Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/kanAVKTzSdwum5_cp3a4qPM9mx4.roa
File: kanAVKTzSdwum5_cp3a4qPM9mx4.roa (raw, json)
Hash identifier: 26AwNiIlJ37rnj70tVacjWhXaDAkoF2NzPccFKvTaNg=
Subject key identifier: 91:A9:C0:54:A4:F3:49:DC:2E:9B:9F:DC:A7:76:B8:A8:F3:3D:9B:1E
Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial: 0BAE
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/kanAVKTzSdwum5_cp3a4qPM9mx4.roa
Signing time: Mon 20 May 2024 15:08:02 +0000
ROA not before: Mon 20 May 2024 15:08:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.42.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Validity
Not Before: May 20 15:08:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=91A9C054A4F349DC2E9B9FDCA776B8A8F33D9B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:ad:5d:99:6b:f9:94:fd:de:02:da:4a:68:
b9:72:e8:d5:a9:f0:e5:7a:de:4c:bd:6a:73:6d:52:
90:1c:cb:1b:cf:1a:a9:76:06:28:24:6f:b7:33:e7:
e8:c3:57:75:02:0b:c1:e1:5a:7d:67:f7:6b:34:e5:
7d:46:45:26:44:24:5c:c3:1d:24:74:e8:d3:53:27:
0c:60:b6:1d:e8:d1:98:8e:e0:8a:dc:de:c5:f0:5a:
38:48:92:bc:56:c2:92:d1:2c:ec:f7:2c:11:fb:ff:
4f:67:0d:aa:85:f1:09:5a:f2:8b:67:7a:88:4a:0d:
0e:a5:87:f8:1b:78:03:e0:e0:81:63:65:31:57:ea:
a1:aa:bb:70:07:36:1c:fb:8d:62:36:b8:a7:74:27:
1b:2a:82:d5:74:1a:71:33:44:f0:4b:6b:dd:d2:07:
b5:6a:13:ed:73:82:75:9d:b7:9b:00:70:d2:23:81:
d8:f8:b3:d7:69:e5:5a:4a:ac:46:2b:8f:90:1f:e9:
d9:7e:5a:e7:17:ad:3c:65:c7:83:e2:13:2a:46:87:
4e:b2:98:48:6d:10:0a:31:7d:c5:e9:02:43:70:fe:
76:8b:08:89:3f:a2:c5:6b:a7:fb:ec:b1:51:53:9f:
eb:30:b7:51:53:de:12:5a:f1:80:1f:2f:f1:bb:a2:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:C0:54:A4:F3:49:DC:2E:9B:9F:DC:A7:76:B8:A8:F3:3D:9B:1E
X509v3 Authority Key Identifier:
keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/kanAVKTzSdwum5_cp3a4qPM9mx4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.144.0/22
Signature Algorithm: sha256WithRSAEncryption
75:7c:31:36:e1:4c:df:99:c5:a7:f4:83:46:c9:e0:a8:33:df:
4b:ec:25:cd:19:97:3c:76:d4:b6:33:06:f5:da:96:dd:b8:6d:
51:c7:20:93:b5:17:e2:48:c1:b9:b1:e6:ee:de:78:75:2f:24:
e5:1d:60:50:08:ab:53:a7:08:06:9e:a9:81:98:27:e5:5e:af:
84:45:70:0c:d6:a3:a6:56:ac:99:4c:09:84:71:46:aa:fb:91:
00:81:3e:66:a2:da:d5:8d:3b:2c:48:b6:73:37:87:54:d4:db:
0e:8d:99:e1:76:79:2d:18:53:17:25:ad:0f:7f:af:50:22:0c:
fa:9e:bf:a9:b6:8e:5e:65:2c:f8:dc:f2:61:fb:06:1d:ea:24:
cf:23:5b:1e:97:28:95:90:d6:9e:f1:96:53:9b:be:65:a1:48:
c1:7d:97:53:e6:2e:da:df:e1:47:66:fe:05:80:11:79:b1:da:
d3:6c:58:06:f4:b6:e8:01:b8:9b:9f:e1:7f:e9:e9:d2:83:1f:
56:f2:7c:a7:dd:25:95:21:12:b6:65:01:ad:d4:ea:fd:58:1f:
6c:d5:d9:11:dd:89:7f:b0:36:2a:d0:06:47:06:16:32:60:e9:
c4:40:63:fa:3e:a1:57:a4:f2:d6:3b:bc:70:44:5a:1a:76:a5:
bd:23:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:21 2025 by rpki-client