Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/kZxj12A2a_v7tcuEnV9KpGSG-28.roa
File: kZxj12A2a_v7tcuEnV9KpGSG-28.roa (raw, json)
Hash identifier: l4CzheyH9SZBTPieyCXSKiHyjaOXr5sRIy4fo+Nkzo4=
Subject key identifier: 91:9C:63:D7:60:36:6B:FB:FB:B5:CB:84:9D:5F:4A:A4:64:86:FB:6F
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0BC4
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/kZxj12A2a_v7tcuEnV9KpGSG-28.roa
Signing time: Sun 07 Feb 2021 12:40:54 +0000
ROA not before: Sun 07 Feb 2021 12:40:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18178
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Feb 7 12:40:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=919C63D760366BFBFBB5CB849D5F4AA46486FB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:e6:44:51:7f:46:6a:a2:8c:8c:70:26:59:
92:10:db:10:37:9c:57:9e:7b:c2:15:3b:05:92:0e:
54:fd:e9:15:1f:a8:f1:27:c3:9e:b1:d8:ff:1b:f6:
e1:d1:c0:2e:d0:84:21:e0:90:89:36:d0:e7:d1:a7:
9a:df:e4:50:e6:35:23:2b:1f:68:e1:b0:b5:2e:19:
48:b2:2a:b5:12:ff:79:5b:fe:3b:c8:a0:d6:d7:1a:
49:bc:2e:2a:63:e0:aa:bc:ef:76:c9:51:cf:af:ad:
0b:ff:5f:83:64:36:b0:d2:04:96:29:51:a5:47:f3:
6c:ec:90:85:aa:3c:ad:59:3a:3e:4e:ad:ed:77:73:
fc:06:b6:3c:1e:02:56:1c:4a:cc:a5:ab:bd:ad:ba:
1f:64:5a:ba:ce:66:4b:7e:68:0e:f6:d5:a6:5f:d2:
ef:d1:5e:89:db:78:88:74:68:3a:46:a0:f0:2f:f7:
45:86:0b:d7:15:96:ed:58:4e:09:40:41:2d:09:ac:
8e:75:47:de:e7:c7:f1:5f:5b:8a:a5:60:06:c5:d0:
39:7e:f1:86:fd:9e:36:bb:19:ae:9b:e0:83:19:50:
c5:ca:1d:39:20:36:d4:09:de:b7:ec:fd:15:aa:6e:
21:f7:46:46:48:f3:04:32:23:b7:c4:09:8c:a0:47:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:63:D7:60:36:6B:FB:FB:B5:CB:84:9D:5F:4A:A4:64:86:FB:6F
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/kZxj12A2a_v7tcuEnV9KpGSG-28.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
95:13:ee:2b:82:3d:37:82:c3:63:78:80:2f:ac:52:81:6a:d1:
55:0d:d2:d0:f0:f8:41:2c:ed:e2:96:30:67:3e:d1:d6:b5:f2:
f7:77:de:b8:97:f2:18:ef:e5:bd:43:3b:a0:16:25:02:5c:51:
59:34:c2:90:05:eb:ef:75:74:eb:da:54:0a:c0:44:b7:7d:7a:
1d:cf:a3:b4:a9:eb:b3:6d:e0:84:7d:b2:76:0e:44:92:77:8e:
07:18:9b:d9:d4:39:69:7c:85:e0:d0:2c:36:3c:b7:9f:bf:ca:
d2:d9:48:28:63:de:9c:a2:c5:bc:79:40:7d:3d:3d:af:aa:ad:
6c:8a:e1:70:43:af:80:a1:f1:f5:91:df:71:c0:ff:28:86:3d:
cf:3c:b7:29:f0:ed:bd:50:6b:3f:33:0b:07:82:f9:23:dd:0a:
fa:26:b2:52:3d:dc:6f:8b:2b:bb:27:1a:82:a5:28:d6:df:8a:
69:0b:4d:67:74:8b:25:bc:07:a6:a4:88:6c:03:46:8a:22:1a:
2f:3f:a2:01:c3:b9:3b:73:71:72:c1:cb:71:f0:1f:98:74:b8:
32:26:45:a7:ab:94:6e:2f:71:0f:55:75:25:1c:fc:ba:de:84:
72:43:45:8b:eb:d4:2e:fa:1b:43:f2:23:c6:b2:6f:8b:0e:de:
4c:00:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org