Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-wIQGn0ypSk8X6igSATxD0oLDU4.roa
File: -wIQGn0ypSk8X6igSATxD0oLDU4.roa (raw, json)
Hash identifier: NwMYuwbsUCosrlF3e+JA3IgCy44S7zvwllIhbjGix0E=
Subject key identifier: FB:02:10:1A:7D:32:A5:29:3C:5F:A8:A0:48:04:F1:0F:4A:0B:0D:4E
Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Certificate serial: 07B1
Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-wIQGn0ypSk8X6igSATxD0oLDU4.roa
Signing time: Thu 15 Sep 2022 02:37:39 +0000
ROA not before: Thu 15 Sep 2022 02:37:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131677
IP address blocks: 103.147.130.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Validity
Not Before: Sep 15 02:37:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB02101A7D32A5293C5FA8A04804F10F4A0B0D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:4e:0a:82:ca:28:e8:44:cd:1e:bf:a8:85:
c1:b7:7c:7c:78:9f:52:cc:a3:06:b5:a8:5f:e9:5f:
f1:8b:81:45:12:f4:48:72:5b:91:db:ae:b2:70:fc:
0f:63:a7:20:7e:2e:3f:b6:8e:67:6d:2b:6f:88:ee:
d0:bc:c8:18:fe:80:e1:f4:fd:fe:3a:14:02:31:df:
00:9a:46:62:6f:d8:0c:53:4b:33:9e:06:d1:45:fe:
1d:0c:c7:26:74:be:4b:01:c6:43:e0:db:0e:c2:1f:
cc:26:b2:95:e7:9c:2d:07:41:b4:f4:1d:28:85:6c:
ff:3a:6d:8d:3d:44:22:18:eb:9a:cb:39:19:95:f1:
87:36:be:5d:05:2f:00:11:8d:ba:f8:35:c8:f5:1e:
4f:20:5e:f4:f7:63:68:ec:a6:12:20:f1:76:c7:b1:
e9:17:f5:1c:17:a8:3f:11:63:0c:48:b9:59:38:05:
df:9c:a5:f5:99:ce:c5:70:f4:bc:3a:66:97:3b:ed:
19:b0:dc:52:7b:62:93:dc:8c:e2:19:6c:90:61:c4:
78:52:51:5c:4b:73:81:e6:9e:80:e6:73:91:28:de:
60:f8:e4:2c:94:15:28:14:cc:96:63:ee:f6:4b:88:
6d:a1:fc:4e:08:1b:de:c5:40:9c:f5:16:62:10:7f:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:10:1A:7D:32:A5:29:3C:5F:A8:A0:48:04:F1:0F:4A:0B:0D:4E
X509v3 Authority Key Identifier:
keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-wIQGn0ypSk8X6igSATxD0oLDU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.130.0/23
Signature Algorithm: sha256WithRSAEncryption
11:06:ae:8f:e2:b2:12:d4:88:aa:a2:e7:e1:93:01:20:ae:74:
62:60:0c:64:fa:66:83:a2:85:0d:9d:43:27:d2:d4:85:cc:44:
26:43:2f:92:5f:58:e5:36:e9:7f:4b:ff:b8:8a:25:15:82:e7:
c3:93:12:fa:3f:73:76:54:8e:07:3e:14:08:d8:d2:33:8a:85:
fe:d9:00:c2:23:b8:f6:09:80:3b:02:54:23:9c:ea:62:50:0e:
e5:9d:46:d0:5c:eb:96:3e:0a:21:26:5d:e9:b8:1f:26:d7:41:
96:88:4c:2d:11:1b:6e:f2:d0:c8:d0:38:b2:28:68:8a:a9:20:
99:4f:e4:2d:8d:5f:8a:2e:65:ce:34:95:57:b8:3f:f0:fa:08:
94:56:53:4b:6f:d2:6b:87:76:26:a9:3c:d0:ae:ac:28:3e:56:
35:99:e6:77:c8:c0:b1:f0:3b:93:dc:17:bf:3e:e2:f4:ab:ad:
a4:df:20:12:79:6a:a3:e5:fa:bb:48:2d:26:70:0b:43:37:9f:
7d:d4:7d:92:71:92:c2:57:c6:b3:dc:16:51:35:37:74:6c:24:
2d:fc:5a:e3:a6:47:f1:47:d4:75:ba:db:7b:1a:f3:95:37:bc:
bc:66:91:4d:8a:59:38:c9:64:ba:dc:a4:29:4e:ea:f5:b4:ab:
5a:83:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:05 2025 by rpki-client