Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NORDATW/31e-IMYxCLorlym6EWwMJpdHlyU.roa
File: 31e-IMYxCLorlym6EWwMJpdHlyU.roa (raw, json)
Hash identifier: w0Gk+krqdTKe92Alx2O014TGJ73L/E1oAzT+MXWD4GY=
Subject key identifier: DF:57:BE:20:C6:31:08:BA:2B:97:29:BA:11:6C:0C:26:97:47:97:25
Certificate issuer: /CN=159D5F897276F0DEC857E7E2DEDD649876E8A482
Certificate serial: 0D7B
Authority key identifier: 15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/31e-IMYxCLorlym6EWwMJpdHlyU.roa
Signing time: Wed 15 May 2024 08:19:34 +0000
ROA not before: Wed 15 May 2024 08:19:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 40065
IP address blocks: 103.138.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159D5F897276F0DEC857E7E2DEDD649876E8A482
Validity
Not Before: May 15 08:19:34 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DF57BE20C63108BA2B9729BA116C0C2697479725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:af:b1:9b:dd:61:50:79:ee:fc:52:4f:ed:
ba:c8:60:9e:a0:95:08:7d:39:c8:7b:ae:3d:68:e6:
f0:10:53:f8:49:2c:48:d9:c8:32:39:0c:5b:b4:ef:
a3:4e:86:2f:5b:8a:bb:a0:02:11:ff:9f:87:94:2b:
7d:38:22:54:df:d5:90:6a:fc:f9:55:db:4b:e4:b4:
d0:07:70:2f:a8:c6:69:60:e5:a2:cf:87:b5:56:b3:
33:8f:82:0b:61:81:f0:d4:8c:94:0c:3c:3f:9e:6f:
39:a6:76:5f:e2:0a:1f:2e:d2:d9:d1:62:05:3b:23:
6d:fc:ca:04:1f:89:81:71:ec:51:f2:da:4d:59:c2:
2e:96:4d:3e:b4:7e:02:0b:1e:cd:75:fd:1f:e6:dd:
ff:0b:4c:f5:92:03:97:81:2d:98:90:60:e1:81:04:
9e:90:e7:d2:a6:f3:24:94:1f:ed:b6:95:16:4f:a3:
70:b3:5c:23:b1:aa:56:d8:d1:94:4b:e3:e4:c1:f7:
3c:05:b5:d6:f3:99:f7:ca:77:78:fd:3b:8e:bd:15:
99:e2:a4:cc:2e:9d:9f:a3:9e:7f:b7:17:62:41:f9:
29:ba:b2:3f:a7:9a:5c:e5:d8:87:96:c4:28:e4:ce:
34:3c:fb:94:97:f7:7c:39:02:24:9a:2a:3b:25:cc:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:BE:20:C6:31:08:BA:2B:97:29:BA:11:6C:0C:26:97:47:97:25
X509v3 Authority Key Identifier:
keyid:15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/31e-IMYxCLorlym6EWwMJpdHlyU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.194.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:b1:91:ca:fd:a8:0c:67:33:5f:c6:65:da:9e:92:4e:b8:54:
00:82:fd:fa:c3:04:4a:68:1c:d2:5d:e4:76:95:fc:68:5f:ea:
33:a8:4b:aa:6a:86:3e:41:6c:cd:21:6c:79:4d:ec:40:e6:db:
47:28:9e:b3:61:c1:82:2f:59:11:6f:5c:80:bb:db:8e:fc:92:
91:24:2f:81:5f:b6:b8:ff:a5:8d:78:3b:e0:e7:e4:f1:42:e4:
93:14:93:9a:cd:9b:58:a6:b1:10:d0:e3:ee:61:41:1a:d4:ff:
d4:a1:7f:f8:49:76:67:7b:2d:94:cf:ab:0b:b5:b7:25:e8:c5:
d6:cc:47:4d:47:81:69:65:18:c2:5a:4b:f5:90:eb:76:27:6e:
7c:12:fa:0c:7a:00:53:da:34:47:cb:b4:be:b8:44:46:be:2a:
d2:a0:1b:60:8c:3e:0d:b2:a3:fc:5b:b3:a4:41:46:f1:f6:54:
a4:77:16:da:1a:b8:10:6d:12:e2:b4:34:31:36:00:b3:c7:e7:
e3:3a:49:76:b7:7e:7b:29:3a:40:71:1a:00:92:e3:67:32:14:
2d:04:30:d4:21:cd:d2:3f:8d:d0:e8:69:24:70:97:70:5f:47:
04:b6:b1:8d:5a:43:57:a9:98:03:fb:a7:2a:14:62:69:9b:dc:
b7:be:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:26 2025 by rpki-client