Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/ePRNdSbLKqk-0RtC2ilSophaYxY.roa
File: ePRNdSbLKqk-0RtC2ilSophaYxY.roa (raw, json)
Hash identifier: wiKnCiFwek8787MAvSMGfN15cTlgz+wmO/DjpcyXtdg=
Subject key identifier: 78:F4:4D:75:26:CB:2A:A9:3E:D1:1B:42:DA:29:52:A2:98:5A:63:16
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0C67
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/ePRNdSbLKqk-0RtC2ilSophaYxY.roa
Signing time: Wed 29 Sep 2021 02:37:20 +0000
ROA not before: Wed 29 Sep 2021 02:37:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131642
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Sep 29 02:37:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=78F44D7526CB2AA93ED11B42DA2952A2985A6316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:23:8b:23:a5:ba:f8:37:f8:84:05:ac:54:
bf:f3:a1:22:83:cf:57:48:e0:60:4c:8a:02:a0:25:
31:ad:60:6f:27:75:cd:14:0e:6f:1a:1f:70:01:2d:
cb:f1:b0:f1:fa:d9:97:4c:db:2a:c2:82:f4:bb:d3:
47:c0:1d:dd:11:32:d3:02:da:76:1c:84:a3:d5:a4:
c4:50:a3:a6:9a:e8:bc:90:fa:f5:ad:98:86:8a:57:
51:58:e9:6d:fc:88:05:a7:33:df:ce:d9:6b:9a:25:
05:8d:1c:a1:ed:a6:ea:f8:3d:a1:8e:19:fd:63:7b:
e5:7e:f9:a7:7c:ae:07:94:50:6a:ff:0f:c7:cd:64:
a7:40:f1:a3:1f:69:78:c5:d3:64:3a:b1:e4:f4:96:
73:5e:df:f9:0e:b0:77:eb:42:34:99:68:b3:f7:dd:
0a:00:60:91:eb:85:70:71:40:58:25:eb:c8:5d:21:
d4:c1:29:1a:0e:d2:ba:aa:cb:41:0a:a7:a0:89:0c:
ef:fc:1b:bb:9e:45:99:e6:e8:71:0e:1c:bf:61:40:
77:cc:ec:76:3e:65:b0:dd:8f:b9:7f:94:de:58:85:
f7:90:53:58:09:d2:70:ff:4a:da:5d:03:6c:4a:17:
9d:e9:27:6d:92:10:41:d1:b2:eb:67:ca:38:d4:4c:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:4D:75:26:CB:2A:A9:3E:D1:1B:42:DA:29:52:A2:98:5A:63:16
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/ePRNdSbLKqk-0RtC2ilSophaYxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:9b:d8:7c:33:71:08:be:b7:ed:cd:c3:bf:da:a4:72:8f:b3:
7c:6c:a8:7c:18:04:3a:c2:2d:ea:32:48:c8:03:9d:56:af:45:
5a:fc:06:5d:7f:8e:83:2b:bf:87:95:11:17:ba:89:9c:4f:12:
ce:ca:73:fe:02:da:61:4b:1b:de:36:dd:d6:cd:5e:6b:cd:d1:
8b:b1:06:06:f3:20:37:87:70:a2:5e:16:f6:92:19:86:d8:87:
64:8d:be:51:f6:14:78:3f:29:17:3e:fd:e0:39:ea:74:23:8f:
d9:d3:a8:d5:79:dd:70:0d:bd:d0:8a:52:27:99:4c:28:10:0f:
6d:86:6b:8b:94:c3:e7:68:9f:d7:3d:69:54:de:2c:c6:db:60:
10:8f:08:7f:2c:f3:27:57:8c:dd:d4:ec:f5:46:80:8d:e9:09:
31:27:c4:95:25:e4:00:ff:8a:37:20:13:6c:56:74:5d:fc:d5:
0e:85:8d:2d:e5:d3:71:e9:96:4f:0d:1d:22:8f:3b:87:72:ca:
ef:3c:c5:a8:94:9d:d6:4f:bf:f0:b4:d3:d7:be:32:43:42:1a:
f7:fc:a1:46:75:e1:16:f1:fa:e4:5c:63:88:b3:61:1f:a1:9c:
b6:0f:ca:10:e2:e7:41:cf:44:f9:86:92:fa:e8:86:6e:26:2a:
d0:9d:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org