Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/KmHbdSzONkI3UAhmxMPU0FDqxec.roa
File: KmHbdSzONkI3UAhmxMPU0FDqxec.roa (raw, json)
Hash identifier: Kj8Ri3ravSg7xx7ALzt2GtXwXbzh2dR9u0417kR1ZlE=
Subject key identifier: 2A:61:DB:75:2C:CE:36:42:37:50:08:66:C4:C3:D4:D0:50:EA:C5:E7
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 095D
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/KmHbdSzONkI3UAhmxMPU0FDqxec.roa
Signing time: Wed 29 Sep 2021 02:52:45 +0000
ROA not before: Wed 29 Sep 2021 02:52:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18426
IP address blocks: 203.145.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 29 02:52:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2A61DB752CCE364237500866C4C3D4D050EAC5E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:ca:fa:28:ce:fd:61:ce:1f:2e:e5:7a:ef:
86:7a:3b:45:6d:15:fb:b3:00:6d:de:09:be:14:00:
e6:28:d6:ab:1f:4d:80:e8:fc:4b:29:91:1e:92:01:
9c:a6:21:f3:bc:03:b7:0c:b1:41:e6:21:d3:f3:4b:
95:51:cd:14:ed:3d:e8:fe:a8:3d:b2:5d:6b:fa:49:
ef:71:e7:cd:c9:b4:b2:7d:36:49:95:df:11:31:01:
d5:2d:41:d1:98:12:fe:b1:3b:7d:60:90:ed:9b:e6:
8e:48:9f:71:33:af:cb:2d:da:36:d9:4e:03:5e:5a:
96:cf:93:09:2b:6c:52:8a:12:11:48:8c:a9:27:5a:
a1:8b:68:d3:a7:c2:da:1d:9a:61:7a:05:0c:cb:0e:
b0:75:6a:c3:df:ee:85:51:66:f1:a1:b6:02:0b:73:
36:9c:6f:39:50:1a:8b:06:19:a8:f8:36:37:bc:dc:
f3:da:4c:58:0c:ff:c4:d3:53:17:09:df:d2:79:cd:
c9:4a:e4:80:59:95:8b:e0:dc:c2:e7:49:13:07:ce:
a5:93:0e:e6:45:2b:73:f3:64:4c:c0:53:35:9e:fd:
bb:5e:12:44:b2:92:e6:78:b1:0d:c6:55:12:a4:d9:
7e:1f:ac:7e:6a:52:66:49:40:17:04:a6:85:83:9b:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:DB:75:2C:CE:36:42:37:50:08:66:C4:C3:D4:D0:50:EA:C5:E7
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/KmHbdSzONkI3UAhmxMPU0FDqxec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.192.0/21
Signature Algorithm: sha256WithRSAEncryption
53:9e:3c:22:60:9d:c9:24:e6:26:32:0a:00:54:ac:ec:40:83:
f2:4f:ec:0f:17:5d:ad:ea:33:98:d2:33:54:8e:17:c8:5e:d7:
6e:57:db:6f:6b:70:f0:0d:79:d1:87:e3:62:b9:3e:e3:72:59:
50:b6:65:48:3b:04:5a:f3:9f:a5:c8:45:15:01:ce:eb:58:2e:
ee:f1:94:45:ee:db:cb:77:d0:6d:a9:cd:18:17:f1:a2:df:52:
93:08:7e:04:9f:85:7b:7e:14:e1:79:eb:98:24:75:72:cc:f0:
ae:5c:2e:64:18:d6:a3:58:3b:39:ee:0b:a5:c7:a7:03:2e:53:
55:bb:0e:b2:6a:3a:79:0b:56:92:fe:5e:5f:90:cc:e6:9e:30:
b4:66:18:67:ba:07:a0:34:c9:1e:a1:f2:43:aa:e7:a1:09:6d:
24:3a:1d:bf:74:61:e9:78:5d:b0:5e:83:e5:7f:9c:65:97:57:
67:f1:73:05:b4:d5:6f:64:6f:9c:77:f0:4a:bd:22:c7:91:78:
83:63:a0:73:ad:48:be:9c:9c:a2:d1:99:6e:38:c8:63:29:98:
7e:75:84:a9:37:32:70:4d:a5:95:fd:45:d8:98:ea:7a:27:de:
25:4c:a2:44:0e:5f:c0:34:a7:1d:2c:d8:f8:6b:ff:70:a6:da:
6f:83:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org