Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/IUAsU5w7CmbiQth4GrvrX71DFUQ.roa
File: IUAsU5w7CmbiQth4GrvrX71DFUQ.roa (raw, json)
Hash identifier: SE1HmlJLU6PQFti2t/nT5BVu4yu1H/v7n1P0kO0kXiA=
Subject key identifier: 21:40:2C:53:9C:3B:0A:66:E2:42:D8:78:1A:BB:EB:5F:BD:43:15:44
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 110D
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/IUAsU5w7CmbiQth4GrvrX71DFUQ.roa
Signing time: Thu 15 Sep 2022 02:38:26 +0000
ROA not before: Thu 15 Sep 2022 02:38:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 15 02:38:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21402C539C3B0A66E242D8781ABBEB5FBD431544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:60:0e:4c:51:99:31:56:5c:12:c7:9e:92:
58:73:aa:4c:ca:91:99:03:ef:24:c8:ff:9c:89:9b:
71:ef:2e:63:90:ce:84:0b:45:f3:66:e2:e0:f9:0e:
65:02:70:91:34:89:a4:ef:4a:b9:b9:98:4c:a0:7e:
0a:1e:70:98:cb:77:67:ec:2f:a7:cd:fe:cc:7c:e4:
62:e0:3d:5a:2e:9d:7c:f4:fa:d0:8c:89:5d:72:8e:
19:94:5c:4b:8e:cf:fe:37:b5:8f:d2:55:f8:5f:d5:
63:8d:c7:58:ae:b6:66:31:57:a8:d0:10:07:8c:cb:
c6:c1:3a:cc:86:c7:e9:c3:f0:27:36:00:43:9f:82:
d7:16:05:45:fd:b2:ea:50:ac:c6:e0:14:f7:3b:2e:
7c:28:53:fd:79:1d:da:1a:cf:5f:10:43:5d:88:29:
c9:4b:52:20:43:c3:b6:55:a0:5b:71:39:fd:d2:b1:
5e:df:7d:ca:f8:70:46:35:1c:25:a4:98:a6:4c:7f:
b9:95:26:62:3f:5e:18:d7:4e:8e:17:30:da:5e:cf:
e2:e2:ab:62:d1:e8:e8:2c:64:47:cc:a7:c7:30:77:
8a:f6:25:a7:89:04:18:58:46:12:68:e9:eb:f5:67:
e6:b6:a3:6c:d6:f0:00:01:81:01:72:aa:cc:6d:a4:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:2C:53:9C:3B:0A:66:E2:42:D8:78:1A:BB:EB:5F:BD:43:15:44
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/IUAsU5w7CmbiQth4GrvrX71DFUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ce:f4:7f:1c:6f:b0:5c:e5:2d:b0:b4:bf:5a:70:46:a7:8b:
c0:7a:59:f5:b0:c0:2d:8a:87:0e:49:46:5d:1c:4a:d5:d4:fd:
79:26:87:ed:a6:5b:82:4c:2a:9d:83:57:db:fd:f9:02:c0:0a:
32:37:fe:21:dc:8f:55:24:eb:4f:73:60:73:3a:96:59:38:c9:
0e:e8:b0:e3:ee:79:0a:4d:83:f0:38:e1:4b:f7:55:64:e2:d5:
89:5c:0e:d8:b3:0c:ac:63:28:47:e6:0e:c9:36:5a:f6:37:ed:
fd:7a:af:be:16:a3:7f:14:fd:83:0e:74:3c:b8:6b:a5:c6:d5:
a3:01:99:1e:28:78:96:15:09:6a:ed:5b:0c:fd:60:43:4a:ea:
8b:dd:f4:5a:69:64:75:fd:29:04:7b:31:ac:cf:93:21:00:8e:
65:b9:04:04:ae:17:36:01:6c:bb:d5:2b:3f:de:0d:e8:f1:1c:
dd:ed:b5:64:cb:ac:b8:27:e2:15:b0:41:ef:72:7e:a7:bc:3a:
af:d8:9a:8b:2d:9b:ef:0e:7e:89:e1:72:ae:d7:34:f8:c6:56:
3a:63:46:f0:59:ca:b7:a7:23:39:68:ec:ea:40:df:3b:69:69:
00:4d:aa:c6:87:0e:2c:21:5a:d3:aa:18:90:09:1d:92:44:53:
9a:87:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org