Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/oAjo4FZC4ZO4sMmibpGPHR93Wck.roa
File: oAjo4FZC4ZO4sMmibpGPHR93Wck.roa (raw, json)
Hash identifier: uLYM5dkOvvfIh2jlafZtBbGT74O3c7Fytv+bv/YkPKE=
Subject key identifier: A0:08:E8:E0:56:42:E1:93:B8:B0:C9:A2:6E:91:8F:1D:1F:77:59:C9
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 03EF
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/oAjo4FZC4ZO4sMmibpGPHR93Wck.roa
Signing time: Wed 29 Sep 2021 02:37:47 +0000
ROA not before: Wed 29 Sep 2021 02:37:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17415
IP address blocks: 103.152.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Sep 29 02:37:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A008E8E05642E193B8B0C9A26E918F1D1F7759C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:a9:86:c5:08:c2:59:94:cd:dc:c9:ce:69:
2b:3d:49:fb:b1:84:ad:0a:19:92:1c:ec:96:2d:b8:
18:c4:ce:70:33:aa:4f:58:69:3c:fa:5a:09:7c:24:
a5:3c:ac:9d:f8:34:b1:ff:90:30:41:fc:ce:ed:f2:
8c:db:ff:18:5b:5a:cd:59:6a:24:1e:41:c9:28:fb:
18:c4:f6:c0:a6:fc:00:e4:c4:ef:c3:e6:84:c8:d8:
3e:93:b8:b3:89:57:72:66:76:5f:ed:4d:d0:c1:26:
5a:62:a6:2c:77:64:f0:5b:d0:66:6d:d3:57:9e:fe:
43:4c:e5:f7:15:a6:26:28:7f:e2:fb:d2:f7:02:cd:
2c:42:ba:a5:55:35:81:c0:f0:84:53:79:28:e4:51:
b0:89:22:92:a9:8f:03:f8:d0:3f:13:0b:4b:32:ad:
ea:9a:87:81:58:84:cb:f6:47:fa:9d:cd:37:a5:4a:
1d:4d:b3:5d:b3:cd:e2:d5:15:a0:86:65:60:3b:78:
ff:56:6c:dd:a9:78:20:a7:3e:cc:77:d9:41:47:e1:
1d:61:13:56:0d:40:5a:64:47:83:85:c1:0c:c3:7a:
8c:b8:a2:4b:bc:40:fe:a1:fd:3c:57:b3:63:88:78:
81:a1:23:df:a1:6e:5d:dd:45:15:56:ab:48:9d:fa:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:E8:E0:56:42:E1:93:B8:B0:C9:A2:6E:91:8F:1D:1F:77:59:C9
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/oAjo4FZC4ZO4sMmibpGPHR93Wck.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0e:13:24:b7:ce:41:44:f3:75:6f:22:7e:7e:f8:f1:c8:2e:
2b:b2:69:c6:4e:ed:71:85:11:89:dd:50:82:1b:fb:5e:15:a6:
ea:ae:e0:0a:fe:a5:ec:64:02:4e:1d:a6:d2:fc:76:6d:2e:a8:
e6:e1:f4:60:ed:5f:15:74:90:a8:34:48:a0:d6:22:56:f0:15:
f8:f0:ef:66:cd:aa:e6:ac:52:7d:5d:6f:41:ea:d3:7d:b7:63:
f3:51:f8:9b:cf:87:3c:c5:f3:d1:15:aa:63:49:c9:36:b6:d4:
cd:8b:11:0e:d2:13:72:9e:be:af:24:68:a2:f8:f0:f4:45:b5:
5f:46:15:5c:7d:c3:9e:85:e4:9f:0a:71:c2:fe:0f:f2:43:2b:
5b:34:b0:84:32:ec:0b:c3:96:b7:70:c8:14:00:9d:45:3f:0b:
9d:47:cc:29:4b:54:aa:5f:50:31:0c:7d:be:e1:6d:09:61:a0:
e3:a3:d7:6c:fa:51:f2:ac:80:8d:74:98:ad:02:3b:09:c2:99:
4c:d2:40:1e:ec:e0:ba:ed:e2:0c:2c:c0:4f:34:0e:5e:4f:83:
e9:8d:ff:73:06:5c:d9:0a:9b:a7:3e:e2:01:d9:c0:6b:74:81:
6e:d7:61:2d:f1:4e:29:93:e2:89:ee:0d:9a:ae:b6:56:7c:78:
fa:1f:19:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:21 2025 by rpki-client