Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/WO422plaKeOdNitSC9cvnhN5408.roa
File: WO422plaKeOdNitSC9cvnhN5408.roa (raw, json)
Hash identifier: +lnCjbTm4i3HxfzF/jvjsqWQ5Flf4/d2zZDExGqdWO8=
Subject key identifier: 58:EE:36:DA:99:5A:29:E3:9D:36:2B:52:0B:D7:2F:9E:13:79:E3:4F
Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
Certificate serial: 0DD7
Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/WO422plaKeOdNitSC9cvnhN5408.roa
Signing time: Sun 07 Feb 2021 12:48:27 +0000
ROA not before: Sun 07 Feb 2021 12:48:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131634
IP address blocks: 103.127.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3543 (0xdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
Validity
Not Before: Feb 7 12:48:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58EE36DA995A29E39D362B520BD72F9E1379E34F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:90:ad:99:bb:29:b9:48:73:f2:dd:2a:12:
6e:7a:32:39:75:0c:62:1c:0e:88:9a:4e:ae:f6:82:
44:93:eb:62:46:8c:6f:8e:8e:53:1f:e2:b8:13:00:
99:21:ce:04:f4:96:ee:ef:41:d5:ee:32:e6:d8:25:
7f:38:20:17:e5:e4:03:99:83:00:83:b3:91:48:22:
43:e3:df:d8:27:73:3e:74:19:12:a9:c4:7e:0f:63:
e5:21:40:47:ac:46:94:dc:71:84:d3:28:6d:9b:72:
f8:81:f9:9d:e2:1b:2c:e0:0c:f7:28:1d:33:1d:2e:
32:54:92:eb:25:c3:ab:5e:70:71:2b:a2:88:77:bb:
1e:90:e2:46:46:13:f6:e4:fd:b1:43:57:4e:0d:5b:
af:34:9b:1a:18:e2:ee:29:14:f4:a4:27:a9:b7:5a:
bd:a1:e9:bb:f6:e7:9f:fc:f0:82:a6:fc:b5:c3:59:
3b:41:02:35:56:67:8b:2c:fc:87:36:ca:16:32:aa:
f5:65:70:7e:8d:1b:1b:d9:f3:c0:6b:88:21:31:a2:
f2:35:ad:37:03:8a:c3:ab:38:45:57:ae:9e:3d:ea:
ba:94:e0:58:20:ee:99:79:30:f4:66:0a:fc:f8:73:
f0:d3:fa:a5:e3:7c:2c:ec:b2:b6:c4:39:f3:cf:86:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:36:DA:99:5A:29:E3:9D:36:2B:52:0B:D7:2F:9E:13:79:E3:4F
X509v3 Authority Key Identifier:
keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/WO422plaKeOdNitSC9cvnhN5408.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:f8:d4:bd:25:1e:6f:10:f7:98:5c:6f:cb:8c:c7:40:d4:83:
e6:d5:07:53:a5:8c:f7:63:a4:eb:18:80:bf:d1:f5:f6:b9:4d:
7e:e0:ac:91:5e:18:07:a4:2e:53:4e:8a:2b:fb:79:85:6d:c5:
50:10:4d:18:14:a4:fe:f5:01:c5:c2:d7:e8:5e:7f:a1:da:19:
12:35:d3:23:84:e5:a7:d0:91:0d:2e:54:71:81:ba:a8:d8:33:
f7:2b:ee:2a:51:4f:67:30:15:36:2c:22:a5:5f:56:14:17:ad:
ae:aa:e2:4c:be:22:f0:da:29:60:67:c8:4f:a8:c8:44:17:7b:
ed:7a:4b:3c:41:ad:75:5e:ea:b2:af:cc:c1:94:b9:aa:13:c9:
e9:e2:b5:6b:22:0a:48:d4:dc:20:1d:ff:05:11:53:f6:8b:4f:
ae:0f:6b:f3:e3:8a:ff:c3:c4:84:5d:77:c5:75:e6:7c:91:66:
ed:28:db:ad:d4:6f:88:33:6d:45:f4:a2:7f:69:6a:6c:27:79:
d0:68:ef:68:5b:90:4a:fd:26:30:da:9a:64:13:d7:58:08:67:
09:52:5e:15:87:0e:ab:f6:ed:d4:21:4e:53:0e:97:5e:54:fa:
1c:a8:3f:ea:c5:87:11:c6:af:a4:25:83:8e:2a:ce:d7:ce:16:
3e:70:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:45 2025 by rpki-client