Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/VEdi3VFhq4GgGEvL9eAtZaZ7sXc.roa
File: VEdi3VFhq4GgGEvL9eAtZaZ7sXc.roa (raw, json)
Hash identifier: ATycioZCU0e4Xmr3u8r4FBl3RjlQUauiHTU1G4gt2us=
Subject key identifier: 54:47:62:DD:51:61:AB:81:A0:18:4B:CB:F5:E0:2D:65:A6:7B:B1:77
Certificate issuer: /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial: 0FAB
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/VEdi3VFhq4GgGEvL9eAtZaZ7sXc.roa
Signing time: Mon 08 May 2023 09:56:31 +0000
ROA not before: Mon 08 May 2023 09:56:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 14618
IP address blocks: 103.125.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4011 (0xfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
Validity
Not Before: May 8 09:56:31 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=544762DD5161AB81A0184BCBF5E02D65A67BB177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:bb:69:a1:fc:a9:b0:8e:20:a1:11:80:a0:
f6:3e:cf:9e:da:5d:42:34:03:41:59:95:fd:b1:1e:
06:5b:66:1f:a6:1d:52:6a:ef:3c:76:82:08:a9:a7:
28:1b:29:bc:d9:76:6a:32:a2:bf:27:ca:f2:fa:f4:
b3:b7:9f:66:4d:bf:cd:87:f7:49:eb:c7:2e:cc:fe:
53:82:a5:c0:8a:78:a4:6c:8e:7a:60:1e:bb:84:35:
6c:f1:32:97:02:7a:7e:db:ad:15:3f:93:2e:c5:a9:
5e:1d:0f:d7:3b:ab:f5:e9:e6:93:b9:0f:1c:39:fe:
69:ec:91:f0:1a:2f:84:f8:6d:56:5c:e7:08:21:8c:
e7:58:19:59:ef:9d:9a:d1:09:ca:3c:7f:54:95:b9:
d6:ef:bd:20:11:17:6d:00:6e:02:bb:4f:b0:17:53:
4b:51:8c:4a:19:ca:97:26:40:8c:01:36:e1:28:cd:
d5:1c:50:23:e1:a2:cd:0e:31:4d:23:1c:44:7d:b6:
69:44:9a:02:13:77:34:b5:55:03:d7:90:52:8d:75:
0f:f7:fa:b6:4f:72:96:36:26:1e:18:14:94:d4:15:
ae:f0:40:40:a3:1f:c4:99:2c:a3:a5:58:35:38:19:
b5:a6:5d:5c:5f:cc:ea:bc:32:1f:f4:e3:9e:75:d0:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:62:DD:51:61:AB:81:A0:18:4B:CB:F5:E0:2D:65:A6:7B:B1:77
X509v3 Authority Key Identifier:
keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/VEdi3VFhq4GgGEvL9eAtZaZ7sXc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:04:6c:d1:f3:0a:50:3b:d2:e6:01:0f:13:27:59:00:5a:f7:
b3:9e:eb:1c:c1:3e:73:05:11:b0:8a:22:d8:7a:5b:8c:b7:4a:
b9:7d:6c:69:7e:43:61:31:c5:9d:d2:1b:5f:77:34:26:31:5c:
ff:61:29:43:cb:35:38:4f:b7:a8:2b:8a:a3:69:62:03:37:96:
62:43:5b:0d:9c:95:d6:5e:02:6a:97:e3:cb:db:1e:bd:84:c1:
56:1d:83:00:d7:90:5c:4f:3d:4f:56:ea:4c:b3:a8:86:59:44:
80:e9:c9:d1:2d:15:95:b8:50:16:36:d9:b0:77:0f:d5:5b:17:
71:8c:ea:9b:f6:32:cf:87:ff:b9:2e:0d:a2:ea:40:1a:fe:18:
4a:75:2b:f4:a0:7e:03:b3:0e:0a:1c:d6:a4:06:2d:51:90:ea:
45:18:26:12:84:fa:f0:cb:9e:d5:33:70:e5:aa:4e:3d:e4:05:
39:1f:f0:2c:28:3d:d4:ed:80:76:ca:8a:1e:3c:0c:8c:ef:7f:
a2:7a:ee:58:5d:3c:95:f3:e8:c4:11:ba:c9:e1:4d:02:6d:0d:
a3:ed:b8:01:2a:46:60:a6:15:ca:32:b0:e4:a0:b4:9a:05:fa:
dc:a3:44:b0:f5:59:a6:01:6a:22:11:3d:e1:f7:de:1b:b9:79:
f0:b2:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org