Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/7MD-YLPjYSN-7-D315izTOzujL4.roa
File: 7MD-YLPjYSN-7-D315izTOzujL4.roa (raw, json)
Hash identifier: aPhGm265ZaLHRAl5DxGC8Zu35dFvCdu/m0EixdrCkSs=
Subject key identifier: EC:C0:FE:60:B3:E3:61:23:7E:EF:E0:F7:D7:98:B3:4C:EC:EE:8C:BE
Certificate issuer: /CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B
Certificate serial: 07
Authority key identifier: 45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/7MD-YLPjYSN-7-D315izTOzujL4.roa
Signing time: Mon 14 Nov 2022 09:51:52 +0000
ROA not before: Mon 14 Nov 2022 09:51:52 +0000
ROA not after: Thu 09 Nov 2023 15:30:09 +0000
asID: 9678
IP address blocks: 103.37.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B
Validity
Not Before: Nov 14 09:51:52 2022 GMT
Not After : Nov 9 15:30:09 2023 GMT
Subject: CN=ECC0FE60B3E361237EEFE0F7D798B34CECEE8CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:15:24:a6:4e:53:43:77:37:2d:2c:21:6a:
7a:5f:8c:b2:6f:77:9f:a4:39:b5:7b:43:47:55:91:
96:a4:23:8e:1c:a7:10:2e:0a:00:75:03:3d:fc:1b:
12:37:14:eb:f3:ef:6b:a4:8a:3b:5f:c8:23:63:75:
5b:c1:6c:23:af:10:aa:99:f7:35:20:31:7e:4b:e6:
d4:30:05:d7:73:69:1d:3f:9b:2b:b4:64:12:e5:2e:
c5:c4:ce:a2:b6:2a:59:b8:df:14:07:bd:2e:07:e2:
f1:b2:8f:dc:f7:c0:d1:7c:8e:42:73:97:a0:9e:00:
ff:55:69:34:31:03:41:63:e0:84:56:fe:fd:30:45:
80:b3:27:cc:e6:3a:b3:36:5d:ee:4c:64:2f:95:80:
42:a1:98:96:30:29:15:f6:d2:59:3d:f6:59:36:69:
e4:66:69:1e:4c:44:8f:d3:bf:86:64:ec:98:86:37:
f4:e7:b4:31:b3:67:3b:9f:03:85:63:b1:19:1e:1d:
5d:69:56:18:06:99:b9:d3:55:46:55:61:68:04:f2:
81:9e:c6:79:ef:f5:43:14:ee:22:ba:c7:36:08:b1:
ce:22:22:ad:a1:6a:f4:a6:47:45:46:8a:0e:77:8c:
33:77:ed:1e:a0:0d:8e:de:35:25:9f:26:d2:41:b9:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:FE:60:B3:E3:61:23:7E:EF:E0:F7:D7:98:B3:4C:EC:EE:8C:BE
X509v3 Authority Key Identifier:
keyid:45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/7MD-YLPjYSN-7-D315izTOzujL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.5.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c6:74:3a:e0:28:40:33:8e:2f:e8:34:ba:50:42:37:58:ca:
7b:1d:9e:e8:a0:23:6c:eb:ec:75:1a:89:25:6c:8a:d8:3a:5d:
21:1f:0b:6f:7e:94:d0:a8:88:2a:e3:a9:97:33:91:de:41:a3:
4a:0e:71:6a:44:8d:5f:d8:89:67:49:47:bb:58:2b:d7:9d:8d:
78:ce:cf:66:5c:be:15:3b:5c:e9:f5:ff:3c:28:36:0f:14:50:
00:21:5f:66:26:f0:99:de:c8:e2:d4:b9:c2:8a:96:10:d9:2e:
de:0c:32:05:b7:97:40:b3:f9:80:fb:99:7e:88:6a:da:f5:16:
2c:d8:f0:de:54:9d:0f:e3:d7:d5:aa:39:97:f8:4a:92:5e:bf:
e9:a6:59:a8:00:dd:b8:2d:f5:12:e9:32:1b:c1:12:23:3e:8e:
71:ba:13:b7:07:55:8a:3a:e6:5a:f1:a7:de:a4:b4:39:80:3e:
61:e2:83:29:83:27:8b:59:57:69:83:63:01:57:88:01:75:70:
ca:10:1c:13:04:50:d2:2a:4f:6a:f0:6c:03:d9:ba:61:6a:23:
91:ba:17:8c:de:fe:31:96:91:c3:ad:03:0c:ae:d7:7f:d8:e9:
36:d3:57:15:c1:43:6b:6b:6d:05:ac:36:6a:1c:94:83:a5:26:
1c:09:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:42 2025 by rpki-client