Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCL/u4BDyo7cOJ7CJpTDkWSIpZYi1rI.roa
File: u4BDyo7cOJ7CJpTDkWSIpZYi1rI.roa (raw, json)
Hash identifier: KTEdEnujFOXQIH/7y8ceFMUQOe7GmSBDzB2bAhuHtDs=
Subject key identifier: BB:80:43:CA:8E:DC:38:9E:C2:26:94:C3:91:64:88:A5:96:22:D6:B2
Certificate issuer: /CN=0F7FB4302F21F301AB0EAFC5B80184BEED3FB198
Certificate serial: 0D4F
Authority key identifier: 0F:7F:B4:30:2F:21:F3:01:AB:0E:AF:C5:B8:01:84:BE:ED:3F:B1:98
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/D3-0MC8h8wGrDq_FuAGEvu0_sZg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/u4BDyo7cOJ7CJpTDkWSIpZYi1rI.roa
Signing time: Wed 14 Aug 2024 11:04:45 +0000
ROA not before: Wed 14 Aug 2024 11:04:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 32242
IP address blocks: 103.140.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3407 (0xd4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F7FB4302F21F301AB0EAFC5B80184BEED3FB198
Validity
Not Before: Aug 14 11:04:45 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BB8043CA8EDC389EC22694C3916488A59622D6B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:7a:8b:fb:2f:30:83:56:87:9a:55:a0:62:
e3:db:26:65:cf:c5:92:84:59:7d:85:d5:45:b5:27:
7a:bb:66:d7:f1:ea:5a:5c:65:07:81:83:9b:f9:85:
86:d0:25:21:2c:3b:8e:0b:cc:80:cb:06:be:30:9b:
c4:60:82:8b:2b:56:0f:70:a3:0c:ff:e1:d7:9c:61:
e7:ae:04:e7:19:04:b2:c6:dd:7e:f0:b3:8c:7c:46:
9a:90:b4:b6:0b:79:48:53:d9:60:a2:16:6d:b9:7e:
0f:45:32:a2:b8:39:86:bd:49:92:77:23:5e:90:8a:
19:d5:44:b9:1e:67:36:20:98:b2:d7:f9:55:68:40:
d8:fa:c6:a5:b3:7e:4a:72:1b:9f:af:b8:7c:06:82:
70:12:62:17:9a:19:a5:9f:d1:e1:72:27:e6:13:dc:
a7:f2:fd:25:46:58:9c:4b:e6:58:63:20:dc:ee:fa:
7c:24:4b:2b:fe:4f:00:80:53:cb:2f:7b:af:0e:ee:
9e:e7:88:d6:60:88:3c:7f:4f:c6:11:b8:87:99:c6:
f5:a2:cd:b9:4d:d6:c9:c9:ea:20:8b:28:1f:5c:8a:
0a:7d:f0:73:dc:bf:d5:a0:a3:dc:2a:23:0c:32:94:
01:06:71:99:fc:97:3d:b2:31:6c:3d:f4:7b:44:db:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:43:CA:8E:DC:38:9E:C2:26:94:C3:91:64:88:A5:96:22:D6:B2
X509v3 Authority Key Identifier:
keyid:0F:7F:B4:30:2F:21:F3:01:AB:0E:AF:C5:B8:01:84:BE:ED:3F:B1:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/D3-0MC8h8wGrDq_FuAGEvu0_sZg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/u4BDyo7cOJ7CJpTDkWSIpZYi1rI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.233.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4a:0a:2b:0e:e9:f7:16:5d:15:7c:74:09:37:14:7a:ee:1d:
3a:3c:10:3e:b2:71:c2:68:c7:ac:c0:09:b7:e0:47:43:2f:bf:
39:f9:3c:17:3b:18:f5:22:46:cc:60:ee:d6:08:ba:9a:5e:db:
7f:23:b5:20:9b:64:96:7e:11:09:95:3b:cf:5f:84:af:21:c2:
0f:c9:98:64:ff:ac:ad:7d:04:d8:f7:e3:03:dd:c7:e8:10:24:
d7:da:6e:e7:c6:53:1d:2f:3f:4c:df:3a:f8:53:5f:e5:9a:73:
58:bf:a8:ff:70:f3:80:8f:d9:26:34:71:33:d2:c7:c7:74:56:
d5:9f:65:9c:48:b1:d4:8f:08:3f:ad:2a:de:4e:36:a3:dd:7c:
3c:18:e0:13:fe:37:63:c0:04:c6:90:0f:8d:ab:eb:6e:9b:08:
40:b8:df:9d:28:b7:2c:b8:e4:13:47:3f:61:f5:d1:f4:a4:0e:
1b:c6:45:9c:57:c7:d6:3e:a2:2c:80:97:db:f1:c7:52:e5:59:
f9:c9:67:53:1c:98:37:b2:e7:1d:03:ab:f9:de:ba:26:89:f2:
bd:6c:fd:3a:c3:a6:c4:55:16:b5:51:e0:11:2f:fd:12:f3:ea:
eb:bd:c9:de:7e:7e:5b:e7:b5:1c:2b:21:62:85:97:74:59:79:
32:18:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:06 2025 by rpki-client