:2D:99:0E:14
X509v3 Authority Key Identifier:
keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.242.0/23
Signature Algorithm: sha256WithRSAEncryption
16:af:71:00:19:fa:40:36:20:ff:45:54:60:93:df:cf:30:8f:
9f:af:4f:ee:dc:0d:0d:da:8e:fa:0c:00:20:83:52:99:a1:60:
0c:bd:a6:56:86:c3:03:c9:89:91:17:ba:81:df:53:cb:04:39:
18:3a:de:bb:5d:30:fe:ef:3d:c6:95:2b:3b:25:96:41:f8:4a:
46:2c:d9:5b:01:29:51:db:6b:17:e6:1e:2c:da:1e:3c:71:96:
53:e4:a5:2e:3e:03:83:6b:1f:92:51:cc:ea:64:c9:f3:df:4b:
0b:44:41:08:43:70:c5:e3:8d:93:36:2f:6f:4f:bf:ea:76:7b:
58:9c:a1:2f:c6:49:3c:81:94:aa:ee:a4:22:91:b4:b9:6d:be:
66:a0:38:2f:b2:ed:35:12:56:54:cc:e4:49:c1:72:22:12:ca:
a9:b7:0d:6e:44:74:9f:39:bb:5e:32:1b:c6:53:89:96:02:cc:
2e:ae:64:15:58:30:a5:9e:f5:51:5c:69:3e:e0:64:b9:de:f4:
2a:0b:87:25:46:b6:e5:df:75:91:f1:7f:b7:3e:db:40:de:4f:
87:7f:c6:1b:0c:eb:14:30:aa:5a:f9:c5:6e:d1:87:b6:2d:d8:
cd:fc:4a:a1:d0:c0:cb:82:16:72:0a:a4:08:25:fa:e7:ab:ec:
62:de:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:28 2025 by rpki-client