Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LU-pB9a4E3VxClviCJHgGfIUr1c.roa
File: LU-pB9a4E3VxClviCJHgGfIUr1c.roa (raw, json)
Hash identifier: FMNhdiB+1P90Dd80rciAYgMUCOHR5jgL3TgPgHSXnbo=
Subject key identifier: 2D:4F:A9:07:D6:B8:13:75:71:0A:5B:E2:08:91:E0:19:F2:14:AF:57
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 20
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LU-pB9a4E3VxClviCJHgGfIUr1c.roa
Signing time: Sun 07 Feb 2021 13:13:29 +0000
ROA not before: Sun 07 Feb 2021 13:13:29 +0000
ROA not after: Thu 02 Dec 2021 03:52:15 +0000
asID: 132369
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Feb 7 13:13:29 2021 GMT
Not After : Dec 2 03:52:15 2021 GMT
Subject: CN=2D4FA907D6B81375710A5BE20891E019F214AF57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:c7:9e:b2:aa:3f:ab:53:65:14:09:c8:08:
9c:14:9e:fa:70:8e:d6:f7:b3:de:b6:d4:e0:b3:4e:
39:89:db:1c:66:a3:4a:44:eb:fa:1e:11:11:99:5a:
72:43:4f:dc:72:0f:3c:99:e1:da:13:2e:45:75:c9:
64:69:0d:8b:3b:f7:75:53:77:f3:fb:a9:68:4a:44:
09:ce:f1:2d:ae:a7:f1:78:c8:f9:6b:e0:01:60:cc:
f5:3a:d0:ed:84:fe:ab:b5:b1:7d:83:c8:0f:e8:21:
5a:15:14:08:aa:f3:d6:a3:8f:bc:6f:b0:2a:c0:a7:
f9:c2:9d:63:21:49:ca:84:76:5a:d1:b7:64:23:86:
21:0c:55:90:a6:a3:52:86:8b:60:ce:61:a9:94:e6:
74:1f:f7:4f:05:47:eb:a4:13:d8:11:6f:ad:e7:0c:
0e:d9:16:2a:b9:d3:57:09:56:27:9c:90:58:dd:98:
e0:ee:c5:b1:94:a1:1a:b3:4e:69:96:55:98:47:69:
de:e0:78:3d:d1:c6:c2:3a:a2:46:3a:ec:29:2d:12:
49:82:e4:db:29:3c:9d:ac:0a:f7:b1:5f:e1:a2:26:
78:b4:85:d3:67:d4:29:8f:10:66:67:49:cb:fc:04:
dc:ca:be:ae:6b:4c:8c:d1:ec:8f:97:fa:a5:51:70:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:A9:07:D6:B8:13:75:71:0A:5B:E2:08:91:E0:19:F2:14:AF:57
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LU-pB9a4E3VxClviCJHgGfIUr1c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
af:b1:c5:06:29:09:72:41:6a:9f:bd:9a:21:04:55:dc:e4:9c:
29:ec:bf:98:64:97:68:a0:b6:42:98:cf:bb:29:f9:23:6a:1b:
fb:da:13:50:c7:02:9c:bf:5e:bb:78:27:57:e1:3e:6e:68:e2:
83:e4:1e:33:1e:48:e9:8d:d8:e2:28:6b:69:1a:44:9b:72:b7:
a8:d2:31:79:59:de:77:c9:e9:1f:d5:18:6e:8a:b5:5e:d4:95:
63:8b:b9:a7:14:ef:41:a8:3a:29:ab:4f:cb:34:cc:04:b8:cf:
e0:c5:fa:d7:a5:ea:14:74:16:05:14:fe:5d:f9:3f:56:13:81:
f6:a4:25:8e:79:f7:d6:a8:23:7a:a1:86:e8:24:a6:d3:91:9f:
33:1f:f7:cf:d5:51:98:3d:ff:f5:7e:2e:d0:57:48:2e:1a:1d:
91:a2:69:4c:dc:ed:58:a6:46:73:04:e2:8d:e6:b1:bb:a0:ce:
75:51:56:f5:50:ed:58:51:09:5c:34:91:c2:5d:87:19:a4:ab:
84:7d:ee:64:66:4f:cf:fa:5c:74:dd:d5:c1:02:92:6c:22:16:
b4:cf:3f:ce:36:8b:67:af:6e:2c:89:e9:60:50:9d:1f:21:14:
f2:3c:f6:70:41:50:a1:e2:ab:55:d6:aa:2d:1a:69:07:7d:33:
26:ab:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org