Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/r3EdFsr88FmbbyLtX_cfISJKiLw.roa
File: r3EdFsr88FmbbyLtX_cfISJKiLw.roa (raw, json)
Hash identifier: qSZVmiuLZnIFAZqZ78jOrbqzH+QANfC4pHvzKwRBVfk=
Subject key identifier: AF:71:1D:16:CA:FC:F0:59:9B:6F:22:ED:5F:F7:1F:21:22:4A:88:BC
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0968
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/r3EdFsr88FmbbyLtX_cfISJKiLw.roa
Signing time: Wed 29 Sep 2021 02:44:35 +0000
ROA not before: Wed 29 Sep 2021 02:44:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131593
IP address blocks: 103.42.151.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 29 02:44:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AF711D16CAFCF0599B6F22ED5FF71F21224A88BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:f1:62:79:fe:4c:aa:90:98:8a:bf:c4:8e:
ad:50:17:7a:eb:3a:dd:9c:9b:77:d9:0d:a2:62:75:
9e:bf:32:57:df:f7:74:9a:fe:f9:ab:63:27:73:a8:
91:3e:70:5e:a9:6b:3d:bd:15:14:2a:83:63:70:f7:
de:97:5e:0d:e2:98:50:78:76:8a:f2:64:fe:8f:3e:
91:d9:c3:52:8d:45:47:4d:e8:ff:1a:a4:f0:27:3f:
48:ee:f6:0a:47:c0:1a:af:85:0f:7e:fb:80:e8:8f:
de:0d:a0:0f:aa:6d:99:75:1b:21:20:9f:30:69:2b:
b0:e7:57:eb:4e:14:c3:a1:19:5a:c3:99:0e:88:28:
ea:34:b7:f7:3a:c0:ce:d0:a4:48:db:0c:4c:f8:06:
21:b0:96:26:fc:de:73:da:2c:95:f5:1e:45:1f:38:
8e:4f:f1:4b:04:0b:26:a0:9e:b7:6f:87:db:85:06:
1b:c5:eb:d0:b3:95:ea:f2:06:03:65:21:33:9c:95:
83:06:c8:bf:1e:6f:c3:4b:bc:99:f8:b9:ef:79:e4:
96:5a:f2:b8:b3:7c:b0:8b:12:d9:2a:87:ff:f5:c6:
b6:99:39:9a:82:e3:c5:f1:d0:3d:7f:6c:58:71:0f:
27:0e:43:42:9b:ed:f2:de:d5:57:b5:4c:26:fb:e3:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:1D:16:CA:FC:F0:59:9B:6F:22:ED:5F:F7:1F:21:22:4A:88:BC
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/r3EdFsr88FmbbyLtX_cfISJKiLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.151.0/24
Signature Algorithm: sha256WithRSAEncryption
95:71:35:f7:5f:e7:2a:de:76:84:a6:22:66:5c:a5:a3:68:96:
a3:17:a6:59:0e:e6:8d:85:c2:ab:63:34:e2:5f:b3:a4:a4:5d:
2c:cc:86:ae:00:85:7e:06:2e:2f:c9:6d:52:24:ea:cf:1b:e1:
75:1f:2f:40:2a:21:be:7a:fd:28:14:80:12:f5:f6:39:4e:19:
a0:63:6e:b2:3c:43:d0:9c:39:23:81:b0:94:17:74:b5:21:78:
f1:4b:88:73:0a:83:f9:9a:a8:b7:fc:0c:08:20:27:88:99:47:
96:46:1a:86:2e:56:6e:5e:34:cb:69:d7:3d:5c:79:d7:ce:d8:
e3:36:c3:a2:36:1a:0a:45:eb:cb:6a:ab:24:4e:48:ac:32:83:
80:2a:c8:f0:67:9c:6c:e6:6b:48:a8:56:df:e2:dc:44:5c:3d:
30:86:7c:93:29:72:d2:73:93:0e:85:4d:13:b5:c4:cb:ff:54:
ec:a5:b1:f9:4e:c5:7a:ee:b3:87:6c:af:90:49:c6:04:b4:a9:
cd:aa:29:ea:0d:45:ff:1f:21:2e:b2:2c:70:e6:1b:45:e4:ad:
2f:6e:dc:76:19:31:bc:d1:08:24:16:4b:b3:fa:80:13:61:c0:
62:07:54:e4:7d:83:3d:f2:0e:4b:a9:d4:77:0c:80:06:b5:68:
cd:32:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:23 2025 by rpki-client