Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SMCI/Ik5NPQiE1OUXRjIKsrW5MI-KJD0.roa
File: Ik5NPQiE1OUXRjIKsrW5MI-KJD0.roa (raw, json)
Hash identifier: HJ8NMdFEIp86ipgMEKCWr451GE0UbN3A31VYS35pIw4=
Subject key identifier: 22:4E:4D:3D:08:84:D4:E5:17:46:32:0A:B2:B5:B9:30:8F:8A:24:3D
Certificate issuer: /CN=8856EA5549A2F41D847CD86A460B5026C14A6EE3
Certificate serial: 07
Authority key identifier: 88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/Ik5NPQiE1OUXRjIKsrW5MI-KJD0.roa
Signing time: Wed 27 Apr 2022 00:46:21 +0000
ROA not before: Wed 27 Apr 2022 00:46:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 63894
IP address blocks: 103.162.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8856EA5549A2F41D847CD86A460B5026C14A6EE3
Validity
Not Before: Apr 27 00:46:21 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=224E4D3D0884D4E51746320AB2B5B9308F8A243D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:f3:3a:6f:9c:ca:5f:08:d4:88:48:27:90:
72:18:72:83:55:90:4a:16:f3:65:a2:73:6f:55:22:
f6:e9:cb:63:d7:60:97:5c:4b:f3:54:b7:90:05:15:
b7:8a:9f:fa:b2:e8:66:25:8c:2c:73:32:0b:10:d6:
5d:a7:4f:1b:ba:ae:b4:e6:55:1e:11:16:f1:42:5c:
d5:a9:81:bc:53:b7:45:c7:70:08:71:ed:68:5c:88:
d2:78:ae:f7:f3:40:ea:1b:92:3c:bb:01:47:ed:90:
bd:5e:0b:14:7e:59:95:3b:8f:74:f5:51:65:6f:e7:
aa:cb:45:30:cc:e4:fc:75:f7:ff:57:a0:b4:1f:4e:
ee:6e:00:b3:15:c0:1a:2e:b0:87:46:94:9c:0b:b6:
db:79:b9:65:e6:5c:55:c1:65:85:f3:60:9b:eb:21:
b6:e9:02:74:a9:ca:f5:42:a9:8f:85:13:ef:99:97:
45:70:78:15:bc:69:9b:4a:3d:74:b5:3e:5a:27:17:
4b:e8:2f:a1:29:98:39:dc:77:3d:cd:c0:c7:35:bc:
5e:29:d1:64:5c:e0:54:84:c8:cb:c3:2f:10:ea:3a:
8c:5c:22:32:36:98:d0:b1:17:c6:8a:3f:3f:f3:e4:
5d:7d:be:54:c4:32:d8:6e:04:a9:dc:b5:09:6b:7f:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:4D:3D:08:84:D4:E5:17:46:32:0A:B2:B5:B9:30:8F:8A:24:3D
X509v3 Authority Key Identifier:
keyid:88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/iFbqVUmi9B2EfNhqRgtQJsFKbuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/Ik5NPQiE1OUXRjIKsrW5MI-KJD0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:e5:d0:68:ac:9a:c3:00:17:b4:7f:3a:cf:ee:e3:bc:f8:f7:
7c:e1:8b:44:01:95:ce:f7:6f:4e:09:00:a0:e3:98:96:8a:61:
1a:90:3c:f7:74:37:00:98:4c:8e:96:d4:37:de:d6:fa:7e:84:
3c:62:95:12:35:52:91:bf:d9:26:a8:ee:94:c7:96:8c:a7:a1:
f7:33:0a:57:1f:9c:65:85:27:86:4e:35:bc:6f:3c:00:7a:01:
93:7f:76:5e:6b:a3:3c:2d:66:35:da:92:90:ab:d2:6d:8c:bd:
6a:f8:c0:aa:be:f9:dc:02:c0:6b:69:ac:75:6f:2d:d4:ec:b8:
68:2e:c2:c0:7e:26:cb:06:18:22:88:e2:b2:fb:19:25:15:ad:
94:05:c1:41:b6:d9:b6:e1:35:43:bd:2a:fb:81:11:bc:d3:4a:
c4:a9:99:e5:fa:3e:08:d4:a4:55:82:25:f2:d8:ae:a8:bb:37:
24:4f:e3:18:0e:b7:89:8d:00:d2:50:10:b4:58:a5:f4:bc:79:
74:64:51:c4:d3:f5:6f:f9:d2:8a:3b:34:d4:a1:a1:54:27:f4:
a4:7e:a3:b4:20:8a:41:54:e9:f0:a9:96:1f:a4:f2:54:b4:d9:
9f:aa:46:ce:66:d9:fe:2b:75:45:c8:c8:27:72:cb:f7:80:b5:
c3:a2:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org