Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/cLFD4VRSnP9d_rkIo3e0L0AGdWQ.roa
File: cLFD4VRSnP9d_rkIo3e0L0AGdWQ.roa (raw, json)
Hash identifier: UP4hPseeNANLTUkPyXS0GxhWxx2aQI6Br9sMICjl1qk=
Subject key identifier: 70:B1:43:E1:54:52:9C:FF:5D:FE:B9:08:A3:77:B4:2F:40:06:75:64
Certificate issuer: /CN=1D4D78F56750C7598953366D459A12B658B7FF38
Certificate serial: 95
Authority key identifier: 1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/cLFD4VRSnP9d_rkIo3e0L0AGdWQ.roa
Signing time: Thu 19 May 2022 07:06:51 +0000
ROA not before: Thu 19 May 2022 07:06:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 139328
IP address blocks: 103.158.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4D78F56750C7598953366D459A12B658B7FF38
Validity
Not Before: May 19 07:06:51 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=70B143E154529CFF5DFEB908A377B42F40067564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:17:a2:87:49:42:c8:18:6d:f2:3d:2f:b9:
e5:64:6d:5a:51:c5:99:69:69:ad:1e:72:70:29:c1:
92:01:3d:75:cb:1a:7e:ac:f9:b9:9f:83:29:e1:e2:
27:60:39:09:a4:77:c0:1b:9e:ea:f2:3e:f5:45:c9:
9c:67:0a:ac:5b:a7:c8:17:76:6d:27:2c:3d:cf:5d:
1b:01:49:dc:67:1d:46:eb:32:62:b1:12:7c:9b:b1:
c4:59:b4:da:9d:4f:39:3f:57:4d:38:18:d2:2e:f1:
50:05:9a:33:7f:0f:22:09:d6:2b:70:ae:bb:15:b2:
2a:6a:d6:71:0c:26:ea:73:7f:6f:65:49:7e:16:c1:
19:65:5b:0d:4d:83:8a:0d:6c:f1:c9:9b:46:dd:ba:
c4:66:75:5e:e8:87:27:40:b1:cf:b0:7e:23:ac:c3:
90:e1:3f:e3:5e:63:33:54:18:7d:20:13:5c:26:6c:
56:4b:4a:67:06:02:ef:c1:3c:e5:b6:4b:47:3f:34:
78:8d:85:01:ab:7d:29:b5:79:1d:e0:1c:6e:95:57:
ad:c4:5c:05:5b:aa:91:06:32:ab:fd:bf:e5:11:77:
a9:6f:51:13:10:ee:6b:7c:3c:4d:7d:8d:ca:58:a4:
f7:1c:df:99:25:94:51:26:1b:a7:78:ac:d4:72:50:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:43:E1:54:52:9C:FF:5D:FE:B9:08:A3:77:B4:2F:40:06:75:64
X509v3 Authority Key Identifier:
keyid:1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/cLFD4VRSnP9d_rkIo3e0L0AGdWQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.186.0/24
Signature Algorithm: sha256WithRSAEncryption
60:17:7c:b6:24:dc:03:80:5a:36:d8:12:46:92:f3:01:df:a9:
5a:53:de:a9:e0:36:3b:ca:82:2b:b8:fd:9b:0e:83:4c:d1:92:
71:1f:6f:95:33:78:3a:21:50:dc:14:0e:7a:e7:54:9e:a7:6b:
6f:3b:1a:13:f9:9c:f5:18:0e:19:ff:a5:fa:1d:e7:3e:7f:08:
b4:2f:3f:eb:5c:8b:7e:fa:23:b0:5d:40:d9:ce:c2:b9:5f:f0:
d9:43:e9:d1:88:6c:55:d4:73:a3:65:c0:44:7d:2d:3d:29:f5:
fa:cf:24:27:61:c0:67:6b:c3:d5:27:2d:22:4b:db:d1:32:62:
b2:00:22:fd:bf:b2:f5:63:1e:c7:f5:d0:74:2f:9a:0e:bc:44:
34:77:96:1c:42:c3:8d:40:ac:aa:3a:81:4b:dd:80:c5:42:c8:
30:1f:39:cd:02:ed:dc:8c:84:9f:32:ba:b9:09:75:0f:f8:15:
0a:33:48:30:1c:c8:df:31:15:b5:45:85:45:c7:dd:c8:3b:30:
86:48:64:97:c2:14:ce:52:79:d8:42:de:d0:cb:28:57:d2:24:
f3:14:4a:c7:42:7e:a3:7a:8f:4d:30:6e:d9:76:a6:e8:fe:5c:
ef:db:ba:60:9c:ee:68:91:39:5f:a6:ac:48:33:2c:df:1f:1a:
94:8e:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org