Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSIT/r-fxRw8TQ83X1drkhi8ZgkR-hUU.roa
File: r-fxRw8TQ83X1drkhi8ZgkR-hUU.roa (raw, json)
Hash identifier: ZjWUGvX3ga42arzpTAckllaQo1yaXji+iRKu+fHVwkE=
Subject key identifier: AF:E7:F1:47:0F:13:43:CD:D7:D5:DA:E4:86:2F:19:82:44:7E:85:45
Certificate issuer: /CN=AA11250A67BB9825B6EA1FA9A124A1FEC96701DA
Certificate serial: 0937
Authority key identifier: AA:11:25:0A:67:BB:98:25:B6:EA:1F:A9:A1:24:A1:FE:C9:67:01:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/qhElCme7mCW26h-poSSh_slnAdo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSIT/r-fxRw8TQ83X1drkhi8ZgkR-hUU.roa
Signing time: Fri 24 May 2024 08:07:15 +0000
ROA not before: Fri 24 May 2024 08:07:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131626
IP address blocks: 103.144.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA11250A67BB9825B6EA1FA9A124A1FEC96701DA
Validity
Not Before: May 24 08:07:15 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AFE7F1470F1343CDD7D5DAE4862F1982447E8545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:23:d3:e6:fc:d0:12:b1:cb:70:b8:73:7a:
2f:c3:04:d5:fb:6d:ee:3c:35:ed:c8:ec:59:b4:88:
87:26:a4:c8:32:21:1e:51:ab:cc:ad:66:da:1b:bb:
49:56:cb:0e:9a:7f:d5:50:00:ab:7e:ad:05:e1:9b:
3e:35:80:db:15:05:24:2f:14:95:4a:4c:ff:ae:6b:
a9:d1:31:96:41:5a:9f:0e:aa:7f:8b:b0:53:5c:6a:
5c:d8:ba:90:69:ae:02:ea:bd:8e:35:2a:2b:76:63:
54:58:2d:f2:29:08:69:01:a2:d0:21:2a:45:4d:12:
06:aa:8c:f4:b4:1c:c7:12:c3:e5:88:89:f3:36:5e:
62:5a:f5:75:76:e2:26:80:57:1e:e1:3a:78:a5:de:
1c:75:9f:ae:6d:3e:44:4d:c7:6a:bc:42:9a:27:cd:
b1:be:5f:6a:ad:67:05:27:54:90:bb:c4:85:c2:75:
86:86:0d:64:0c:81:59:94:7c:da:35:81:05:a4:09:
e3:93:b5:74:e8:75:42:a7:60:7b:76:c0:99:38:66:
da:7f:0a:c1:df:c8:3a:e8:fa:84:2a:ed:5a:50:71:
dc:a0:20:fd:27:93:0a:46:7b:08:eb:fc:3c:48:6d:
52:26:ee:2d:91:26:11:30:98:b9:3c:d0:15:9f:cd:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:F1:47:0F:13:43:CD:D7:D5:DA:E4:86:2F:19:82:44:7E:85:45
X509v3 Authority Key Identifier:
keyid:AA:11:25:0A:67:BB:98:25:B6:EA:1F:A9:A1:24:A1:FE:C9:67:01:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSIT/qhElCme7mCW26h-poSSh_slnAdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/qhElCme7mCW26h-poSSh_slnAdo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSIT/r-fxRw8TQ83X1drkhi8ZgkR-hUU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.32.0/23
Signature Algorithm: sha256WithRSAEncryption
65:00:10:e5:37:0e:55:c3:74:79:da:d5:8a:02:23:1e:60:bd:
85:95:bc:eb:81:a0:86:d8:02:78:d4:0a:53:25:1d:a5:e0:cd:
e4:20:41:2a:42:e6:9f:4d:a8:4b:ad:89:9e:7e:40:25:17:25:
69:54:d1:b3:e9:7f:3a:14:c2:b8:a1:4a:53:84:83:8a:bf:08:
a2:d1:ad:72:fc:cb:5a:45:31:fc:5b:91:6d:21:f8:c7:6e:77:
cd:bf:9f:24:7c:77:02:69:d6:07:a4:8b:d9:4e:cd:0c:74:d4:
c5:24:21:03:d1:ae:af:45:bd:85:7c:0e:7e:78:e2:02:c3:7e:
0e:cb:6d:17:57:19:f0:63:9d:e0:51:3b:bc:9b:cf:3f:47:41:
ea:15:17:45:a7:c9:2f:38:b8:62:c4:6b:f2:b4:ad:59:63:5c:
c5:2c:02:14:8a:21:f8:38:d0:98:55:5b:d9:98:25:47:2f:83:
84:57:1a:71:3c:47:64:ef:27:a0:62:a6:3a:a7:5c:60:2a:d3:
c7:67:3b:07:b6:fe:68:47:74:97:57:6e:2a:07:a6:6c:1f:5b:
3e:0c:d4:6e:fe:3b:48:74:da:a1:e1:4a:db:af:91:68:f1:2e:
9a:d8:54:cc:b3:c8:e2:85:28:05:f1:86:92:cf:c9:f9:cb:59:
08:fd:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:05 2025 by rpki-client