Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/upr1qlnjZcIpYpZ0SUN0hUa_SM4.roa
File: upr1qlnjZcIpYpZ0SUN0hUa_SM4.roa (raw, json)
Hash identifier: k67OrieRDjiXP8YYX+VW0FbdUwmpUD+JDPRBUyg1n6Q=
Subject key identifier: BA:9A:F5:AA:59:E3:65:C2:29:62:96:74:49:43:74:85:46:BF:48:CE
Certificate issuer: /CN=AEF6D09D9C14A108AA2051743C1379ED8FF25B48
Certificate serial: 03
Authority key identifier: AE:F6:D0:9D:9C:14:A1:08:AA:20:51:74:3C:13:79:ED:8F:F2:5B:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/upr1qlnjZcIpYpZ0SUN0hUa_SM4.roa
Signing time: Tue 18 Oct 2022 07:08:38 +0000
ROA not before: Tue 18 Oct 2022 07:08:38 +0000
ROA not after: Wed 18 Oct 2023 06:45:58 +0000
asID: 63899
IP address blocks: 103.191.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF6D09D9C14A108AA2051743C1379ED8FF25B48
Validity
Not Before: Oct 18 07:08:38 2022 GMT
Not After : Oct 18 06:45:58 2023 GMT
Subject: CN=BA9AF5AA59E365C2296296744943748546BF48CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:95:e0:6f:43:f5:5a:55:15:1c:33:8c:90:
1b:fb:de:7f:44:9f:4a:58:99:81:97:85:44:11:72:
f1:47:a6:5e:62:7d:a0:da:b4:8d:ca:10:32:ad:51:
33:46:7c:bd:0c:3c:ae:98:0e:4f:5e:fe:8b:4a:ab:
2d:f5:7a:a7:6a:15:36:0c:43:a1:b2:a1:ef:fd:30:
a3:0e:5a:c7:bc:6b:05:96:b3:35:ff:f4:17:98:65:
0a:1b:35:4c:67:bc:33:93:68:2f:7c:73:6d:6e:d6:
5b:7c:ed:ec:bb:6b:3a:b6:be:4c:0b:d3:4c:c4:2b:
e4:f8:50:31:31:c9:61:dd:d4:ce:be:97:d0:4a:0a:
c9:53:69:b0:05:40:ea:a3:d8:c8:e2:28:5d:5a:88:
66:80:67:d1:23:40:51:ec:89:5f:fb:2d:74:79:4c:
fb:ab:4a:22:fc:d1:32:96:eb:d5:86:dd:29:6d:6f:
3e:c2:7d:22:bd:c0:e7:99:4a:4f:a1:81:49:a0:75:
a0:b6:29:e6:a9:2e:cf:80:d3:ab:c7:93:09:25:e1:
f1:6f:48:db:b4:91:57:de:0d:61:06:75:2e:11:68:
67:f5:2b:b9:92:c4:97:c4:f7:ac:e3:f1:93:b5:e5:
3d:1f:c6:51:c7:ee:08:ad:11:cf:ac:c9:e6:92:83:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:F5:AA:59:E3:65:C2:29:62:96:74:49:43:74:85:46:BF:48:CE
X509v3 Authority Key Identifier:
keyid:AE:F6:D0:9D:9C:14:A1:08:AA:20:51:74:3C:13:79:ED:8F:F2:5B:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/upr1qlnjZcIpYpZ0SUN0hUa_SM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.22.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:cd:57:3b:3a:8a:4d:18:78:b0:3c:3a:e9:b9:62:90:ad:87:
fc:79:bb:79:f7:01:b5:01:47:7a:17:15:17:5d:38:b4:a4:0e:
46:38:24:c5:89:6f:9f:67:45:37:60:e1:c4:74:b7:8d:75:c1:
45:b1:0d:73:b9:5c:9d:16:81:b6:e4:49:73:28:f7:ce:2e:6c:
00:dd:ed:b9:8d:7a:90:b5:8d:b4:40:73:5d:6b:75:d1:aa:69:
39:6e:24:3f:d3:df:04:05:f8:da:d2:cc:6c:32:b3:f4:0e:ca:
d2:97:1d:b0:d1:85:16:04:47:3b:9b:95:91:92:ad:6b:72:99:
9e:14:1d:25:c4:8f:91:0f:89:3e:0d:bc:22:05:12:7b:0c:5a:
bb:74:12:49:3d:a0:c9:50:34:2f:08:06:1f:52:d3:86:4a:37:
3b:64:e4:21:c2:9c:f1:dd:37:0e:4f:ac:d4:b5:7e:4b:e6:e1:
f8:07:50:1b:79:24:29:bd:c6:42:47:74:32:96:cf:44:87:68:
72:c4:bc:94:48:6c:a0:47:a2:92:eb:33:a1:f4:6b:8c:94:99:
79:88:c2:8b:6c:61:cb:e4:ec:e5:ee:a4:bb:0c:a8:0d:f3:50:
38:a7:25:99:e3:17:b0:01:56:46:28:80:7e:f6:15:33:59:d1:
0a:14:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org