Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/tJxE_kCDvtetmCwWGXgZ7D7JNBY.roa
File: tJxE_kCDvtetmCwWGXgZ7D7JNBY.roa (raw, json)
Hash identifier: 2omotye+udghAvRJ59PBXUdEZuaAgwaW17JRFCzu1Oc=
Subject key identifier: B4:9C:44:FE:40:83:BE:D7:AD:98:2C:16:19:78:19:EC:3E:C9:34:16
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 05
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/tJxE_kCDvtetmCwWGXgZ7D7JNBY.roa
Signing time: Mon 11 Jan 2021 09:44:16 +0000
ROA not before: Mon 11 Jan 2021 09:44:16 +0000
ROA not after: Thu 02 Dec 2021 03:52:15 +0000
asID: 132369
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Jan 11 09:44:16 2021 GMT
Not After : Dec 2 03:52:15 2021 GMT
Subject: CN=B49C44FE4083BED7AD982C16197819EC3EC93416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:a5:98:27:93:3f:82:11:6c:73:f0:6c:8a:
32:5a:4e:d0:72:e8:dc:60:5e:a7:82:46:02:9e:82:
0c:d3:ec:ad:10:ca:e3:d3:c9:83:fc:10:cd:03:d8:
aa:8d:eb:f9:4f:7c:f9:42:0c:c0:b8:80:ba:57:70:
a7:63:5b:da:b0:d3:1d:5e:2c:db:a3:19:e4:2d:76:
d4:93:7b:21:8b:1f:14:b3:fa:74:32:cc:65:45:c7:
9d:52:09:cc:11:fa:2b:59:8e:56:ea:49:d8:73:fa:
62:04:f0:e4:06:fc:97:6c:3d:55:1a:5e:50:88:f8:
34:18:4d:59:00:e2:9a:2b:ad:37:76:e5:73:a2:0f:
ee:73:45:51:c4:dc:e2:25:13:6e:b2:ae:81:49:24:
73:89:f0:91:1e:0e:8d:7a:48:a5:ee:04:55:d4:a2:
be:b3:c8:21:f3:0e:b8:e2:4c:85:0e:a3:96:21:49:
b8:5b:b3:cf:61:63:e4:4a:4b:48:59:63:33:44:25:
02:54:02:79:a9:19:39:51:a5:96:8a:7a:dc:4c:b7:
c3:1b:f7:dd:8f:19:64:22:df:15:d5:92:98:d1:a1:
59:61:ee:ab:93:d0:dc:39:b8:91:91:fb:4f:29:c9:
b5:09:8b:6f:f1:db:be:a9:60:4a:e1:d4:e5:2f:d7:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:44:FE:40:83:BE:D7:AD:98:2C:16:19:78:19:EC:3E:C9:34:16
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/tJxE_kCDvtetmCwWGXgZ7D7JNBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:a1:a3:4e:8b:e2:e8:ab:67:7d:44:b4:58:48:46:b1:40:24:
06:4e:da:e2:2e:c2:e5:9f:d1:5f:83:cd:50:e7:ec:00:f5:df:
e7:bb:7b:10:d5:df:d4:53:55:9e:0e:fc:cc:40:7c:be:f0:9e:
e3:09:4b:f5:b5:ec:8c:c8:1c:5e:2e:5c:db:46:0c:26:cb:97:
5f:5b:df:6f:59:e6:94:1f:3d:8d:96:91:b4:e7:9d:91:dc:9d:
6f:f4:69:67:00:10:0b:c2:94:d9:b2:85:db:ca:c3:75:d0:65:
a2:d6:3c:55:46:3d:ac:20:a1:10:78:c3:6a:66:4c:d7:09:e3:
ea:8c:11:5c:fb:83:3c:b7:8c:c9:77:6f:62:f5:6f:1e:19:b0:
b2:d1:65:05:3b:27:04:dc:13:50:23:ce:cf:d2:97:c0:8c:c0:
28:14:17:3b:ff:60:dc:39:43:df:d6:b6:9b:37:b0:73:48:4f:
20:9b:51:0d:d8:e0:c3:4a:45:35:99:7f:b0:a1:c4:1f:ba:00:
b8:ab:79:65:b1:d4:8a:88:02:bb:46:61:82:16:7f:fb:d6:ee:
a4:f8:e2:15:5f:70:a4:5c:c9:c7:e5:4f:96:71:1b:3e:08:6c:
85:9c:d5:82:f5:4b:ac:94:6a:c7:5a:c1:81:0f:12:52:35:3f:
bc:d7:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org