Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/vXhRL2-uNEKmkeEfW0L7lSYRn0E.roa
File: vXhRL2-uNEKmkeEfW0L7lSYRn0E.roa (raw, json)
Hash identifier: 2+piZBrv92qXxLxDaq4QHprjQ36Ls8pdM6lGU0n2g2Y=
Subject key identifier: BD:78:51:2F:6F:AE:34:42:A6:91:E1:1F:5B:42:FB:95:26:11:9F:41
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 1021
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/vXhRL2-uNEKmkeEfW0L7lSYRn0E.roa
Signing time: Wed 29 Sep 2021 02:38:02 +0000
ROA not before: Wed 29 Sep 2021 02:38:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9922
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4129 (0x1021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 29 02:38:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BD78512F6FAE3442A691E11F5B42FB9526119F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:b2:d6:49:bf:e9:69:71:9d:90:2a:64:24:
22:61:82:49:34:1c:1e:04:52:d1:a5:d0:35:03:51:
d5:00:c8:b3:28:11:dd:3e:10:b4:c5:f2:8d:7f:98:
e3:7c:2c:a6:88:44:eb:d0:9b:7b:42:9e:24:e7:d6:
e4:8d:e6:af:cb:3b:5a:1b:c9:e7:cb:40:3c:df:03:
0f:b9:27:ca:37:cd:8a:a5:2c:2e:80:59:1a:71:21:
ea:e5:73:b2:99:93:a8:3d:c3:01:aa:23:45:eb:fb:
ed:a7:06:81:aa:d5:01:25:db:06:25:0e:7e:95:71:
6b:f8:7c:7b:47:9f:fa:c2:00:d3:96:66:f4:90:1d:
bd:57:87:7f:d4:a8:c1:b0:07:51:e0:0d:ab:52:54:
2a:30:67:84:da:56:db:2c:09:7c:8a:85:e4:cd:95:
8b:f9:a4:da:eb:59:17:dc:3d:8b:ec:80:e5:af:6c:
46:51:66:5c:4f:af:c9:cb:28:0d:b9:54:01:01:97:
98:a8:44:64:0c:fe:ce:b4:b4:33:95:32:e0:a6:7d:
52:f3:93:b7:02:fc:61:db:04:86:8e:a9:01:c4:f5:
b0:63:9d:91:62:d6:87:73:f7:9e:3b:31:5d:bb:ad:
db:fe:6c:f7:8c:fb:c7:cd:4d:40:14:12:6f:a5:03:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:51:2F:6F:AE:34:42:A6:91:E1:1F:5B:42:FB:95:26:11:9F:41
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/vXhRL2-uNEKmkeEfW0L7lSYRn0E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
04:52:d9:c4:cc:ed:a5:eb:5c:1d:1a:43:cc:af:dc:42:bd:f5:
cf:19:ee:a6:28:a5:9e:97:f8:a8:63:2e:10:f1:70:b8:fa:6b:
cd:2c:b9:33:84:fd:92:59:be:ed:c6:90:02:d8:87:0d:fd:6f:
7e:60:5a:2d:dc:85:67:af:bd:81:9d:bf:83:62:b4:bd:58:22:
77:f2:5b:a3:48:6a:bf:73:79:c7:d9:87:f3:6c:5f:ec:90:c9:
ae:ce:3c:a3:6b:cd:0c:02:92:cc:95:22:33:18:d1:fa:25:4b:
06:b1:e4:f6:3b:f7:2d:f8:64:6d:f0:1e:40:7c:8a:c4:0c:2a:
ad:f2:9d:ff:7d:61:9b:65:5a:71:5f:ce:4b:27:36:b5:bc:fc:
68:6f:85:ba:38:ec:bf:80:93:31:43:7b:e0:41:52:ee:73:3c:
89:25:44:f2:c5:9a:4e:5d:c3:b9:e3:df:d7:59:11:0f:bf:c1:
b6:7c:e1:f7:4f:0b:c4:a7:7d:7b:94:e3:f6:a3:b9:cf:19:d3:
4f:49:c2:c1:96:44:5b:33:7a:cc:6a:8e:b1:fd:e9:07:6c:57:
a7:34:53:d3:6e:e9:15:71:0a:67:74:45:9e:9d:ae:a0:f2:9f:
6d:f0:41:d4:91:46:f5:aa:86:c8:6c:0d:c9:62:32:c2:6f:ab:
91:7a:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:48 2025 by rpki-client