Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Qd99OmM8vKMBsIo-kyafdtXc55Y.roa
File: Qd99OmM8vKMBsIo-kyafdtXc55Y.roa (raw, json)
Hash identifier: BJdynSxUfFlWQNUx3cPqzjJ+mIdBd0WIswDVSycacvs=
Subject key identifier: 41:DF:7D:3A:63:3C:BC:A3:01:B0:8A:3E:93:26:9F:76:D5:DC:E7:96
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Qd99OmM8vKMBsIo-kyafdtXc55Y.roa
Signing time: Thu 15 Sep 2022 02:36:59 +0000
ROA not before: Thu 15 Sep 2022 02:36:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24158
IP address blocks: 124.29.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2716 (0xa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 15 02:36:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=41DF7D3A633CBCA301B08A3E93269F76D5DCE796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:80:f9:0a:6e:b9:7d:38:82:9c:70:74:13:
5c:94:39:33:48:c4:b5:39:61:af:ef:aa:f2:bd:89:
4d:d0:49:f6:94:d5:ba:f3:47:76:4f:72:3b:01:34:
8a:6d:37:40:18:1d:b4:ce:a3:99:ff:a7:68:31:87:
e9:1a:c0:1e:a1:99:23:e7:c3:fa:00:54:88:e6:ab:
c5:25:59:d5:d6:c1:9b:2f:9c:8b:c0:a4:04:f8:3b:
45:28:6f:57:c5:7d:6b:eb:b2:97:f6:c9:63:66:36:
ec:97:8f:0d:a8:50:bd:f5:f2:46:cf:f9:8c:e5:76:
c9:8a:c2:59:08:da:72:89:39:f4:84:35:3c:be:40:
b1:ca:3f:a2:89:95:45:ec:b5:e0:28:26:32:62:ea:
8a:31:cc:71:21:77:0d:7f:e0:2a:27:d7:d8:dc:97:
5a:29:65:7b:aa:62:f9:88:c5:e6:3b:3c:da:2e:29:
6a:dc:1a:34:7a:4d:83:e1:1f:5c:4f:12:d4:fa:49:
c7:2d:5f:b3:0a:39:8b:bb:6f:1d:ae:6c:08:e0:91:
12:a0:4d:35:91:49:a5:cc:30:36:f0:9b:7b:9f:ee:
4e:4c:54:49:2f:a4:98:af:45:71:a7:63:da:d6:ba:
09:17:ef:56:eb:b4:1f:1e:4c:03:48:b3:27:d0:10:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:7D:3A:63:3C:BC:A3:01:B0:8A:3E:93:26:9F:76:D5:DC:E7:96
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Qd99OmM8vKMBsIo-kyafdtXc55Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.29.160.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:33:70:ff:1e:ec:24:76:91:ff:a7:2a:d5:59:9a:31:6b:e1:
61:02:84:51:d0:92:22:3c:db:f0:04:07:f8:a9:9c:55:0d:9b:
97:c2:fc:33:b0:27:19:7a:8c:88:1b:77:4d:38:3e:2c:eb:e1:
72:0e:4c:1c:17:06:e0:fa:15:41:62:de:45:48:14:b5:93:c8:
18:38:9e:59:6b:60:83:1a:e4:2b:49:ba:b2:45:ae:71:d8:3a:
88:b4:4a:46:b8:83:cf:12:40:99:b3:65:60:f7:3b:20:91:b6:
5f:44:86:e1:65:6c:e0:55:bc:a6:fa:22:dd:10:bb:89:a3:41:
a9:3c:8c:f2:16:9f:ef:37:d6:c5:28:cc:c0:30:7d:09:72:ae:
5a:da:2a:0c:78:4b:85:d7:1c:6f:a0:d7:6b:83:af:6b:3c:65:
8d:c8:81:b2:88:19:ed:3b:48:e7:b7:2a:ce:65:53:31:6b:35:
14:c9:27:b7:1f:57:87:59:3c:8a:be:ad:9f:77:e1:a4:1d:44:
2f:90:5c:44:6d:f4:cb:13:e8:58:83:9e:13:b3:20:72:17:a7:
5e:8d:71:9f:32:98:1c:b8:e4:58:b4:8b:9b:7c:9b:64:ac:26:
7a:4f:d8:9a:8a:4b:02:3a:fa:17:39:b4:38:60:7b:60:b1:ce:
74:b3:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org