Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/YrdrilO64ZJALtasuqsHUfn4tGE.roa
File: YrdrilO64ZJALtasuqsHUfn4tGE.roa (raw, json)
Hash identifier: ajEETtzEBGaWg5x5GGT5mlx6uEXfdZIOacnCIajofF8=
Subject key identifier: 62:B7:6B:8A:53:BA:E1:92:40:2E:D6:AC:BA:AB:07:51:F9:F8:B4:61
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0923
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/YrdrilO64ZJALtasuqsHUfn4tGE.roa
Signing time: Wed 29 Sep 2021 02:50:24 +0000
ROA not before: Wed 29 Sep 2021 02:50:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 48024
IP address blocks: 103.122.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339 (0x923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Sep 29 02:50:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=62B76B8A53BAE192402ED6ACBAAB0751F9F8B461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:a6:97:23:2a:bc:28:7a:a0:9b:27:ec:ac:
f4:d4:28:89:50:87:af:23:6a:8a:78:31:0e:01:98:
c5:c5:fa:64:69:3c:b3:b6:1c:9c:88:47:3e:1d:25:
db:92:02:ba:76:d9:1a:3e:7e:a2:de:a3:e3:f6:3a:
ee:41:87:72:ac:98:d4:fb:a0:1d:f5:ca:bc:ff:8d:
d3:e1:dd:83:e4:ba:6d:2f:74:d1:99:81:d4:84:95:
bc:f2:5b:a1:4d:a6:27:51:92:d0:99:87:0d:f2:1e:
93:af:9c:61:9f:53:60:21:e9:23:e5:02:17:66:1e:
c3:19:c4:e2:7d:9f:b8:e1:3f:f6:ed:2a:b0:36:d5:
ae:db:ac:3c:d8:c2:1e:9a:1e:67:69:5f:b6:58:a8:
70:46:85:a5:03:8e:37:a2:55:c1:a5:6b:4c:4b:1f:
ed:23:bf:06:1e:10:d7:a0:92:5d:70:9f:b3:ad:ad:
b2:56:86:7f:6d:d8:be:12:84:30:d7:7a:66:73:40:
7d:b3:bf:7a:89:da:3b:52:9e:5d:d7:1f:fd:6d:bd:
68:f2:44:8f:3a:7b:ac:34:8e:f0:b6:bf:a6:34:6d:
85:43:a0:91:88:20:4f:fd:48:22:aa:e3:82:30:0b:
f7:52:cf:4c:61:f3:52:47:31:cc:7c:4b:30:15:60:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:6B:8A:53:BA:E1:92:40:2E:D6:AC:BA:AB:07:51:F9:F8:B4:61
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/YrdrilO64ZJALtasuqsHUfn4tGE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.20.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a3:de:df:83:39:53:5a:4d:dc:de:2a:ef:95:7c:de:f1:52:
0f:b4:dc:a9:d3:fe:06:fd:b0:4d:d4:ce:f5:ca:27:68:d1:e9:
56:b2:dc:22:f5:3e:de:b9:01:62:c0:e7:46:81:09:e3:54:e3:
47:9d:bd:23:6c:93:01:50:f6:ec:4d:45:48:ef:04:10:dd:05:
69:18:0d:82:86:13:61:51:b5:14:da:2f:28:9b:63:2b:6a:16:
ae:af:d1:d4:2e:cc:a0:54:3a:fd:d0:ec:33:4f:92:57:36:6d:
9e:11:65:8c:c0:33:65:ae:78:82:62:b7:52:59:9a:5b:c2:ab:
03:fc:d3:03:03:f2:0a:9a:61:a8:b7:56:43:e6:dc:d3:82:b0:
e3:c4:0a:73:b0:43:d4:a1:25:e5:eb:05:5b:54:ce:7b:ee:2e:
a1:07:65:fb:d6:85:29:64:ca:73:a6:43:2b:bb:cc:00:6d:97:
80:cc:00:12:a4:25:1e:6b:4a:0b:cc:bb:4c:36:6c:ba:41:c5:
03:91:d1:4f:da:0e:bd:39:cd:1b:a8:01:7e:06:c7:80:ae:c4:
54:55:3b:b3:78:46:46:5c:8c:a6:76:92:46:84:19:47:c0:2b:
a0:f1:0e:82:37:78:3f:71:a3:5d:a9:57:29:85:45:61:6e:51:
1b:86:da:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:01 2025 by rpki-client